Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE358300D9D711EFA29D5C9A762E951A.roa
File: AE358300D9D711EFA29D5C9A762E951A.roa (raw, json)
Hash identifier: Xm9nq0VnbvCNNkbkNWBsrxwktnj7z2p0lW1ty+WVgZs=
Subject key identifier: 64:BD:22:8D:C3:86:E5:DC:02:2E:37:08:8A:B4:BE:39:63:D7:E0:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014341
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE358300D9D711EFA29D5C9A762E951A.roa
Signing time: Thu 23 Jan 2025 22:16:24 +0000
ROA not before: Fri 24 Jan 2025 22:16:20 +0000
ROA not after: Sat 01 Mar 2025 22:16:20 +0000
asID: 44559
IP address blocks: 154.205.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82753 (0x14341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:16:20 2025 GMT
Not After : Mar 1 22:16:20 2025 GMT
Subject: CN=6792bfb7-5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:59:2a:f3:6b:a0:f8:1b:19:97:c3:d6:2e:
00:e8:a8:de:98:da:9d:2a:f1:b3:1d:27:06:9d:f7:
60:4c:98:c3:6f:f8:e6:5a:2c:54:55:32:28:c0:ec:
36:4c:a9:75:f4:01:e4:2f:5d:a3:1f:a1:2d:a9:eb:
9d:31:71:9e:13:58:02:29:fb:f2:02:97:ff:9d:e0:
3d:25:ba:85:0f:ec:d2:57:a9:e8:85:3f:2d:7d:23:
04:f1:ac:32:7c:1d:0d:17:33:75:0d:da:73:29:ba:
34:30:bd:a6:aa:98:fa:7d:96:11:d7:00:9f:34:6a:
0e:43:4d:25:0c:86:c0:af:c3:31:a2:9c:81:0b:05:
49:d8:ee:b8:b8:aa:3a:ba:cc:93:45:60:87:0c:b8:
94:63:6c:59:0f:e1:46:03:a4:a1:94:11:ca:b9:5d:
86:d2:f4:72:1c:cf:fd:b3:6e:89:06:0e:bc:17:7d:
de:8a:bb:2d:a6:b6:0c:d4:11:c3:7b:ce:c6:67:1a:
f4:a6:d1:1a:dd:35:d1:60:59:a2:68:61:f7:cf:34:
46:b3:6c:f6:21:c5:15:16:49:16:e8:9f:c3:71:63:
ee:46:2b:0e:e6:7a:75:5c:43:59:40:ca:e9:26:23:
3e:fa:95:c4:32:27:73:c6:07:40:d6:34:b5:b2:d6:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:22:8D:C3:86:E5:DC:02:2E:37:08:8A:B4:BE:39:63:D7:E0:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE358300D9D711EFA29D5C9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.231.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1e:e8:73:08:ad:34:b9:b6:3f:26:d9:09:38:30:f7:2e:9b:
99:c7:c1:7d:44:46:3d:97:b9:ec:9d:f8:1e:fd:59:e1:ff:0e:
a2:cc:9e:75:b2:7b:9b:e6:c8:5f:2b:09:8c:79:69:65:09:62:
3b:8e:31:8a:1e:66:e9:a1:ef:fd:cc:8b:3a:3b:6c:5b:08:30:
52:a7:7b:8c:a4:92:ed:34:e8:f7:d9:b0:6f:48:90:5f:b6:d5:
a6:50:0a:21:e2:41:f0:3b:55:a8:a4:fc:c2:39:52:e4:1a:4d:
9e:85:34:be:b0:ab:89:d5:c0:bd:32:4c:19:61:e5:78:2a:cd:
86:30:e0:b4:63:c2:6e:c9:11:a3:b5:9b:6a:cb:44:dd:53:4f:
21:aa:eb:df:de:38:20:f1:99:d2:a4:98:f2:82:80:f9:2c:29:
4f:cf:d0:58:7f:d5:b1:57:e2:c2:22:94:ec:16:20:b8:31:48:
8a:3a:ab:6a:cf:b3:6e:ad:77:04:64:6e:04:39:c6:de:71:11:
6c:e8:b8:21:51:b2:61:4f:f8:79:38:3a:63:94:4c:4c:d7:85:
75:59:cd:73:46:90:06:1a:c9:74:ff:5a:f1:ff:69:ae:ec:bb:
4b:e9:17:2a:b0:e9:62:0e:db:b9:62:2d:de:87:64:7b:d7:13:
8e:ad:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:17 2025 by rpki-client