Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9567B10D8BE11EFB7AE9341762E951A.roa
File: A9567B10D8BE11EFB7AE9341762E951A.roa (raw, json)
Hash identifier: 1NgNUGmF8wgKNC04l98RoXUgWwbhBJW+R6CUi7q40J8=
Subject key identifier: 6F:9E:69:5F:B6:23:AA:26:0C:22:52:85:00:A4:EC:BE:AE:2F:AB:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9567B10D8BE11EFB7AE9341762E951A.roa
Signing time: Wed 22 Jan 2025 12:44:47 +0000
ROA not before: Wed 22 Jan 2025 12:44:43 +0000
ROA not after: Sat 08 Feb 2025 12:44:43 +0000
asID: 18229
IP address blocks: 154.210.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81748 (0x13f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:44:43 2025 GMT
Not After : Feb 8 12:44:43 2025 GMT
Subject: CN=6790e83f-3f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:c5:04:7b:a7:58:5b:98:a2:1b:3e:44:e6:
fc:76:8b:65:0a:b1:e1:e7:9e:4c:e3:98:80:1b:a2:
06:d3:25:60:15:d5:18:40:9b:55:dc:21:6c:25:f6:
86:78:23:11:a8:9d:85:a7:45:af:eb:c5:2b:45:42:
1d:6d:88:d2:8e:b7:b5:f1:6c:51:bb:ec:51:b6:17:
30:87:10:7e:61:32:52:a6:5d:81:d3:fc:ff:f1:83:
c4:1f:b9:00:16:02:21:70:b7:76:2a:b6:d0:66:bc:
c6:b8:81:7d:3a:77:96:4f:aa:21:b0:75:6b:39:61:
43:19:dc:ae:9f:e2:50:c0:c7:2b:12:88:ae:9f:c8:
93:9f:50:aa:51:1b:31:a4:5f:20:f5:2f:a6:9c:53:
f2:69:f1:98:07:50:c3:8a:2c:e7:13:0e:ad:a3:fb:
ec:47:b4:c8:95:7e:f4:05:d6:cb:8a:c1:17:9a:7f:
72:d9:e8:92:c0:cf:fb:63:14:9d:9b:d8:f5:a3:51:
cb:dd:6e:83:b6:ef:b5:40:72:94:8d:12:31:37:f8:
e5:c6:ad:35:cf:d9:22:25:10:fe:cf:f3:03:40:4c:
5f:c6:38:c9:80:73:e1:04:78:55:c2:96:96:1b:56:
18:15:f0:84:25:ba:df:62:b4:3a:88:2d:57:b7:d5:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:69:5F:B6:23:AA:26:0C:22:52:85:00:A4:EC:BE:AE:2F:AB:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9567B10D8BE11EFB7AE9341762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c2:3d:bd:02:61:f8:b7:c8:77:53:f4:84:eb:66:1a:02:c9:
17:36:41:c4:9a:9c:78:2c:6e:ca:43:a9:ab:e1:eb:19:7e:8f:
d4:96:77:76:7c:d7:85:b4:9f:0b:a2:6e:d9:8c:a7:ce:61:89:
d1:15:5a:b0:55:e6:e5:8a:80:f1:19:01:1d:ae:75:14:5a:e1:
7c:c2:b0:4c:79:c6:e8:f2:af:78:5e:22:3f:ae:e6:79:94:2d:
ea:3f:30:fc:a7:ea:58:11:9b:42:a1:87:c1:69:d0:24:93:3d:
af:31:19:23:44:00:ab:12:1c:a5:6f:86:24:96:a3:f2:07:57:
22:12:6b:53:d2:a8:a6:49:38:5c:a2:c7:da:f9:64:cc:a0:10:
29:21:85:37:ad:f9:f3:b5:28:dc:60:20:47:58:e2:4f:41:85:
a1:df:36:ca:89:b8:41:7a:08:ec:39:59:52:8b:ba:bc:03:c3:
48:e0:c5:2b:00:23:cb:b7:0c:77:84:13:a2:55:35:d4:ef:17:
74:49:3d:a2:6c:fc:a3:d7:f0:27:96:87:22:17:fe:a2:2b:33:
36:44:fe:1d:bf:35:d9:c9:98:01:47:39:bc:45:79:89:4a:b4:
11:71:47:79:f8:74:85:a8:d5:1a:20:d2:9b:1a:69:44:f0:50:
9b:c5:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:33 2025 by rpki-client