Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC04AB6AD95F11EFAAD4F07D762E951A.roa
File: AC04AB6AD95F11EFAAD4F07D762E951A.roa (raw, json)
Hash identifier: GjJKRZIg1T7WQ2W4PPF6LsF0K53+jRCemyzQaAnKJLA=
Subject key identifier: 40:2A:9D:AC:63:13:51:21:65:E9:D6:40:DC:3D:89:2B:F6:7D:DD:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01405F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC04AB6AD95F11EFAAD4F07D762E951A.roa
Signing time: Thu 23 Jan 2025 07:57:20 +0000
ROA not before: Thu 23 Jan 2025 07:57:16 +0000
ROA not after: Sat 08 Feb 2025 07:57:16 +0000
asID: 18229
IP address blocks: 154.210.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82015 (0x1405f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:57:16 2025 GMT
Not After : Feb 8 07:57:16 2025 GMT
Subject: CN=6791f660-41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4c:ea:eb:e1:3e:cd:c7:ea:c2:56:3c:c4:b4:
98:b7:13:85:97:18:3e:e8:58:3d:f1:63:02:71:14:
05:21:f5:7a:81:1d:55:a4:b1:b9:22:53:e5:58:1b:
3c:27:f8:3b:d7:c8:07:7b:84:a9:93:52:de:4b:49:
f9:f4:3d:1e:22:20:f0:88:87:5f:6c:a9:9b:2a:1d:
2a:8e:a1:cf:26:65:dd:37:45:7c:02:79:0e:cb:a9:
a5:99:48:65:f2:14:85:77:f3:50:3a:6e:de:f1:6e:
2a:34:2f:8e:f9:85:8e:a3:ee:d0:94:1e:a5:30:07:
09:b2:c1:a5:d3:9f:26:23:61:89:fd:61:19:d3:84:
54:de:3b:4e:af:9c:be:0c:d0:86:1d:ca:92:1b:c8:
b5:53:4b:b7:c5:cf:b3:ab:58:15:ca:29:1f:1d:0e:
a5:fa:d3:ab:d0:8a:ef:9c:a8:71:75:34:26:5e:9c:
5c:86:a4:ca:e0:32:31:08:20:98:2f:33:05:ac:d8:
d0:5c:db:09:a4:33:6f:a6:04:c5:fd:e0:df:18:19:
31:b4:b3:88:2c:ec:61:af:31:7b:ba:4d:d1:e0:9b:
8f:45:92:d0:2d:e6:71:73:3c:4f:57:a8:98:6c:44:
e1:e0:8c:e5:0a:33:7c:ab:96:02:f9:4f:c3:55:0f:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:9D:AC:63:13:51:21:65:E9:D6:40:DC:3D:89:2B:F6:7D:DD:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC04AB6AD95F11EFAAD4F07D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.176.0/24
Signature Algorithm: sha256WithRSAEncryption
34:05:0f:2c:3f:6d:eb:fd:0b:77:60:1b:92:cb:81:1c:91:38:
bb:b5:5c:98:d9:f3:f6:b4:25:ad:f0:81:3a:36:4b:71:f5:80:
09:c0:34:93:e9:4b:70:d3:05:dc:e6:fd:b1:7c:16:cc:2f:0a:
3c:c0:ab:e6:a0:ce:bf:70:b0:83:3d:28:26:49:4f:9b:ef:b2:
c1:34:21:ae:c4:81:d9:fc:6a:42:33:55:6f:d3:7c:85:47:34:
d6:e3:88:b7:c9:a7:d5:96:49:0c:34:ff:32:2a:f8:61:96:da:
5c:93:b3:52:e4:d0:f9:27:23:66:50:66:b0:49:12:32:5f:d5:
ee:2d:66:c3:e3:10:60:37:30:4f:93:13:28:59:13:13:e9:44:
a6:ab:6f:44:5d:05:0b:e1:4e:92:0c:a8:df:f2:e2:01:75:e6:
3c:0a:86:26:6c:50:7d:a7:3f:5c:48:da:73:f2:b7:7b:de:5c:
72:6a:75:bc:d6:da:7d:25:3b:11:01:2c:f1:14:2b:97:4c:74:
c8:ac:c4:bb:7a:e8:95:df:d6:de:88:aa:f8:9e:ea:3a:ff:b8:
73:92:0a:d7:4c:e6:f1:9d:9b:2a:e0:bf:41:98:ef:88:bb:8a:
ac:0d:cb:bf:85:20:26:98:61:2b:49:fd:04:32:17:a9:5e:ff:
31:55:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:07 2025 by rpki-client