Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A1F78EDE2A11EFA1E24A5B762E951A.roa
File: A6A1F78EDE2A11EFA1E24A5B762E951A.roa (raw, json)
Hash identifier: i0ACDwcinC8NP5WpxI+I3fQJ1AZn8AhT90f4XTni9Vs=
Subject key identifier: 36:16:0B:B8:BD:EF:11:E3:A0:DE:B4:18:DD:EB:D4:EA:D2:CB:F5:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A1F78EDE2A11EFA1E24A5B762E951A.roa
Signing time: Wed 29 Jan 2025 10:20:24 +0000
ROA not before: Wed 29 Jan 2025 10:20:20 +0000
ROA not after: Wed 05 Mar 2025 10:20:20 +0000
asID: 203020
IP address blocks: 154.205.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85396 (0x14d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 10:20:20 2025 GMT
Not After : Mar 5 10:20:20 2025 GMT
Subject: CN=679a00e8-ddcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:93:7b:da:81:98:61:17:35:59:a1:09:b9:
e5:00:30:7f:0b:32:39:89:5d:92:08:42:35:ab:5c:
dd:af:d9:b5:ec:23:bf:d7:b8:74:64:38:c4:4d:85:
8a:f0:84:a2:4b:ab:9f:a1:8a:37:ee:dd:2c:c2:08:
80:41:d3:77:47:d6:3e:92:8c:67:7b:c0:5b:f5:24:
17:7c:fd:c2:f6:85:d6:94:17:d5:1e:0e:d7:c2:a8:
be:1d:59:ae:c9:ef:c5:65:c2:8b:10:9b:e1:62:99:
63:b4:bd:f3:cf:b8:50:56:18:48:4f:2b:82:21:61:
6b:1a:0f:c5:dd:35:1c:32:29:d1:9f:06:90:6d:b2:
34:36:91:3e:92:87:ca:19:b7:7c:6d:eb:90:b9:89:
ae:d9:fa:57:72:bc:b2:4c:a4:a5:a4:da:a1:45:24:
52:04:ae:96:e8:32:9b:03:60:18:26:ed:46:ad:4e:
ec:6a:e4:04:11:b7:8d:af:74:73:d4:ec:99:ab:93:
04:fe:52:36:2f:13:dd:55:fb:a8:bd:58:11:8f:13:
88:99:24:34:70:49:bd:21:ef:05:82:39:69:9c:f3:
1d:44:cd:ff:86:1e:fd:70:2c:17:55:6f:9f:0d:cd:
49:5d:33:d0:57:08:fb:d9:5f:82:fb:dc:80:eb:81:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:0B:B8:BD:EF:11:E3:A0:DE:B4:18:DD:EB:D4:EA:D2:CB:F5:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A1F78EDE2A11EFA1E24A5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.168.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ec:67:f7:0f:ea:f8:76:dc:7f:35:99:5e:9d:6d:dd:63:31:
77:07:f1:ee:48:8b:c6:84:28:d7:63:3a:1b:8a:63:37:c8:ca:
6f:13:3b:d0:52:5f:57:4f:ad:a5:83:85:9a:8e:5d:40:7b:29:
2b:58:08:08:d6:cb:f6:f6:db:c7:1b:f3:59:6a:61:b7:73:b8:
f4:58:f7:22:65:c2:20:ab:c0:bd:fa:28:70:2a:e4:87:a3:fe:
a4:5d:27:3b:f0:3b:53:f0:40:ed:e5:ee:b2:c7:6b:ce:67:c8:
53:79:70:a8:28:23:fa:23:01:78:b4:0d:3a:67:e9:c1:7b:28:
4d:1c:83:af:1f:fc:92:78:28:5f:77:aa:5f:2f:96:e8:eb:75:
1e:fe:61:5b:b2:e3:e0:98:9c:12:93:e8:d2:be:cf:31:85:50:
8b:0e:42:07:3c:88:fe:a9:0d:3d:2e:cf:a2:a9:6d:12:07:bb:
94:7b:23:b1:16:18:c8:9f:d1:c9:2f:29:43:de:58:a1:88:d0:
92:f3:f1:5c:04:eb:4b:d2:5e:e1:dd:35:4f:a5:25:a1:41:a5:
cb:9e:7f:57:e0:21:23:f2:1b:f6:f1:0c:38:f3:9d:5c:f1:24:
2b:e0:a4:61:b9:7d:32:8b:f0:bf:71:5e:61:75:18:06:4f:bd:
3c:1b:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:03:44 2025 by rpki-client