Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2C0E884D9D511EFB39DA48E762E951A.roa
File: C2C0E884D9D511EFB39DA48E762E951A.roa (raw, json)
Hash identifier: tArkzgkUNG+wVroHLG/vt0BFrReYhhrFO84paBGECLs=
Subject key identifier: C0:D0:08:B6:FA:49:CA:82:C9:08:9D:C3:EF:AE:CB:BA:79:37:38:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014333
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2C0E884D9D511EFB39DA48E762E951A.roa
Signing time: Thu 23 Jan 2025 22:02:39 +0000
ROA not before: Fri 24 Jan 2025 22:02:35 +0000
ROA not after: Sat 01 Mar 2025 22:02:35 +0000
asID: 44559
IP address blocks: 154.205.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82739 (0x14333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:02:35 2025 GMT
Not After : Mar 1 22:02:35 2025 GMT
Subject: CN=6792bc7f-d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:a1:58:6f:c9:32:9d:82:88:fc:7a:09:4e:
25:48:ac:67:53:95:eb:f1:e6:1f:f8:60:31:10:4c:
7b:59:5b:0b:1e:8e:9e:34:7a:a2:2c:ca:a0:d5:9a:
a0:39:91:a3:0c:e1:17:c5:65:39:b2:1f:84:8b:43:
8a:7b:b2:0a:be:ec:19:99:f9:94:72:35:67:d1:40:
d0:d5:7b:c9:b9:77:ff:73:b1:be:e2:ce:89:a4:eb:
fd:53:13:c8:59:6b:74:24:60:30:4c:b8:a1:bc:09:
34:95:2d:78:d1:56:da:e3:49:51:69:12:51:7c:6d:
d5:3e:25:cd:01:fd:21:c6:3d:bb:d5:34:e7:6e:9e:
26:3d:21:a4:ef:1b:c0:a4:a0:d4:b3:82:ca:d0:04:
b2:45:3a:eb:2f:09:3f:0a:61:4c:e8:11:45:41:68:
16:ba:dd:ed:10:88:e5:6b:6f:4f:a6:74:e4:fc:f7:
9a:00:77:9d:8c:7a:ce:a8:77:16:7f:eb:9a:01:fd:
36:c7:0b:df:27:68:48:ae:ac:d1:19:d8:3d:9e:73:
81:99:d1:cf:03:9f:12:19:22:bd:32:cf:cb:58:97:
f5:50:ec:8d:90:32:62:d0:da:4a:01:a2:e5:c5:95:
48:f7:f1:75:3f:4e:3a:26:bd:0f:f2:53:06:30:07:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:08:B6:FA:49:CA:82:C9:08:9D:C3:EF:AE:CB:BA:79:37:38:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2C0E884D9D511EFB39DA48E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.224.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e4:19:a8:e8:1e:a5:80:19:b8:27:41:2c:43:57:d6:44:d2:
52:bb:90:85:d0:11:70:ac:0c:b9:54:af:c2:7f:1c:ff:a1:46:
64:6c:a3:72:c3:b4:42:50:7c:ab:e5:65:60:d0:19:41:69:c3:
1b:20:3a:d7:10:ee:64:74:a2:e5:d4:4c:fc:f1:6c:87:72:46:
34:ca:43:33:47:60:4d:9e:e9:5f:cb:ae:d0:e6:0f:28:f5:9c:
41:fd:74:1a:86:85:ee:79:c5:3b:50:b9:f3:e2:7f:78:70:0d:
fc:d4:aa:00:8f:fc:34:49:4d:16:22:74:a9:b2:4c:05:c9:2e:
a3:4b:33:4d:fd:df:cc:c6:53:38:62:c3:41:f8:88:85:36:96:
f7:db:99:3e:ae:4f:be:5e:f9:c7:59:61:3e:8b:ae:2a:ac:1d:
14:33:c5:2f:47:16:70:e7:5b:48:2e:8e:60:2a:76:96:5c:29:
4b:ac:f0:e7:50:cb:8f:c5:76:3c:eb:63:9d:87:ab:6a:3e:a7:
3e:9f:25:22:09:53:50:06:92:a9:d1:5d:75:7a:5f:cf:74:4b:
8e:24:33:b2:3c:13:b9:a1:00:e9:15:81:d5:23:56:0b:fd:f6:
68:f9:4e:ca:c9:8f:2f:46:44:c3:89:f8:e8:87:01:14:c4:13:
38:28:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:33 2025 by rpki-client