Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF52E120DAF311EFA89EF5AA762E951A.roa
File: AF52E120DAF311EFA89EF5AA762E951A.roa (raw, json)
Hash identifier: DRAfHbsQdxeruR+0NgaqulL7+8XVPi4GzwpO3Ml5Z+k=
Subject key identifier: D6:18:99:04:35:76:CE:2F:25:A6:81:BE:38:5A:C5:61:67:9B:D2:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF52E120DAF311EFA89EF5AA762E951A.roa
Signing time: Sat 25 Jan 2025 08:09:22 +0000
ROA not before: Sat 25 Jan 2025 08:09:19 +0000
ROA not after: Fri 07 Feb 2025 08:09:19 +0000
asID: 395793
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84211 (0x148f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 08:09:19 2025 GMT
Not After : Feb 7 08:09:19 2025 GMT
Subject: CN=67949c32-9f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:95:ad:72:6e:72:46:9a:f3:ad:b2:d2:c3:
47:03:4b:d1:93:56:0e:19:9e:e1:3d:de:39:12:dd:
31:54:d9:09:3d:75:15:4e:5d:f7:91:b4:ee:57:27:
dd:e1:33:bc:f6:8d:40:33:66:6f:a2:58:99:83:27:
69:2a:23:5c:c6:b7:ba:a7:13:5a:19:3b:61:b5:60:
4d:2c:a3:6f:ef:bf:39:bb:f3:aa:0a:49:52:0f:03:
3d:82:21:38:dd:fe:bb:85:d7:15:c2:f4:34:88:3f:
80:5f:51:f2:64:33:59:9d:16:52:9e:51:bf:fb:a3:
f5:71:97:2e:45:c6:87:47:35:0e:94:24:43:b8:33:
63:b2:00:5a:55:b3:6e:c7:04:bf:d3:45:a3:52:86:
37:78:0f:ed:4e:7e:42:dc:ff:63:50:68:1f:d8:37:
a6:3a:88:53:c2:1d:05:c6:be:50:db:e2:b3:94:38:
91:76:dd:1a:84:ff:91:8d:82:01:c1:13:fa:33:91:
0a:36:28:54:7f:e4:1f:75:ad:93:17:d8:16:ed:f0:
87:e5:55:b8:b2:79:68:f3:a3:2c:47:2e:d0:39:00:
59:c1:ba:15:fb:5e:0d:bf:3e:f2:73:86:cb:ee:17:
4f:81:cc:c3:82:92:a2:76:de:51:63:6b:69:97:4f:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:99:04:35:76:CE:2F:25:A6:81:BE:38:5A:C5:61:67:9B:D2:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF52E120DAF311EFA89EF5AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d4:03:71:48:51:f2:02:80:ba:fd:60:de:7a:e0:01:c9:9a:
cf:32:4d:59:bb:7c:75:ac:cc:4a:3b:00:02:86:e1:eb:8b:79:
c6:b4:03:74:15:a2:a1:df:f3:01:df:b2:71:bd:7d:7a:e1:4d:
bf:f4:55:71:58:d9:a9:71:81:3a:a3:82:d5:7a:9d:f3:92:6d:
a5:24:de:ce:2a:6a:9d:cf:ef:92:52:cf:7f:c7:1e:04:6e:e3:
ac:9c:b4:0a:97:df:78:9d:4e:ce:2e:06:ea:7d:a7:1c:70:44:
52:58:12:0b:20:1e:23:61:1d:70:50:b6:b5:67:3f:e6:38:d0:
fc:35:73:ad:8b:76:47:e3:4c:97:ce:05:7a:58:20:7f:06:5b:
64:a3:49:5e:b5:ea:0d:d8:69:8c:68:87:75:74:fd:60:a8:0d:
c3:cf:83:06:d2:20:a5:c5:c8:fe:5d:2e:0f:fc:f2:75:5a:d1:
cb:c7:f6:af:94:c3:0f:e4:67:8e:fa:f2:e3:7a:ec:06:4a:f6:
55:e7:c4:62:89:f2:c9:7b:a6:d1:2e:b2:3d:71:4c:39:d1:24:
6a:6e:59:03:64:34:8c:57:43:59:60:c8:25:23:d8:23:5e:ad:
b3:8f:83:69:51:00:ce:1c:2b:80:ae:c4:c1:7f:50:e4:39:55:
ab:71:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:26 2025 by rpki-client