Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8CB48A0B60511EFA759A951762E951A.roa
File: A8CB48A0B60511EFA759A951762E951A.roa (raw, json)
Hash identifier: WlZU3LV3vU3I27+W1U6RMDhm09s5rOuExAwlVqOyXrg=
Subject key identifier: FE:38:F7:18:C9:54:2D:87:09:B1:6B:E5:CE:EF:E6:CE:46:EF:2C:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8CB48A0B60511EFA759A951762E951A.roa
Signing time: Mon 09 Dec 2024 08:14:50 +0000
ROA not before: Mon 09 Dec 2024 08:14:44 +0000
ROA not after: Thu 06 Feb 2025 08:14:44 +0000
asID: 150706
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72165 (0x119e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 08:14:44 2024 GMT
Not After : Feb 6 08:14:44 2025 GMT
Subject: CN=6756a6fa-de01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:a2:a7:1a:0c:5f:33:84:fb:1b:0c:59:7a:
fa:4e:fa:a2:1e:50:e2:43:58:0b:28:2c:d4:bb:59:
9e:4c:8c:d2:58:1b:64:fb:1f:ce:d0:27:3f:72:63:
14:7e:9a:01:20:f4:31:25:55:66:28:ed:24:18:e3:
fc:37:c5:78:19:69:2a:ac:75:35:3c:27:f5:c7:67:
51:46:ca:b9:a5:db:3d:5e:6c:40:01:21:e6:76:1a:
7e:74:63:07:5d:26:ad:9b:a4:c1:ff:8d:6f:00:78:
f3:c7:36:76:8f:f0:f1:e8:fb:c8:75:71:ef:7c:26:
5b:ac:29:b8:73:d6:7e:7e:23:b0:2f:95:99:b6:be:
8a:59:32:2c:fe:09:73:cd:3c:ba:ea:b7:76:59:3c:
67:25:50:93:47:6f:93:50:d0:7f:d5:e8:11:29:ef:
d8:03:3d:ca:16:ac:14:dc:36:52:28:e9:a4:37:24:
a8:5a:3e:ba:f1:12:c5:04:5f:ca:4f:a6:28:f5:c5:
35:98:53:e4:05:41:95:cb:7d:4a:d6:a3:16:bf:d4:
8a:68:08:fe:ba:a2:83:c6:03:94:49:71:ff:61:f1:
fb:26:c5:3e:89:87:60:45:ba:7a:d5:f7:b9:49:45:
1d:37:ae:bc:90:f9:92:18:a4:43:e6:3f:6b:60:ae:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:F7:18:C9:54:2D:87:09:B1:6B:E5:CE:EF:E6:CE:46:EF:2C:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8CB48A0B60511EFA759A951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:67:84:b1:46:fc:15:98:78:a4:5f:b5:2a:97:f9:be:3b:3e:
20:ec:70:7f:74:88:b4:6e:0a:74:d5:e5:7a:29:92:1b:8e:14:
fb:3f:eb:dc:89:d5:2e:bb:a5:2c:53:57:56:38:12:66:2d:07:
99:24:83:02:54:f7:90:5c:e2:67:ac:71:3e:a8:5b:1a:fe:f1:
61:e7:4a:6a:3d:cd:e6:95:38:25:88:06:88:25:53:3d:9b:00:
93:32:de:77:87:96:d7:6f:0a:46:72:94:71:10:f7:4a:a4:ee:
c9:9e:57:76:07:8f:fd:82:a0:80:1a:06:d9:68:d0:74:7d:12:
04:3d:50:dd:af:0b:90:51:6b:2d:e3:f2:de:85:c4:86:93:06:
51:55:6f:6d:40:96:08:ee:f3:cb:40:ef:60:a4:c7:ec:7d:a2:
9a:49:85:33:b5:85:bc:f1:06:24:31:73:cb:a0:d3:1c:19:c5:
63:bc:68:0d:0c:54:07:8d:a5:f9:59:2f:95:4e:68:a0:9a:cd:
76:c8:78:ea:26:c1:2c:84:63:98:d4:e8:e1:02:32:56:7c:69:
92:dd:a8:5c:89:e2:b7:d6:a3:80:cf:6c:40:e6:41:df:f4:26:
6e:55:79:ea:65:7d:6e:f9:b6:e4:14:cd:e7:6e:d9:f7:0d:45:
01:e1:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client