Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07FDEAD56F11EF80FC8093762E951A.roa
File: 9D07FDEAD56F11EF80FC8093762E951A.roa (raw, json)
Hash identifier: iaLD29QC1PSA6eBGUym/9G2r83jYM6qQw2lZtg6buXo=
Subject key identifier: D8:0E:00:54:93:77:B3:1B:51:BB:F8:14:16:E6:6C:82:00:B6:CD:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07FDEAD56F11EF80FC8093762E951A.roa
Signing time: Sat 18 Jan 2025 07:41:22 +0000
ROA not before: Sat 18 Jan 2025 07:41:19 +0000
ROA not after: Sat 22 Feb 2025 07:41:19 +0000
asID: 55020
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81312 (0x13da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:41:19 2025 GMT
Not After : Feb 22 07:41:19 2025 GMT
Subject: CN=678b5b22-aef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:b1:32:1f:43:89:f3:cf:94:ca:76:7e:fe:
4c:9e:25:1c:77:fd:33:1a:aa:76:aa:f5:d7:2c:dd:
bf:4c:a2:c3:aa:ba:bb:e2:de:af:9e:c0:49:c0:03:
48:e4:92:2e:f8:1d:b7:0e:68:7b:8b:e1:8b:cb:4f:
37:90:e0:ba:cd:1d:c9:c3:47:6a:cf:81:22:84:c5:
72:1d:d5:9a:da:4d:33:9d:f1:28:99:ed:6b:de:22:
fc:f5:27:de:77:0b:3c:26:41:8b:cb:d7:e8:cd:8b:
85:b9:08:8f:c7:84:b9:9e:80:50:e8:dd:01:ef:b4:
10:6d:78:41:64:a6:58:6a:87:e8:b7:af:a7:ab:fb:
c0:e9:14:19:da:81:67:84:fd:f8:24:36:c1:f0:95:
a0:52:18:13:fc:de:c6:a1:65:85:d5:f2:93:62:7d:
50:f7:62:ea:a5:59:96:0c:e1:80:56:0a:22:8f:53:
d7:29:79:22:b2:92:01:e4:c5:f1:19:0f:e0:20:5d:
43:c5:c7:b2:1d:de:8b:c0:4e:bc:f2:07:64:6d:3e:
44:59:01:f1:c2:04:d5:30:8c:48:73:02:e2:17:8e:
92:05:b1:99:5f:af:85:cb:91:52:81:b6:b2:8d:f0:
51:d4:36:37:35:83:f4:4d:a9:89:1a:1e:6d:b4:d8:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:00:54:93:77:B3:1B:51:BB:F8:14:16:E6:6C:82:00:B6:CD:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07FDEAD56F11EF80FC8093762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:5b:c3:ac:0e:b4:31:c9:4f:43:08:ff:fc:d0:87:67:c5:22:
73:53:13:1a:ec:90:d2:2c:a5:45:f0:ed:ab:54:ed:b8:a5:52:
34:5b:d0:a6:08:7e:5b:7a:e5:28:33:a9:8e:7e:71:b9:14:8b:
6a:ba:fb:d9:28:9f:95:b5:32:93:3c:2f:31:20:ed:e1:49:04:
bb:6e:11:21:78:37:3d:09:79:fe:f5:54:8c:e7:a8:3b:f4:24:
5b:b2:17:83:8c:45:b2:44:43:a4:be:29:98:52:5e:fe:e5:88:
6b:f9:8e:27:3d:01:9d:fc:f7:a9:67:a0:08:6d:cd:21:21:39:
2d:4d:bf:ab:21:54:f7:03:3f:b8:8e:69:ef:59:00:06:5d:34:
a0:fd:23:88:a9:1f:38:4e:bf:54:29:5d:81:c1:81:e9:14:3e:
03:79:62:72:48:6c:dc:ee:87:d5:56:0c:f5:cb:2b:87:9e:9d:
ff:fd:2d:54:05:03:f6:7f:50:1e:5e:32:9a:ac:ce:8b:36:4d:
f7:bf:af:e7:44:5c:ce:13:78:d4:9d:26:70:41:45:85:4f:2c:
70:54:e7:b7:35:c4:c1:ff:24:32:77:bc:d0:84:1f:82:2a:21:
19:d4:a9:4b:82:c7:86:1a:82:27:a5:53:ca:f2:08:c0:64:ac:
79:2b:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:23 2025 by rpki-client