Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5EE2C4D96011EF8098C284762E951A.roa
File: BA5EE2C4D96011EF8098C284762E951A.roa (raw, json)
Hash identifier: /ujHDLUNJ29eeSc0KAo1aOoV1qxkli2Ifip+OqjPCv0=
Subject key identifier: E5:13:30:EA:A9:23:E4:71:F7:F5:A0:B4:CF:37:6F:D1:2B:CE:3A:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014067
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5EE2C4D96011EF8098C284762E951A.roa
Signing time: Thu 23 Jan 2025 08:04:54 +0000
ROA not before: Thu 23 Jan 2025 08:04:49 +0000
ROA not after: Sat 08 Feb 2025 08:04:49 +0000
asID: 18229
IP address blocks: 154.210.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82023 (0x14067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:04:49 2025 GMT
Not After : Feb 8 08:04:49 2025 GMT
Subject: CN=6791f826-76a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:93:2d:bc:1f:f4:83:b6:a8:cc:9a:07:6f:
d8:56:04:d5:01:f1:d9:d5:b4:4c:f4:a4:05:bc:d9:
38:fa:61:26:c5:9c:2f:30:62:1a:fe:d6:6a:d8:23:
78:92:1a:84:a5:0d:a6:fd:8b:8e:e3:22:41:a8:80:
dc:84:99:0e:80:6e:78:7b:63:79:a5:88:e9:c7:b4:
65:f1:d3:ad:98:7c:3a:c6:54:56:bc:ba:5c:09:6f:
66:eb:ba:9c:97:db:89:73:8e:cc:13:43:8d:38:62:
6b:a6:5e:f2:18:f9:16:90:e1:17:0d:0b:53:5f:0f:
49:2d:bc:59:0d:a8:31:bb:b9:e6:46:e4:57:39:36:
bf:26:c4:59:eb:d4:8b:9f:1b:ca:a6:67:0c:89:02:
c8:e8:9e:71:ea:0c:a8:88:27:29:bb:bc:55:5e:cd:
52:9f:70:91:30:9e:78:81:f9:78:c5:c7:89:b8:a0:
3a:33:7a:fb:ab:ef:7e:6a:5f:31:42:ae:37:41:fd:
6f:5b:66:d2:e9:b0:16:c4:e4:62:ed:b2:73:cc:af:
83:40:58:c4:ce:73:80:8a:36:2b:34:b6:13:68:e1:
96:d2:97:89:03:0b:15:42:74:7b:13:d8:f3:5e:43:
96:a8:34:b5:ae:62:8b:9c:ec:a5:0f:11:c7:8f:93:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:30:EA:A9:23:E4:71:F7:F5:A0:B4:CF:37:6F:D1:2B:CE:3A:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5EE2C4D96011EF8098C284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2e:f2:62:36:53:41:4c:28:25:57:ee:19:98:00:04:19:03:
4a:fb:0c:22:52:56:dc:ea:c6:ec:8e:bb:0b:5c:01:86:30:3c:
c7:7c:f7:8f:7a:f0:8a:0e:c3:61:5f:6c:87:87:3e:79:e6:27:
1e:dc:28:f6:aa:94:c0:19:50:42:9d:9a:cf:fb:d0:e8:f2:43:
24:15:4d:38:47:b6:79:b5:6a:ac:2b:91:10:28:77:0d:d6:27:
9e:fc:b6:55:c7:fd:cc:e5:a8:8a:79:cd:40:23:fa:9b:9a:24:
75:6d:b2:ad:d8:44:8b:27:6e:e8:fa:43:24:34:fb:33:80:0c:
45:72:24:3d:42:f8:3d:39:ff:d9:ff:36:21:60:45:d5:eb:69:
cb:13:b4:72:ba:4a:3a:0b:03:00:71:7f:0e:f9:7c:75:e8:08:
80:71:7c:7b:3b:5a:33:47:3c:2c:9d:b9:39:b5:ad:bf:1c:df:
bf:a2:b4:9d:5f:c1:f3:a7:20:60:37:ee:07:a9:11:52:17:62:
39:8e:fc:2c:cb:6a:42:37:66:52:0f:da:24:f2:01:fb:03:c7:
da:7c:05:9c:84:fd:ee:69:29:55:cb:a7:90:13:2d:92:19:07:
e1:f6:03:1e:52:63:5e:74:f8:49:4b:14:8b:b9:67:5d:ad:96:
90:2f:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:49 2025 by rpki-client