Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F16F746DCA711EFA4418EA2762E951A.roa
File: 9F16F746DCA711EFA4418EA2762E951A.roa (raw, json)
Hash identifier: aej8Kg1nrIRX5xWnoP5vQ3sHqPvm/vlVT0MFseeThHk=
Subject key identifier: 5A:91:51:CC:C2:5F:8A:0A:F3:FD:48:63:2D:FA:AA:92:BC:D6:34:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F16F746DCA711EFA4418EA2762E951A.roa
Signing time: Mon 27 Jan 2025 12:09:56 +0000
ROA not before: Mon 27 Jan 2025 12:09:52 +0000
ROA not after: Sat 08 Feb 2025 12:09:52 +0000
asID: 7018
IP address blocks: 154.208.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84983 (0x14bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:09:52 2025 GMT
Not After : Feb 8 12:09:52 2025 GMT
Subject: CN=67977794-5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7d:63:24:61:e0:ad:e1:24:b7:60:2c:6d:df:
73:aa:01:69:19:0c:97:45:5b:55:c9:a5:5f:e6:68:
7f:a1:c2:34:8b:a5:a2:55:37:ba:20:9d:67:a9:10:
3e:95:12:1f:75:f1:fc:f5:a5:a0:ea:8c:60:7d:7c:
3f:0f:b0:43:a2:f5:b6:eb:9a:ef:18:fa:61:bc:0e:
9b:95:25:75:28:d8:ea:72:a8:90:22:6f:01:a2:cd:
3c:24:16:f1:25:d5:ef:79:36:69:77:e9:bb:4b:20:
49:0e:8e:a3:53:83:8a:d8:09:09:48:3e:c9:e8:69:
47:46:05:e4:4c:dd:17:8e:42:64:c5:b9:4a:9a:2d:
7e:48:0e:a0:0b:fc:6c:70:8e:6e:4e:15:ce:a8:f2:
83:1f:63:d1:c9:8b:76:29:21:e7:a0:ee:19:8e:ac:
82:53:d6:1b:de:99:9c:9d:cb:05:94:1b:45:ce:92:
43:65:ed:e8:00:79:6b:9c:15:46:82:a8:ed:04:46:
9d:3c:0b:ce:f2:f9:ac:76:44:bd:01:23:03:ce:9d:
e5:8b:96:1a:35:3d:61:e0:4e:a5:80:b7:63:1a:8a:
6f:0a:4d:cb:1a:03:3a:0a:68:cd:d0:90:5b:03:b8:
b4:6b:d2:52:9a:8c:e4:03:3f:c1:41:15:0e:b9:90:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:51:CC:C2:5F:8A:0A:F3:FD:48:63:2D:FA:AA:92:BC:D6:34:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F16F746DCA711EFA4418EA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:17:cb:fa:3f:31:e3:c8:70:f1:5d:8e:bc:20:ca:7e:7a:10:
b7:9a:c9:73:9a:81:79:a4:44:20:52:60:46:57:a3:df:29:ed:
de:3e:92:d0:75:b6:0b:72:38:50:0c:95:17:f7:16:5c:1b:cb:
70:56:6b:42:2a:cb:06:10:db:a4:e7:ba:6d:ed:eb:44:79:27:
ad:46:a6:f2:4a:25:a5:fd:56:6f:75:71:21:7d:b1:f0:f3:02:
59:87:a3:65:0a:c7:98:a7:a0:ef:47:13:b1:46:23:d5:75:5b:
c3:cb:5d:e4:82:9d:18:cd:f7:31:3e:42:08:d5:00:bb:7f:f7:
c1:59:73:b0:5b:de:58:95:fb:80:35:f8:10:aa:17:b9:ea:5c:
1a:a8:69:d1:f7:f8:a1:1f:c5:97:34:91:c3:8b:de:70:6a:bd:
d5:a0:c2:3c:41:77:3e:5d:d9:cd:c2:57:d3:ae:5c:b4:9a:d2:
33:37:bb:fa:ec:15:2a:ea:70:d0:f4:16:9a:27:8a:68:1e:46:
4a:d4:98:f6:71:d7:87:ab:fb:79:f5:df:fc:b6:56:b1:30:06:
65:74:7d:c2:b6:d4:07:24:12:f6:f6:bd:99:ad:1c:17:1a:41:
34:2b:8d:d1:65:72:bc:cb:62:93:d4:40:90:b9:de:da:01:dd:
bc:94:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:18:43 2025 by rpki-client