Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F73C38DA5511EF8173B27B762E951A.roa
File: C2F73C38DA5511EF8173B27B762E951A.roa (raw, json)
Hash identifier: 1eCNg8uQ1j3i/IssEyDZkgma1g6GJcOe6omttE/z8eE=
Subject key identifier: 60:57:DF:A1:8B:D2:43:72:5D:16:D5:C8:6D:C0:FF:70:9E:65:4B:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01475F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F73C38DA5511EF8173B27B762E951A.roa
Signing time: Fri 24 Jan 2025 13:18:55 +0000
ROA not before: Fri 24 Jan 2025 13:18:51 +0000
ROA not after: Wed 05 Mar 2025 13:18:51 +0000
asID: 44559
IP address blocks: 154.209.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83807 (0x1475f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:18:51 2025 GMT
Not After : Mar 5 13:18:51 2025 GMT
Subject: CN=6793933f-f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:0d:11:92:cc:bd:f5:c2:69:a6:03:17:38:
90:b3:c9:ea:49:67:1b:9f:7e:e7:cf:7d:02:e7:85:
d8:40:48:df:68:99:30:8a:df:e0:ab:7c:a0:09:4a:
26:07:25:53:05:f6:f2:f0:00:f7:81:f1:97:f5:64:
65:6a:ab:6a:ad:d8:5d:35:6b:e6:83:5a:40:ca:7a:
38:6f:93:67:90:1b:86:b8:90:ef:2d:73:04:94:91:
22:09:8b:d6:c0:e7:36:0e:31:d9:36:ff:16:af:bb:
a9:89:9c:83:c9:99:de:58:df:c3:2c:4b:25:5e:96:
27:6f:06:c0:16:9c:93:0d:7a:60:19:64:a3:c6:0b:
e5:30:e5:74:82:22:b6:06:88:67:1a:24:0b:5e:ca:
8d:fd:77:03:b9:20:16:30:b3:f2:dd:bc:3f:5c:da:
ab:e3:a6:a0:24:28:c1:72:57:67:1e:ad:39:3f:30:
89:e6:36:da:b3:ad:5c:a3:05:26:4c:df:b6:89:91:
69:83:47:96:57:fc:7a:f3:e3:6d:c0:99:f8:b8:75:
4d:ed:9f:1d:00:b1:bc:52:ba:4c:f4:45:37:d1:6a:
16:ce:79:46:e9:73:67:2e:b4:fd:77:2c:37:9d:8c:
79:28:86:3b:f1:68:ac:19:31:8b:f4:d6:2a:73:dd:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:DF:A1:8B:D2:43:72:5D:16:D5:C8:6D:C0:FF:70:9E:65:4B:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2F73C38DA5511EF8173B27B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2d:72:60:ea:1d:b5:cb:ff:92:ca:7f:42:f5:67:63:c2:82:
ce:97:e1:61:75:2b:6d:15:0d:ee:9e:3a:29:02:f2:f8:9c:6a:
73:92:65:67:ba:e9:24:d1:2f:26:11:e9:85:4d:2a:ed:d5:94:
9a:ec:5e:19:48:d1:69:88:54:34:4d:e9:a6:12:54:a7:a6:8b:
22:ec:ce:59:bc:f1:25:19:28:d4:e5:e5:8d:46:1b:23:89:fa:
6f:ad:d7:05:5c:1c:4a:2a:dd:a5:f1:72:91:4a:bb:11:23:a5:
40:45:42:be:16:24:3b:65:45:18:84:dc:67:0c:68:6f:e4:cc:
f5:d0:54:bc:35:a1:60:46:a7:cb:4a:59:45:a0:20:1b:76:42:
60:8d:50:c2:52:eb:c9:32:5e:bf:65:be:0c:e0:93:6b:ac:36:
cd:b5:0f:e0:18:47:2c:cc:54:28:3b:29:4d:72:3a:90:13:5c:
20:c2:8d:d2:a7:1a:1f:d7:ee:e3:5c:1d:99:3d:f6:c3:a9:54:
6c:30:02:f9:61:13:ac:51:a1:5e:68:3c:fa:f1:99:57:94:65:
4f:ee:28:c2:34:af:8c:28:2c:85:5e:57:54:59:c3:16:1c:7f:
74:b4:ee:99:36:c3:41:87:e1:74:67:7c:0f:69:7a:da:f6:19:
2e:a0:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:56 2025 by rpki-client