Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2E1AA2DA1411EF93C2E445762E951A.roa
File: 8F2E1AA2DA1411EF93C2E445762E951A.roa (raw, json)
Hash identifier: ktjdkNTqXJqfuVw/32j3cIpnFsjtO65QhnH1hCXurqI=
Subject key identifier: 41:3E:8D:6B:80:58:B3:82:76:FB:59:94:3E:D8:2E:11:12:7C:15:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2E1AA2DA1411EF93C2E445762E951A.roa
Signing time: Fri 24 Jan 2025 05:32:11 +0000
ROA not before: Fri 24 Jan 2025 05:32:07 +0000
ROA not after: Sat 01 Mar 2025 05:32:07 +0000
asID: 44559
IP address blocks: 154.203.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82906 (0x143da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:32:07 2025 GMT
Not After : Mar 1 05:32:07 2025 GMT
Subject: CN=679325db-7c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:35:c4:b1:13:62:68:73:4f:51:0b:81:b9:
4d:7a:74:c5:28:ed:e9:4c:b3:fb:13:14:f3:c3:f1:
fb:1e:40:8e:7a:b3:da:d1:30:d7:da:18:ca:c8:41:
58:6e:38:1b:52:cd:1a:30:c1:d1:53:00:fe:f6:29:
c9:f4:29:f8:6a:fa:55:ce:28:c7:9f:33:34:29:69:
db:86:b4:e6:76:a8:96:b1:95:da:3b:dd:fa:f9:5b:
27:c6:a8:9f:c0:63:35:37:9f:36:6d:c2:d8:88:32:
12:70:ec:55:a1:b6:e2:7f:15:a8:0a:e0:4a:fe:86:
17:26:02:f4:bc:5c:b7:e2:00:60:4b:3b:fa:ce:be:
61:ef:e5:eb:c6:1c:29:c5:14:aa:21:8d:17:2d:0f:
da:6f:e8:38:ef:b0:1d:83:02:a6:58:fc:ae:c2:81:
98:0f:ba:63:39:35:ab:e5:22:e7:10:b6:ab:c7:0a:
35:c3:da:d5:29:f1:59:46:33:f9:fd:22:2b:9f:af:
32:8f:73:5d:e0:b7:20:60:bb:58:37:5c:6d:87:b6:
1a:7f:9d:c6:61:1a:27:58:46:d6:e5:0a:45:92:78:
99:c9:3a:1e:b3:15:b1:3c:d6:08:3f:7c:3d:40:78:
12:e4:b0:62:63:17:aa:92:bf:85:b4:59:ec:68:f7:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:8D:6B:80:58:B3:82:76:FB:59:94:3E:D8:2E:11:12:7C:15:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2E1AA2DA1411EF93C2E445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f8:c0:c7:a3:5d:85:07:23:b2:71:6d:ce:d6:12:24:d6:6d:
11:7e:75:b2:53:e7:bd:06:63:d6:eb:cf:10:6a:45:e5:a4:02:
e1:f8:79:a0:a2:2c:d2:7a:af:a2:f0:e3:77:66:4e:a9:ac:1a:
ae:e3:85:c7:0b:ce:dc:23:bc:67:4e:5a:6a:78:b4:39:2e:34:
a1:bd:16:81:4d:fe:66:31:86:ff:f3:f7:8a:d6:ea:10:97:4d:
ce:8d:9a:dd:5f:a3:06:c8:07:5f:95:b6:f1:2d:fd:16:e1:fc:
d5:00:fa:23:a9:15:12:2e:5c:50:3f:c0:1c:16:d7:a0:0f:30:
a9:ad:98:50:24:55:7d:47:9a:f0:f8:30:37:cd:7b:e5:ec:51:
6e:5d:d6:4b:12:85:2a:00:94:92:c3:14:f8:22:3d:b0:1e:13:
6e:51:48:3e:bc:6f:22:7f:40:32:6a:6f:aa:24:42:c1:cb:ea:
5d:26:4e:63:95:73:7c:7d:86:f9:ff:fd:1a:27:16:66:a1:d3:
49:d5:f8:ea:c1:df:c0:df:e6:57:97:a4:5e:20:53:c1:cd:6f:
d9:25:e6:02:d0:04:66:16:1e:68:b5:08:7e:3b:20:ff:92:7e:
32:d1:72:8a:55:70:82:de:9c:a4:76:9e:c2:48:1e:63:19:27:
07:92:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:32 2025 by rpki-client