Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952CE0BCDA6611EF8E70F86D762E951A.roa
File: 952CE0BCDA6611EF8E70F86D762E951A.roa (raw, json)
Hash identifier: DI1beijo+wa7j0AnE6twxDcMs76DipCne636uPXcLeg=
Subject key identifier: F2:C2:63:29:A5:AB:86:50:57:CD:BE:8A:52:9E:A1:5F:7F:D1:72:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01489E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952CE0BCDA6611EF8E70F86D762E951A.roa
Signing time: Fri 24 Jan 2025 15:19:20 +0000
ROA not before: Fri 24 Jan 2025 15:19:16 +0000
ROA not after: Sat 01 Mar 2025 15:19:16 +0000
asID: 18779
IP address blocks: 154.206.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84126 (0x1489e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:19:16 2025 GMT
Not After : Mar 1 15:19:16 2025 GMT
Subject: CN=6793af77-7576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:90:fd:ec:8a:fc:63:46:81:1a:7b:c1:e5:
c3:59:57:d6:0c:7c:4e:93:f3:65:1d:98:ad:31:ac:
e4:d6:6d:c4:68:4b:c2:47:f2:c3:2b:a7:7d:98:3e:
0d:31:b6:1c:b8:f1:1b:e6:0a:99:88:4e:e2:d3:e6:
ac:19:13:c5:9c:ac:16:a9:44:69:2d:f3:8b:91:9a:
0b:e8:f4:b0:48:89:a0:2c:f5:1e:c9:93:86:3e:f9:
25:f9:4b:1b:b2:ac:5c:20:46:43:cb:f8:3d:f5:36:
12:a3:8d:fd:c1:31:57:39:b2:8f:88:6f:6e:a7:36:
6b:10:30:2f:31:52:e1:83:c5:4a:31:9c:3c:6d:90:
38:fc:5d:58:ad:48:d3:d5:f7:81:22:2b:63:70:bc:
46:f9:ba:62:a9:2e:98:80:9b:a4:9d:0a:03:8c:92:
4c:21:7a:5c:35:27:ff:55:bc:ee:54:0a:45:49:5b:
76:40:2d:85:36:ea:44:91:88:12:75:e8:fc:d2:db:
15:97:a1:86:33:42:15:53:50:d9:13:11:ee:89:cf:
81:79:87:bd:17:da:99:e1:92:a0:06:34:e6:d2:9a:
4b:9d:78:13:7a:59:3a:4f:17:0f:49:cf:4d:48:24:
d1:d1:7b:96:04:4f:c0:1c:c2:db:44:8e:ff:d0:1f:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:63:29:A5:AB:86:50:57:CD:BE:8A:52:9E:A1:5F:7F:D1:72:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/952CE0BCDA6611EF8E70F86D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.20.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a7:5d:b5:1f:d6:33:d6:4f:9d:31:46:df:dd:92:1d:2b:f5:
8e:ba:e9:28:9b:88:28:a7:fa:3d:d6:db:18:fb:c9:bb:73:1b:
99:19:44:27:e4:f9:85:9b:86:86:00:da:d3:d7:59:74:42:a0:
c9:c9:25:99:36:46:f7:10:df:5a:cf:92:76:7c:b7:ae:48:16:
60:8b:ac:b4:5d:8e:60:87:8a:c5:25:68:d6:a5:d5:5d:27:f8:
02:89:e4:88:0c:57:25:ba:6c:54:ef:25:5c:0e:4f:b7:b4:d8:
e0:99:8c:0f:b3:ad:31:e4:ab:fb:8e:a6:1d:d2:98:54:b2:fb:
62:89:3a:3d:87:e5:81:1f:7c:b0:db:69:cf:54:31:7c:2b:63:
3d:c7:3c:cd:a6:66:36:c9:03:b6:03:dc:aa:2f:b6:98:44:5e:
7a:e2:d4:30:73:82:9f:c5:4b:29:5a:8c:6d:48:41:f9:aa:64:
9c:84:0a:01:d5:0d:b8:f3:62:46:3b:61:74:a1:ce:8e:50:23:
a9:2b:5b:55:2b:41:b7:cc:c1:cc:b5:3d:ba:2f:32:50:2f:16:
e4:67:aa:00:0d:62:ca:92:c5:be:47:ea:d5:ce:25:03:be:28:
8b:89:d0:55:2d:c6:8e:25:a5:23:3d:bd:bd:2a:92:ed:90:f9:
e2:b9:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:43 2025 by rpki-client