Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B571A4DC1A11EF9DA5A367762E951A.roa
File: A6B571A4DC1A11EF9DA5A367762E951A.roa (raw, json)
Hash identifier: sUYVdKy/1/c12ymfRh5MJvGGKP9/pM6ByQ+zLSX3rbc=
Subject key identifier: EF:E9:0A:F8:99:2F:42:4E:69:87:0B:31:13:FB:2B:14:06:C7:37:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B571A4DC1A11EF9DA5A367762E951A.roa
Signing time: Sun 26 Jan 2025 19:20:50 +0000
ROA not before: Sun 26 Jan 2025 19:20:46 +0000
ROA not after: Thu 06 Feb 2025 19:20:46 +0000
asID: 5065
IP address blocks: 154.207.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84830 (0x14b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 19:20:46 2025 GMT
Not After : Feb 6 19:20:46 2025 GMT
Subject: CN=67968b11-0891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:50:43:98:54:91:5c:bf:b4:df:fd:b8:09:
17:79:f4:68:20:5e:6b:3c:53:e6:2b:51:3c:67:b5:
dd:2a:2f:f6:f2:f4:4d:92:14:fb:15:7b:9d:88:e7:
8c:3e:72:4b:04:1c:87:f5:db:0c:53:b3:4c:9e:c1:
40:4b:85:9a:7d:9a:87:60:2a:3b:b2:ab:8b:6d:2b:
24:fe:43:cb:06:30:f7:40:29:70:5f:a0:a2:7d:ae:
4f:83:1c:49:22:b9:04:47:f1:f7:91:74:f5:07:70:
43:63:07:e1:76:90:d7:ee:9f:a5:38:75:d0:c3:6d:
30:d5:d1:5a:4f:da:d0:a2:a3:58:9f:5b:72:67:71:
11:25:1b:90:47:ba:c7:51:22:5a:02:76:84:3e:49:
41:d7:03:3b:e0:d7:07:55:fe:94:73:19:1c:02:d1:
74:2f:7e:44:8d:d6:d9:1f:f2:fc:bc:4c:2b:e3:89:
51:1d:0b:33:b3:9d:6e:4a:56:96:af:3d:18:f1:70:
77:91:e9:95:11:0f:f6:86:64:d3:80:0b:27:bc:84:
02:ef:56:3f:8c:a5:fc:7d:9f:a3:f6:00:b1:6a:bc:
7e:55:71:69:34:4d:e3:48:4b:33:75:96:f4:64:d1:
c6:16:f1:96:23:1b:30:47:49:e0:32:61:ea:d8:16:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:0A:F8:99:2F:42:4E:69:87:0B:31:13:FB:2B:14:06:C7:37:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B571A4DC1A11EF9DA5A367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.145.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8f:60:ba:1f:a5:9a:a0:08:11:98:1d:55:c3:56:b5:86:06:
b0:0e:04:87:b0:fc:c4:27:43:4f:5b:7d:6e:d0:be:a2:b7:14:
19:c4:59:2b:62:6c:bf:4f:69:9a:27:03:6f:e1:ec:84:c9:54:
5b:3f:bb:e8:50:b6:93:46:e7:71:73:c2:c8:cf:86:10:81:62:
9f:7c:13:9e:2e:8d:a2:4c:b7:a5:ad:92:a8:a7:b1:22:3a:7b:
fd:be:af:d5:0d:d4:2b:4d:62:59:74:a9:e4:e7:f3:1b:c8:24:
dc:91:6b:5d:ce:85:e9:29:31:1e:0c:8c:4b:38:f7:82:84:57:
68:cf:82:08:8a:5c:5e:9e:80:c0:c7:f6:e4:4b:c2:fa:75:49:
07:3e:79:e0:69:1b:ac:59:c3:c6:68:1e:e2:54:01:11:b6:16:
c4:cf:14:9f:dc:bd:90:be:a2:d1:61:31:e2:e0:85:cd:47:65:
f4:ad:48:d1:d1:1a:95:68:48:96:5e:7c:cf:4e:6f:2e:17:af:
df:ec:3c:b9:bf:40:07:1d:10:db:ed:0c:4e:5b:7e:3b:3e:1d:
30:d1:f5:93:22:d8:2e:f0:55:24:e3:1f:24:df:62:ac:ed:4b:
08:df:0b:2a:8f:08:ad:87:b3:bc:f7:69:fb:ad:92:f3:2f:2b:
00:ba:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:38 2025 by rpki-client