Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E91C98DE1811EFA998A964762E951A.roa
File: B0E91C98DE1811EFA998A964762E951A.roa (raw, json)
Hash identifier: LO+XF6JbYXG744Gk1z0A6TzhV4KwPJAIiG1AMzmGLis=
Subject key identifier: BA:72:71:B3:82:A5:E7:DE:A1:C8:3B:3A:26:7C:7F:71:E0:DD:94:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E91C98DE1811EFA998A964762E951A.roa
Signing time: Wed 29 Jan 2025 08:11:50 +0000
ROA not before: Wed 29 Jan 2025 08:11:46 +0000
ROA not after: Wed 05 Mar 2025 08:11:46 +0000
asID: 203020
IP address blocks: 154.209.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85320 (0x14d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 08:11:46 2025 GMT
Not After : Mar 5 08:11:46 2025 GMT
Subject: CN=6799e2c6-4b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:e1:99:2d:36:41:ec:c5:48:61:3d:64:5b:
c8:94:38:7e:4c:68:56:ef:c5:cf:bf:e2:55:d8:01:
f4:09:03:2b:d3:c9:e9:b3:dd:8c:a5:a9:9b:04:ec:
e0:2e:f8:6e:20:11:eb:0d:66:c6:22:df:19:91:64:
f7:f3:b6:9b:fa:55:d3:e3:b3:0c:8f:1b:c4:27:8e:
22:35:fc:54:8b:fa:2a:84:25:ab:ce:1d:cb:9a:6b:
45:1d:49:a3:83:d1:a4:1e:bc:41:de:00:24:73:10:
3d:96:09:09:52:bc:ad:97:73:f4:07:26:1b:6c:3e:
8e:88:a2:05:b8:1d:2d:11:b6:67:85:c1:21:60:0b:
8f:35:3f:c1:7f:0c:6e:0e:95:56:d0:94:f9:a3:6c:
4c:d5:af:90:23:a3:70:ae:89:5d:e9:ad:00:7b:0f:
01:68:f9:cf:b7:98:95:3f:16:af:20:de:b2:87:63:
63:f1:6d:eb:63:56:9b:71:76:8f:fe:f6:5f:b0:6c:
14:c3:d2:79:dd:8e:50:fd:7b:67:36:17:f0:27:50:
bd:a2:d9:87:7a:87:f8:60:7b:e5:62:b1:6d:6b:73:
a6:15:4f:c8:12:2c:e2:07:f4:01:ea:9e:ba:4e:8e:
dc:fe:4f:49:b7:76:d0:84:64:f1:d7:ed:b5:2f:8b:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:71:B3:82:A5:E7:DE:A1:C8:3B:3A:26:7C:7F:71:E0:DD:94:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E91C98DE1811EFA998A964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.8.0/21
Signature Algorithm: sha256WithRSAEncryption
99:69:b4:e7:74:dd:2e:74:52:ad:e7:14:55:f5:e1:7d:bd:33:
9f:38:45:ea:6d:35:d7:c4:73:3b:8a:e0:3a:6a:c3:42:21:e3:
45:d3:de:54:28:b2:4f:ab:ab:06:a4:91:8a:ad:40:70:a9:04:
fd:6e:3d:13:01:a5:3e:cd:23:c9:ad:08:94:80:ec:c3:b9:c7:
04:8e:cd:8d:a4:ea:ae:bb:70:66:e6:78:76:e1:a7:41:66:cc:
27:ec:a9:f1:81:08:f5:69:94:9a:fc:06:36:3f:ff:68:07:b4:
f6:7f:94:8e:35:e9:ee:c4:5e:f4:cc:dc:a4:ae:51:9f:ad:1e:
2d:f6:cf:0c:e4:42:79:94:1c:cc:fe:b2:3d:82:37:16:38:d5:
48:47:9c:78:b5:ba:7e:22:5f:85:0c:19:f3:9b:7f:17:95:a2:
88:b7:c7:0c:4f:eb:0a:91:75:f2:aa:43:a8:85:bd:12:4a:a1:
ad:9b:e1:80:d8:9e:a1:be:40:d9:8a:52:d5:80:f4:fb:a3:a3:
97:ad:bb:39:3e:2b:bb:e8:bb:9a:98:24:3d:c3:af:c3:55:ba:
9e:f3:3f:8d:ff:25:ac:27:b7:63:38:38:e3:b6:dc:95:9f:5e:
93:dd:78:b8:ec:64:3a:99:dc:db:05:7a:67:b1:af:c2:1f:33:
39:84:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:53 2025 by rpki-client