Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FDA7CC0DE2311EFBC29ECAB762E951A.roa
File: 9FDA7CC0DE2311EFBC29ECAB762E951A.roa (raw, json)
Hash identifier: D35LLBYaZ9s+LefyrH+kusOJMzUn1HFrRrFiWAjx6lA=
Subject key identifier: 67:B8:47:1A:5D:84:A8:21:44:D7:29:64:69:FE:C6:47:22:B3:65:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FDA7CC0DE2311EFBC29ECAB762E951A.roa
Signing time: Wed 29 Jan 2025 09:30:06 +0000
ROA not before: Wed 29 Jan 2025 09:30:02 +0000
ROA not after: Wed 05 Mar 2025 09:30:02 +0000
asID: 203020
IP address blocks: 154.207.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85346 (0x14d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:30:02 2025 GMT
Not After : Mar 5 09:30:02 2025 GMT
Subject: CN=6799f51e-6f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:8c:44:31:3d:7d:38:e0:dc:7d:f3:63:36:
d8:b5:0b:5c:79:25:e1:fd:d2:53:39:2e:50:38:b0:
9f:45:39:34:f2:aa:3b:b5:ba:41:8e:20:cc:4f:db:
7e:31:ec:3b:3d:4a:89:60:03:85:eb:f0:44:e8:d6:
36:67:33:3d:51:f3:97:3a:bf:87:4e:88:03:62:48:
9f:ef:84:35:07:30:ec:04:82:f5:2f:af:10:40:ff:
9e:68:dc:7f:7d:89:33:cd:ef:21:a9:d6:9b:d7:d1:
c4:fd:fb:46:bb:dd:c2:c9:75:4f:06:be:35:04:74:
91:96:44:fe:32:3e:98:6c:96:e5:d1:20:ff:88:7b:
56:e3:eb:4e:d5:65:c8:55:1f:51:ee:79:b8:c5:a0:
22:b3:41:e9:3e:d8:da:62:2f:62:d6:5b:ca:98:48:
96:fe:7e:1e:0c:42:9b:3a:65:27:99:32:34:43:34:
27:e6:88:47:b6:16:59:22:3c:d0:02:cd:bc:e6:e2:
02:e5:b2:c1:a8:93:ff:52:62:b1:fb:72:87:cf:f1:
0a:7e:42:82:ea:27:8d:93:32:a3:b8:46:40:4a:f1:
4b:42:84:80:2f:da:48:03:9c:0c:ff:2d:bb:cd:0a:
c9:70:8c:14:56:81:50:ff:ea:db:70:a4:e2:b5:63:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:47:1A:5D:84:A8:21:44:D7:29:64:69:FE:C6:47:22:B3:65:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FDA7CC0DE2311EFBC29ECAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.84.0/22
Signature Algorithm: sha256WithRSAEncryption
11:13:e4:64:68:0d:27:f4:da:f0:66:c0:dd:4e:b4:11:8b:a4:
79:ba:06:aa:4d:7b:4d:fd:c3:3c:d0:80:d2:39:17:22:f1:6d:
8b:79:6b:04:c8:ae:d6:b6:9c:b3:38:11:56:66:31:22:91:9f:
3e:84:b2:b3:40:63:b1:d5:93:61:95:9b:3e:22:eb:f7:50:d1:
6e:71:f6:10:41:72:7d:18:1b:51:e5:d7:91:f2:b6:cf:77:d0:
9d:16:0a:21:76:7f:a9:51:2b:9c:81:59:e4:b3:58:92:46:6a:
90:df:87:78:bd:0d:bd:97:9d:6b:8f:5c:a1:6e:52:9c:01:f7:
bd:81:f7:cb:cb:54:da:5c:aa:1c:44:78:67:92:fb:01:19:d9:
03:7f:d3:09:a6:71:16:6c:b3:e8:84:03:12:35:40:f1:c7:e1:
8a:a0:2c:c5:39:43:bb:40:f7:4e:a0:f5:c9:16:07:81:65:78:
78:a4:b9:2b:fb:1b:af:33:a8:3a:33:be:0f:a0:9d:f8:76:53:
3e:cb:4a:0c:4e:2e:0e:b5:7a:44:d5:f6:37:af:80:fe:b7:72:
f2:95:b4:e4:a6:3d:9c:45:a4:9d:7a:4a:0b:be:b3:fa:a0:8c:
6b:43:f1:2d:e8:8b:05:5a:f8:aa:a2:de:44:3d:3e:e4:75:7b:
0b:2a:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:41:03 2025 by rpki-client