Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2110C12DA6711EFB06ED774762E951A.roa
File: A2110C12DA6711EFB06ED774762E951A.roa (raw, json)
Hash identifier: j0SH/WWLU5FeabFYI295LI5binvJiHlIHkoUerFT9Tk=
Subject key identifier: F2:B2:AF:E9:BC:08:E8:EC:72:51:8A:DE:72:19:B4:0A:1A:D8:C5:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2110C12DA6711EFB06ED774762E951A.roa
Signing time: Fri 24 Jan 2025 15:26:51 +0000
ROA not before: Fri 24 Jan 2025 15:26:47 +0000
ROA not after: Mon 03 Mar 2025 15:26:47 +0000
asID: 203020
IP address blocks: 154.223.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84132 (0x148a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:26:47 2025 GMT
Not After : Mar 3 15:26:47 2025 GMT
Subject: CN=6793b13b-6763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:c5:9b:00:4f:27:87:b0:68:fa:a3:f8:9f:
29:73:d1:0a:97:cf:29:18:45:e7:2f:a7:b3:3c:6c:
f4:a1:fc:df:d3:14:cf:be:1d:ea:75:53:12:cb:52:
6e:a3:a1:47:03:91:08:15:13:92:3f:87:d2:f3:6b:
43:7c:91:b4:7d:01:40:8f:ba:bd:2d:5d:fe:39:05:
8f:b2:10:52:52:c2:25:1b:86:fa:cc:5e:56:5b:d9:
4f:80:27:de:23:f8:73:b7:76:5a:70:3e:12:52:d9:
fa:38:37:15:90:a9:01:10:78:3e:b5:66:2b:9c:1f:
1c:78:a5:99:e4:1c:31:f4:b9:3c:c8:f6:57:80:06:
0a:b8:b4:c7:58:b1:fa:2f:23:27:22:f7:3a:df:61:
a5:12:88:3a:82:56:25:4a:8b:0c:82:c1:8a:7c:da:
fb:10:72:31:76:60:3b:67:38:a6:97:b8:22:2a:2c:
6f:e7:bc:0c:c7:a9:74:1d:72:b7:94:9a:24:11:8e:
ea:3e:bd:ea:1c:81:84:20:80:5d:ca:e1:f7:9e:6c:
f3:40:33:22:c2:dd:2a:9e:31:b4:9b:7b:ad:45:4c:
04:9b:71:9e:5a:f3:62:4a:fc:be:bb:2e:2f:86:04:
45:30:5e:18:a6:96:8d:0a:c7:34:33:f0:83:01:b1:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:AF:E9:BC:08:E8:EC:72:51:8A:DE:72:19:B4:0A:1A:D8:C5:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2110C12DA6711EFB06ED774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.140.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0a:d9:37:7d:76:ec:b4:aa:15:41:ad:10:63:05:28:a3:fb:
d9:77:53:60:b3:69:3c:03:66:fe:d7:3d:a6:db:97:3c:36:f5:
ea:e9:d9:41:57:6f:e9:25:8a:2f:38:02:b8:ca:8c:22:ad:3c:
fa:39:15:e4:de:9d:b5:74:42:0e:bc:bd:52:f5:2c:53:f0:08:
b5:95:27:ed:cc:60:5f:84:e7:19:3c:ef:60:40:8e:a2:5b:93:
d2:7b:46:4d:2f:f3:42:73:e8:6c:0c:a9:a9:03:0d:0f:01:5c:
12:dc:a7:24:31:1d:cf:f8:8b:79:fd:f0:11:23:af:b8:34:a3:
19:9b:b0:b6:b7:7e:47:8a:39:bb:cb:45:a5:8c:7c:a8:6f:20:
5a:3f:4b:87:ca:68:93:fc:da:b3:41:6a:eb:75:52:b2:03:d9:
a1:1d:cc:9b:90:ea:83:bd:37:69:bc:03:13:84:83:4e:d4:87:
68:30:64:d9:22:c5:d9:17:43:f9:b3:a0:94:63:2e:1d:28:0c:
48:93:b0:bb:85:8c:36:2e:90:fc:c6:cb:fd:6f:49:fb:d8:32:
9c:3d:f9:a7:91:ea:e9:ef:dd:c0:cd:63:2b:40:6e:15:ca:0c:
bc:3f:19:87:59:da:f4:b0:ec:40:5e:5e:ea:b0:16:af:8e:76:
2a:f9:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:56 2025 by rpki-client