Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADC96B0CAD111EFB12E5E48762E951A.roa
File: 8ADC96B0CAD111EFB12E5E48762E951A.roa (raw, json)
Hash identifier: dFVrkp7nzZIyFbnsSpUOi23YJgiMbrL9RTa1CY2sfOk=
Subject key identifier: D6:82:98:D4:19:6A:7B:4E:99:A3:A4:27:88:04:83:7C:7F:D3:C1:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013517
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADC96B0CAD111EFB12E5E48762E951A.roa
Signing time: Sat 04 Jan 2025 19:24:40 +0000
ROA not before: Sun 05 Jan 2025 19:24:36 +0000
ROA not after: Sun 09 Feb 2025 19:24:36 +0000
asID: 203020
IP address blocks: 154.217.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79127 (0x13517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:24:36 2025 GMT
Not After : Feb 9 19:24:36 2025 GMT
Subject: CN=67798af8-be5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:f7:09:af:2a:f5:e6:f1:83:e0:a9:61:59:
2f:4a:32:17:7b:7d:aa:6c:f0:40:1f:21:b9:0b:46:
4d:b7:e0:00:02:42:90:81:14:03:ea:49:de:10:83:
09:52:62:02:4c:f3:a6:54:bf:1f:a7:09:4c:1a:44:
61:0f:4d:46:43:64:b5:e1:d9:4a:25:49:6a:9c:51:
a7:9e:e2:f1:b8:fd:0f:e3:c6:64:61:be:08:17:b1:
12:19:22:cd:c0:b0:ed:92:af:75:eb:2a:0f:5e:91:
72:e3:32:76:e5:ea:d4:fd:4d:d9:cf:69:ff:20:51:
b4:5a:d8:48:54:53:38:82:dc:ee:6d:64:ce:0f:0e:
44:b7:64:4d:89:a4:a8:be:89:60:64:97:ac:b8:0b:
6d:1c:9d:82:94:21:63:9b:d4:df:4e:4e:9c:0e:40:
80:7a:2a:3b:bd:d4:15:f8:76:83:53:6f:05:32:b5:
59:64:e5:98:84:df:50:96:15:7d:35:48:c8:4a:84:
12:d9:e5:63:a8:b1:e7:81:97:02:61:27:f5:85:64:
1c:3b:16:2c:f6:8c:0e:0a:a9:e3:73:76:08:02:75:
1b:48:13:37:84:92:61:d9:a0:de:aa:8d:57:ca:80:
60:5f:9a:76:1f:4b:5e:16:8d:97:99:db:af:bd:73:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:98:D4:19:6A:7B:4E:99:A3:A4:27:88:04:83:7C:7F:D3:C1:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ADC96B0CAD111EFB12E5E48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:35:86:0b:e5:11:67:13:da:53:5a:ac:25:31:d3:a7:70:57:
97:44:65:a3:32:d0:40:a8:16:33:7d:c1:4a:05:29:23:f6:9a:
d8:c0:03:53:a9:c0:49:c9:41:65:9c:e5:28:bb:d9:97:d0:46:
03:7a:97:8a:9f:99:d3:01:e5:e0:bd:45:44:a9:6b:f0:df:95:
3a:f2:60:f5:c3:06:03:66:ad:46:b8:5a:53:b2:18:01:b6:79:
a4:5a:84:8d:f2:1e:fb:f9:d4:a1:47:20:49:c1:af:ef:0d:bb:
11:60:23:cf:3c:f3:65:ef:60:72:b6:34:37:fe:48:42:6b:31:
37:37:2b:35:7d:73:a0:b0:8f:e6:a9:22:86:78:ee:74:a3:f3:
d9:0d:a8:95:15:25:6d:fa:27:90:9c:95:9e:69:a3:1a:b7:71:
a5:e6:e3:ca:6d:45:16:19:b1:77:33:10:b8:21:d6:c6:c0:3b:
29:d4:1e:19:4e:02:1b:0c:d2:bc:b7:fc:73:8c:9e:b5:cf:5b:
88:90:c8:cb:18:78:c8:03:01:44:22:06:25:c6:5f:06:7b:8b:
37:cf:af:3a:0a:28:1f:64:9a:4b:4f:06:54:db:26:05:50:d1:
27:1e:c6:e6:f3:a5:7c:35:07:ea:a2:d5:c5:bc:f7:b5:6d:21:
a1:07:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:25:53 2025 by rpki-client