Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E207D8DB1D11EFAAF07E44762E951A.roa
File: C1E207D8DB1D11EFAAF07E44762E951A.roa (raw, json)
Hash identifier: dCgJNexILkO80Putt/Q1KZevC+6QPS2TXIAa3n2v8Zs=
Subject key identifier: A5:13:25:A3:7F:51:E7:67:52:EF:EE:E0:FC:F1:67:71:3E:E8:18:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01496A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E207D8DB1D11EFAAF07E44762E951A.roa
Signing time: Sat 25 Jan 2025 13:10:33 +0000
ROA not before: Sat 25 Jan 2025 13:10:29 +0000
ROA not after: Mon 03 Mar 2025 13:10:29 +0000
asID: 44559
IP address blocks: 154.209.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84330 (0x1496a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:10:29 2025 GMT
Not After : Mar 3 13:10:29 2025 GMT
Subject: CN=6794e2c8-c51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:4f:d2:b3:eb:3a:05:9f:e8:1e:74:a4:c0:
68:a1:f7:c5:76:00:b0:a2:5d:a9:6e:1f:ae:50:91:
e8:e8:14:37:01:3b:0c:20:7b:61:ae:f0:ff:cc:5f:
d6:03:46:28:16:e7:38:44:04:97:f6:08:09:a8:20:
ae:f2:1f:8d:f5:50:c1:c9:8b:e2:a9:a3:b3:b9:d0:
2d:32:6d:a0:ab:1e:56:5f:e7:3c:ff:27:b2:0d:a4:
ec:22:59:5b:81:fa:74:6b:91:f9:c3:48:26:33:e3:
ac:e4:30:41:1b:e9:c6:49:14:6f:08:f3:92:fb:25:
02:f0:32:b5:a2:ac:c2:78:2c:09:7b:3a:25:a3:37:
5c:a6:30:4f:0d:67:17:7e:ca:4e:86:0f:42:f1:8e:
33:25:86:70:fd:d7:3a:b0:38:26:72:cb:5a:1f:21:
25:e6:52:ca:4e:65:b9:02:31:41:db:a2:52:15:a8:
9f:9c:37:ad:73:80:df:d7:18:39:9a:9d:d7:53:04:
c7:d0:60:2e:6b:53:ad:17:64:87:92:a0:a7:79:4f:
de:a4:4b:be:f8:07:24:87:24:a4:62:3e:a2:33:ce:
df:f6:74:82:b4:03:11:44:df:5d:f6:e9:a5:ee:05:
8f:2e:80:bf:9e:ba:f9:d3:ed:8b:9a:32:05:0d:b7:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:25:A3:7F:51:E7:67:52:EF:EE:E0:FC:F1:67:71:3E:E8:18:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E207D8DB1D11EFAAF07E44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.193.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c6:e1:3c:eb:4d:33:3c:c8:63:63:5e:e2:5c:2e:5f:1f:3b:
e0:a6:1e:1d:08:36:b7:e2:26:e8:68:d2:f8:ed:20:22:50:88:
8a:a6:03:d7:86:45:bd:80:07:84:38:1b:9f:7a:44:ae:d5:e4:
f8:e0:b1:fe:ea:d0:d8:13:4e:fb:d0:67:65:87:d6:45:5f:13:
7d:fa:4c:97:ec:8e:ce:a6:9a:18:fd:7a:95:c4:04:71:b7:13:
d3:fa:14:bf:d2:8f:e2:b9:88:87:84:02:3e:7c:fe:11:49:39:
c5:c8:7a:14:58:82:11:c2:81:6a:ae:86:28:75:0e:17:97:cd:
a8:f4:ce:a5:11:8f:d4:47:4b:c5:26:a4:e3:6c:97:db:cc:3c:
e7:a8:eb:1b:97:48:4f:35:ab:20:0b:4e:a0:5d:96:cc:52:09:
3f:50:98:c4:44:3e:e5:24:18:52:05:2c:0f:3c:f2:f6:c8:27:
4f:fc:80:6e:4e:74:bb:10:bf:cd:b6:a0:26:2e:23:c7:f9:ba:
d6:26:cb:1d:43:8f:aa:ba:94:c5:d4:57:58:5a:ec:66:2a:1c:
bb:42:4f:62:c0:a3:6b:e9:eb:51:df:b7:ea:89:6e:bf:51:ab:
33:4a:13:ee:95:3e:a0:83:66:8c:30:53:d8:e4:21:85:dc:5e:
e0:26:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:33 2025 by rpki-client