Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE0D3760D40511EF92C97C49762E951A.roa
File: AE0D3760D40511EF92C97C49762E951A.roa (raw, json)
Hash identifier: UV/tev6y3qBr6DrvumhC8u04Ip9ILZ47P5GBRb80L4s=
Subject key identifier: 2E:C2:39:0E:0E:C6:E3:4B:C4:D2:4A:69:BD:7B:33:99:EA:29:A1:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE0D3760D40511EF92C97C49762E951A.roa
Signing time: Thu 16 Jan 2025 12:30:33 +0000
ROA not before: Thu 16 Jan 2025 12:30:30 +0000
ROA not after: Sun 16 Mar 2025 12:30:30 +0000
asID: 17561
IP address blocks: 154.206.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80946 (0x13c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:30:30 2025 GMT
Not After : Mar 16 12:30:30 2025 GMT
Subject: CN=6788fbe9-8eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:f2:83:63:22:19:07:76:72:c1:9b:b8:ac:
4d:1c:46:22:68:26:f3:a4:18:09:d9:ae:92:e8:9a:
9f:5e:ae:bc:00:f7:f3:c3:1c:9a:10:37:c0:c2:7a:
c2:1d:6a:b6:a6:9a:8c:a2:62:d2:d5:17:4a:aa:a8:
b7:63:4b:a3:b1:12:f6:7d:9b:c0:0c:b2:13:b6:6a:
59:26:b8:47:9a:10:90:43:1e:4c:8d:0c:62:7e:cc:
b2:9d:49:77:4a:99:10:51:ef:52:a9:89:9c:51:8b:
6f:08:22:4c:37:75:57:15:ee:e6:3b:e7:2f:ab:27:
67:ed:de:ed:27:d9:28:22:11:77:34:7a:0f:b0:a6:
8c:d9:be:35:0d:97:87:eb:5a:e4:ee:08:a8:f7:54:
6e:4e:7c:25:23:cf:c9:81:ee:12:82:d7:23:39:6f:
2b:b5:78:90:c0:2c:42:60:dd:7d:a7:b6:67:b1:03:
35:bb:75:99:9c:d0:a1:be:a7:42:70:93:56:6a:10:
f4:54:2a:d4:0f:c6:61:11:97:40:fc:9e:d2:99:1b:
45:69:6c:7e:51:17:2e:a3:dd:ac:20:3a:bf:e4:08:
2f:02:b4:bd:d3:33:b6:0b:19:c3:71:c3:c2:0c:06:
77:c1:91:a4:e2:53:4a:d5:1d:7b:f3:ec:43:34:95:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:39:0E:0E:C6:E3:4B:C4:D2:4A:69:BD:7B:33:99:EA:29:A1:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE0D3760D40511EF92C97C49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.219.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e6:5e:f4:08:f4:91:52:20:dc:0d:f1:37:0a:f9:b7:63:dc:
24:8b:a5:97:47:bc:f8:53:af:b8:aa:2f:7b:35:27:b7:ea:e7:
36:5b:b5:11:52:73:c6:5f:b1:11:d6:b9:92:3a:96:bf:f7:cf:
b1:44:ac:48:85:87:62:9f:b7:00:5f:fc:d8:98:1d:f0:60:f2:
62:19:4f:e0:07:3b:1e:53:7a:94:51:47:d1:3d:8a:43:0b:bd:
14:9d:94:7a:95:b6:38:78:fd:76:db:2f:d2:fe:24:e2:91:78:
4e:54:41:b2:ef:c5:4f:e9:2b:24:cf:96:64:95:66:3a:e6:2d:
2b:c2:6c:9a:f2:2b:40:1d:3d:06:ae:c9:fe:e1:ae:8f:8c:f4:
b5:10:09:e6:7c:ad:61:19:23:94:f9:4b:78:d2:75:94:ee:9f:
4d:fd:70:5b:5d:b6:cf:19:9b:a2:ee:3b:50:3f:2e:20:2a:93:
92:5a:c6:c9:fb:f8:49:3c:34:d0:f2:e5:aa:38:d9:2d:24:1b:
0e:8d:25:3f:20:c6:69:20:2a:3d:28:b0:a1:f1:09:bf:59:c1:
06:56:01:a3:4c:3b:87:b2:66:83:3c:c0:df:1c:d3:a4:da:2d:
c1:bb:53:69:59:2e:45:96:cf:ec:e6:56:a9:d2:00:d8:9e:01:
05:ef:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:07 2025 by rpki-client