Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18E9722DE1911EF8A26526B762E951A.roa
File: A18E9722DE1911EF8A26526B762E951A.roa (raw, json)
Hash identifier: C7xLrMXNJplRAOxA/UB7yT/dPFiMguTbSxrOXe3oNE4=
Subject key identifier: 17:DF:A6:21:60:C7:DA:3C:40:9B:4A:29:51:79:E7:A2:41:9C:6B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18E9722DE1911EF8A26526B762E951A.roa
Signing time: Wed 29 Jan 2025 08:18:34 +0000
ROA not before: Wed 29 Jan 2025 08:18:30 +0000
ROA not after: Wed 05 Mar 2025 08:18:30 +0000
asID: 203020
IP address blocks: 154.202.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85326 (0x14d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 08:18:30 2025 GMT
Not After : Mar 5 08:18:30 2025 GMT
Subject: CN=6799e45a-95e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:54:54:f4:08:59:79:30:9f:3b:b6:13:12:
d4:51:c9:0e:c0:03:36:7e:c2:23:c7:49:3a:f6:06:
fb:e8:c0:ad:9e:39:48:d8:40:dd:d1:86:8b:c3:98:
df:5a:b5:37:bf:88:19:40:a0:0e:8b:e8:55:a8:17:
bb:41:b6:53:3a:2b:69:ef:ae:0d:e3:e4:3b:fa:49:
a1:4b:2a:ea:6d:c4:47:53:85:b4:61:43:1b:eb:56:
1f:a3:7d:e4:59:ff:e1:2c:9d:21:15:17:e4:7a:3c:
1e:1b:74:27:ed:96:61:1b:f7:ff:16:c4:fe:5d:7f:
59:25:b4:c5:ff:ee:20:5c:da:27:8e:14:a7:76:27:
cc:de:ea:21:e6:97:e8:41:60:1a:81:70:13:0c:53:
7f:23:bb:6d:8d:28:25:e3:86:4b:89:08:33:38:e9:
41:90:a2:6b:20:7a:5c:fa:76:c2:8e:04:57:02:e1:
97:d6:26:42:1f:ee:73:43:d6:9b:c6:76:bb:b6:e7:
ca:4c:6f:a3:48:28:1d:08:45:93:a2:d8:26:b4:b9:
e9:62:34:1e:0c:d8:79:15:b4:ff:33:8b:25:ec:ea:
ba:2e:5f:a6:7c:a5:55:da:fa:5e:99:09:a6:a7:53:
b4:a9:df:69:49:f3:c7:62:34:08:b5:ad:27:b0:9e:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:A6:21:60:C7:DA:3C:40:9B:4A:29:51:79:E7:A2:41:9C:6B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A18E9722DE1911EF8A26526B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.70.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:45:a5:24:a8:1a:a7:cc:39:6a:73:ae:c1:35:02:09:4b:8f:
fb:21:b7:8d:22:6e:78:40:05:1f:bc:f9:87:18:ea:80:06:56:
79:41:df:49:9c:1c:8d:f8:7d:b9:1a:22:43:89:35:fa:8d:3e:
2c:ce:5e:62:80:1d:01:6c:d2:f7:87:67:a9:3a:29:3d:29:93:
df:7a:53:46:25:ff:50:7b:7e:32:91:8c:fd:c9:63:51:62:3c:
c1:85:ac:92:41:fd:1c:d4:37:3a:fd:a7:d5:56:3d:54:5d:d6:
d5:90:13:38:08:09:3a:f3:da:0a:87:1b:c3:1f:e4:b6:26:53:
63:a3:e0:20:c2:37:86:69:0d:61:e5:3c:5d:64:cd:3c:9e:33:
c7:f1:6c:44:02:f7:c0:95:0c:0d:1e:f6:30:96:27:1f:27:2d:
0e:a8:23:bd:cc:3d:d0:8f:bf:e0:1e:ca:ff:87:81:54:15:15:
83:7b:d2:e7:d3:8d:28:43:36:ed:79:8c:0f:f2:61:fa:c1:6b:
1e:c1:e8:d9:ab:27:53:52:5a:38:39:a7:5f:c0:30:0f:06:13:
8a:71:26:6d:c1:27:31:aa:93:b5:51:3a:53:d4:5c:f7:ab:f3:
e5:81:7f:64:04:af:32:f4:44:14:9f:39:d9:2a:b8:62:db:db:
75:aa:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:36 2025 by rpki-client