Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B2A3C6DA3911EF8824CCBB762E951A.roa
File: A1B2A3C6DA3911EF8824CCBB762E951A.roa (raw, json)
Hash identifier: +3ay34wxpMlEw30ifOhyj1OCdq53V4GZTS2FbYrxG5w=
Subject key identifier: 31:58:17:F3:A9:C8:3E:4C:5A:FA:56:81:69:48:A3:27:BD:25:19:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014539
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B2A3C6DA3911EF8824CCBB762E951A.roa
Signing time: Fri 24 Jan 2025 09:57:33 +0000
ROA not before: Fri 24 Jan 2025 09:57:30 +0000
ROA not after: Wed 05 Mar 2025 09:57:30 +0000
asID: 202656
IP address blocks: 154.219.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83257 (0x14539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:57:30 2025 GMT
Not After : Mar 5 09:57:30 2025 GMT
Subject: CN=6793640d-1d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:7c:cf:c8:4b:cf:4b:3f:f5:fc:b9:9f:82:
7b:7d:26:8d:38:03:e4:70:dc:14:d0:a2:db:85:47:
fb:d0:66:5d:a0:63:70:a5:2a:d3:da:38:5d:e5:95:
7d:93:f2:ca:2e:6e:27:bd:ee:ec:a1:11:72:7b:5c:
4c:34:67:1a:86:6e:3b:45:5c:ca:05:3e:93:b3:37:
86:a8:86:26:e6:24:23:36:4a:89:91:40:d9:ab:24:
07:31:73:0f:13:4b:8f:73:06:70:47:ed:72:c5:63:
a9:be:ca:17:29:0f:f2:59:5e:6b:93:ff:63:a1:f5:
74:01:08:57:57:bf:e0:ff:e3:b4:da:66:ac:64:c5:
0c:0c:04:f8:95:7b:94:de:4a:bc:70:30:0a:89:49:
0c:d3:b1:7d:3f:31:26:b7:91:bc:12:cb:c2:ae:f8:
58:19:06:47:45:4a:dc:7e:92:31:7b:d0:2e:44:ba:
e6:29:8c:ca:2b:ac:bb:bd:69:54:e4:67:9f:79:89:
77:5e:94:bf:06:e2:08:c5:2b:16:8f:ac:6c:9f:3a:
48:9e:01:09:5a:00:5a:6f:24:fe:19:11:4a:b0:02:
90:33:f4:06:c3:46:22:c7:de:a9:55:99:b4:30:73:
65:17:97:88:75:7c:e7:6c:1c:5c:00:7d:94:d6:f4:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:17:F3:A9:C8:3E:4C:5A:FA:56:81:69:48:A3:27:BD:25:19:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B2A3C6DA3911EF8824CCBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6e:27:6f:36:74:b6:56:43:45:20:7f:43:68:71:4e:96:ef:
58:43:0e:a9:32:95:5d:9b:9f:9d:ec:06:a3:df:e2:cd:9c:ec:
55:fd:5d:1e:67:b2:01:5d:6e:94:78:91:0e:4c:fe:55:a8:07:
3c:cd:86:22:af:c3:cb:ac:51:e0:cf:ab:c0:a3:66:c6:1a:8a:
f9:3e:96:c7:7b:df:37:8e:e4:cb:d1:42:a5:c9:1a:4d:86:a7:
c1:d7:59:18:0b:4f:49:65:2d:60:7d:9e:6a:c8:88:1e:91:07:
4a:b1:ad:c6:24:f5:f9:3d:f3:1d:9a:e6:8a:06:1b:dc:3a:91:
37:38:39:41:33:34:35:da:32:df:07:ad:de:94:49:51:6b:47:
aa:9f:4a:90:12:4d:51:8b:5d:58:1f:db:0f:c4:b5:e4:fa:1f:
b4:99:1d:64:f4:9d:e8:6e:75:05:66:99:77:8a:83:b9:ea:a8:
0f:95:c9:6f:63:9a:7d:24:dd:cf:74:1f:0a:26:8b:6f:35:aa:
4f:a0:07:8c:e9:4e:de:cb:51:ea:6b:27:7a:85:29:24:73:77:
84:62:d0:de:f5:87:31:fe:a4:a1:7a:85:4f:5b:4e:ac:7c:e9:
fa:45:29:0a:94:11:e6:07:eb:fc:38:d2:ac:54:e4:88:a8:13:
48:19:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:53 2025 by rpki-client