Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE6F9B2D8A911EF92D950B4762E951A.roa
File: 9EE6F9B2D8A911EF92D950B4762E951A.roa (raw, json)
Hash identifier: 7a99Vh2algmMp32kEn0u9CpBRh2vKTjrSt7pNrA61vg=
Subject key identifier: 76:3D:89:28:57:CA:12:0B:54:E5:DA:57:82:FE:60:AC:40:9C:45:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE6F9B2D8A911EF92D950B4762E951A.roa
Signing time: Wed 22 Jan 2025 10:14:10 +0000
ROA not before: Wed 22 Jan 2025 10:14:06 +0000
ROA not after: Sat 08 Feb 2025 10:14:06 +0000
asID: 18229
IP address blocks: 154.210.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81586 (0x13eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:14:06 2025 GMT
Not After : Feb 8 10:14:06 2025 GMT
Subject: CN=6790c4f2-67c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:c3:aa:7e:ee:c9:f6:93:a5:86:c2:25:f8:
a7:3f:8f:f4:1c:32:0f:c5:25:c2:08:be:cc:b7:d1:
37:d0:0e:d2:74:ab:23:2e:f7:1f:09:73:66:e7:69:
d7:95:b7:18:b7:70:ad:05:0b:f4:8b:f1:ce:ed:85:
58:b5:6a:85:23:a7:02:02:2a:76:1a:88:c4:e0:80:
d9:7f:38:7a:dc:36:78:fd:7e:8b:3d:bd:c0:64:b8:
88:b5:fe:43:68:69:79:fa:11:4f:0b:e5:df:50:f2:
76:95:f1:ae:a4:a3:16:b4:00:3c:02:bf:7d:6b:cc:
4d:4f:1b:a6:e0:33:e8:6d:64:96:86:d7:76:d6:7a:
08:c0:59:3f:1b:35:2e:10:54:81:00:25:5e:01:3d:
59:b9:22:4f:e9:75:82:23:50:68:5a:a5:94:d5:b4:
ba:d9:9e:40:5a:fb:c0:97:e7:bc:36:b8:d3:b2:09:
91:43:90:5f:40:26:0f:eb:aa:74:6b:33:9d:ee:8c:
e0:1a:f0:e1:fa:5e:c9:8f:78:f6:24:60:f6:93:ba:
18:54:c0:68:32:ab:44:9c:7e:4d:d3:70:7f:db:49:
a6:af:25:83:49:e7:73:60:52:1a:4c:36:63:b6:f4:
ed:83:4f:a7:c9:3c:ef:97:54:e9:4f:a4:42:64:15:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:89:28:57:CA:12:0B:54:E5:DA:57:82:FE:60:AC:40:9C:45:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE6F9B2D8A911EF92D950B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/24
Signature Algorithm: sha256WithRSAEncryption
54:29:2f:3a:05:88:ba:13:11:a6:7a:16:91:4b:26:ab:27:5f:
20:e3:46:c5:b6:c4:82:ed:03:6d:17:e9:b6:f5:dc:4c:e3:a5:
cd:66:a9:31:5d:39:d4:e3:11:b8:bf:0d:e7:9f:5b:fd:3e:67:
06:ed:b4:e5:88:9c:d2:6f:b7:8d:19:eb:6b:e3:07:9e:bc:a9:
ba:2e:fe:dd:83:80:cf:11:e8:45:3f:7b:44:a4:2a:53:71:82:
63:64:bb:f1:93:f1:38:a1:58:24:bf:02:17:6f:b7:db:d1:57:
5a:23:14:81:33:70:ca:87:a9:89:aa:cb:f5:fc:62:c0:94:f9:
57:c4:ef:1f:e5:f2:43:63:e2:4f:cd:6f:b0:9c:06:8c:15:1f:
d3:76:83:64:3e:83:ff:b8:f4:83:d8:a2:25:5d:f2:8a:67:95:
95:2a:d0:e4:77:30:1f:8e:0b:b5:aa:7d:48:ba:3c:6c:64:73:
ca:b7:f8:84:60:a3:8c:73:24:12:26:0d:20:59:89:87:95:80:
9d:f0:9c:a3:06:b8:d1:db:14:9f:5a:6b:58:95:b0:8e:a5:d5:
6c:68:0e:2f:aa:8f:97:ad:74:01:c9:66:a2:10:a8:6b:36:e9:
d5:37:e9:13:6d:31:3c:48:9a:c8:cc:c0:7c:c4:3c:26:13:6d:
88:ee:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:31 2025 by rpki-client