Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBA2006D8AF11EFBA83A15C762E951A.roa
File: 8CBA2006D8AF11EFBA83A15C762E951A.roa (raw, json)
Hash identifier: ThpMnYUKo0ehykRYI0wyT698Iu0n3b7e8NoEZm3JZag=
Subject key identifier: D8:03:3A:9E:9D:B4:3C:B6:89:86:1B:8E:18:42:01:D2:F6:BE:83:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBA2006D8AF11EFBA83A15C762E951A.roa
Signing time: Wed 22 Jan 2025 10:56:36 +0000
ROA not before: Wed 22 Jan 2025 10:56:33 +0000
ROA not after: Sat 08 Feb 2025 10:56:33 +0000
asID: 150008
IP address blocks: 154.206.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81632 (0x13ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:56:33 2025 GMT
Not After : Feb 8 10:56:33 2025 GMT
Subject: CN=6790cee4-e3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:05:4c:f0:96:f3:ff:86:52:dc:3d:5f:61:
d5:40:27:28:65:82:ff:1d:7a:d4:9f:eb:6d:fe:5a:
03:30:e5:e4:4a:c1:fd:03:64:2f:6c:0f:30:6a:cf:
cb:ae:7c:9e:e2:e2:a8:f3:a5:a4:92:d9:61:b0:e1:
c4:1a:6e:11:3d:16:8c:dc:3f:b4:14:0a:ff:5f:2d:
22:d5:26:bb:27:01:14:70:77:83:70:ba:78:93:5b:
85:cb:1e:e5:42:40:91:af:37:a2:6a:a5:46:ed:30:
cc:03:65:04:57:3c:53:51:5c:11:99:66:09:3a:7a:
3b:4e:41:1e:f4:4b:5a:e0:a6:4e:19:ec:9e:e0:81:
42:49:57:41:c3:7c:1e:20:47:e6:c1:5d:09:78:d8:
6b:0e:a3:81:8d:f0:ba:8e:46:6c:14:19:7d:e1:83:
13:02:53:3f:80:20:be:69:b3:f9:90:a3:b3:13:10:
4c:4a:86:da:49:4f:b4:24:02:5d:f0:d8:03:47:b3:
57:5b:3d:f4:15:d2:1e:1d:26:12:59:e9:89:6e:cb:
29:9b:35:d9:ce:57:b8:ee:07:ef:c7:f9:81:39:31:
26:3a:59:13:14:a6:ef:45:e5:56:35:42:89:53:b5:
e6:ba:68:07:47:bd:b6:d2:ed:31:e6:e4:1c:48:64:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:3A:9E:9D:B4:3C:B6:89:86:1B:8E:18:42:01:D2:F6:BE:83:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CBA2006D8AF11EFBA83A15C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.25.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:26:e0:6d:84:8b:54:0c:60:ca:60:78:97:a3:a4:79:24:77:
31:a4:98:ea:2c:90:76:91:ea:70:37:5b:09:86:36:68:4a:5d:
7e:1c:72:39:be:37:d5:bf:fb:ec:95:13:5f:10:57:bb:0e:25:
7e:4a:8e:76:2a:3d:12:58:91:64:e5:fe:f2:de:ce:ba:e2:b1:
9c:0d:1a:33:25:f9:db:4d:94:6a:5e:c9:eb:c3:62:27:57:42:
63:2e:78:c4:bb:73:0b:ef:b1:1b:d9:ab:a4:a5:67:a0:3e:70:
a9:b6:74:70:b3:6d:c9:ac:2a:70:da:78:ad:0c:80:f0:fe:4d:
0e:af:f3:bb:5d:80:ae:ff:72:af:b6:11:44:e4:bf:d3:d0:c7:
88:22:e4:3d:58:1a:ea:c5:a5:ad:47:e8:bb:25:6c:e6:83:9f:
db:3f:cb:65:89:61:19:f5:f3:28:23:7c:65:15:0e:12:89:7b:
d2:a4:3a:d1:92:e5:3c:c5:53:ae:c7:fa:58:a6:5b:38:74:5b:
f8:6a:17:87:01:31:ac:60:6b:d0:19:b9:5f:be:f1:ad:cc:33:
d1:d6:05:1e:48:b1:8b:88:79:a5:9e:3b:3e:21:76:9f:1c:a9:
f6:7b:41:9c:e6:58:30:69:ed:df:ff:f0:a5:13:5e:cd:54:29:
ae:a8:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:14 2025 by rpki-client