Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE48C47CCCCC11EF86CD7C66762E951A.roa
File: BE48C47CCCCC11EF86CD7C66762E951A.roa (raw, json)
Hash identifier: wuQhBwm4FjMT/s7Vqi3lnrw4NUw6nN7uchyXkT2zutU=
Subject key identifier: CB:A9:CB:C4:44:0D:C1:A3:49:29:71:C9:B8:2C:9A:DE:0F:D4:8C:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01366D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE48C47CCCCC11EF86CD7C66762E951A.roa
Signing time: Tue 07 Jan 2025 07:55:21 +0000
ROA not before: Tue 07 Jan 2025 07:55:17 +0000
ROA not after: Thu 13 Feb 2025 07:55:17 +0000
asID: 203020
IP address blocks: 154.201.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79469 (0x1366d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:55:17 2025 GMT
Not After : Feb 13 07:55:17 2025 GMT
Subject: CN=677cdde9-520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:bd:b5:a7:16:22:44:e0:cb:df:b9:5a:7b:
b9:36:27:ea:e8:f4:61:a4:ed:9e:d0:d7:65:6f:0a:
58:03:1b:d7:a0:f1:88:71:2f:73:e0:dd:82:9b:d9:
e8:ed:ca:7e:97:31:f3:fe:c6:e5:2d:fe:6e:aa:bf:
04:c6:64:20:88:cb:1b:48:32:8d:1a:ed:40:d8:b0:
99:23:c8:92:7b:2d:43:8c:32:e8:0b:18:5e:a3:54:
a4:14:73:83:f5:bb:90:9e:91:24:37:fa:a3:4c:20:
db:e8:56:8b:91:34:7d:6f:d7:ec:1d:a8:9c:8e:1d:
a4:46:56:e6:02:48:f4:3e:36:f1:12:0f:6f:93:26:
70:62:81:f0:be:96:20:e5:16:da:e4:8c:f8:cd:68:
78:d6:47:ed:7f:5a:31:04:15:15:3e:39:59:8b:62:
92:63:7b:05:a7:6c:a8:ad:75:38:c9:aa:93:fa:40:
07:50:12:59:20:46:a4:52:ce:16:9c:e5:bc:e7:83:
64:ce:00:13:5f:fb:81:04:0c:3f:b3:4c:20:71:62:
98:98:b3:19:42:ad:47:4a:5d:4c:b0:84:16:09:bc:
b5:a3:f0:08:b7:0e:7b:e9:ac:0e:4b:f2:d7:01:e3:
25:df:d4:7d:22:d7:78:ee:6a:c1:78:ed:a9:3f:83:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:CB:C4:44:0D:C1:A3:49:29:71:C9:B8:2C:9A:DE:0F:D4:8C:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE48C47CCCCC11EF86CD7C66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.38.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0d:61:18:bd:16:96:27:6b:70:1f:78:b8:63:13:74:14:2c:
ef:90:62:fb:d3:b8:dc:16:15:c9:9d:2b:38:65:ac:27:96:8a:
e1:63:e2:47:b8:34:6e:92:d3:7c:cf:d2:ac:ae:d9:f3:27:04:
dc:82:1c:55:ac:7e:32:4d:cb:60:9c:b2:65:12:5f:eb:e9:7d:
92:09:fb:b8:d8:09:4d:64:fd:5d:ec:0e:1f:dc:6b:ba:25:2a:
dc:5a:b7:7f:f5:79:45:5a:31:52:19:59:cf:81:68:23:43:d2:
af:51:53:de:98:f1:b9:ce:7b:8a:af:79:d3:50:45:f9:31:cf:
17:c0:1d:05:0a:ac:cc:62:87:20:0e:8d:0d:24:77:e9:b9:88:
e1:2e:cf:12:88:96:33:d9:52:ec:6f:84:d9:2f:af:3d:df:d1:
ef:6d:65:d0:42:66:3a:c8:92:12:e2:81:e1:cf:2b:f7:2e:4d:
27:23:e7:33:0b:7f:b7:98:b6:59:fe:4f:b9:bd:8e:ff:a0:75:
2c:f0:3c:b7:da:ca:fb:ca:1b:28:12:43:53:40:ba:d9:10:a8:
10:e5:9e:9c:af:bb:00:8c:c3:40:c3:9b:de:2a:92:9a:71:ea:
3e:db:4b:09:6c:22:72:42:7b:b7:85:de:71:79:f9:40:9e:9d:
2b:8f:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:10 2025 by rpki-client