Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA592138D8AE11EF9F325556762E951A.roa
File: CA592138D8AE11EF9F325556762E951A.roa (raw, json)
Hash identifier: mYHjxKfT0Ye6SdQLoObOshcn6n5L+zC04aG/PkizxvQ=
Subject key identifier: B5:52:D8:65:6A:A8:9D:E8:3A:E3:FC:36:56:0C:0C:04:D0:73:5F:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA592138D8AE11EF9F325556762E951A.roa
Signing time: Wed 22 Jan 2025 10:51:10 +0000
ROA not before: Wed 22 Jan 2025 10:51:07 +0000
ROA not after: Sat 08 Feb 2025 10:51:07 +0000
asID: 150008
IP address blocks: 154.210.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81626 (0x13eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:51:07 2025 GMT
Not After : Feb 8 10:51:07 2025 GMT
Subject: CN=6790cd9e-3d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c3:34:c1:14:6e:74:eb:99:70:46:cc:ef:b1:
52:3e:d2:32:e3:ff:4c:be:7b:76:2e:ef:f5:53:96:
1a:e2:9f:40:56:fa:01:2b:aa:87:f0:08:5a:e6:4d:
40:64:6a:35:89:66:92:7d:c8:84:e2:12:17:8e:5c:
9b:17:8c:23:91:a3:e6:6a:d0:bc:55:73:dd:9e:ef:
08:4e:b0:61:81:61:f6:e0:7e:5b:a9:79:6d:09:33:
32:dc:5e:00:bb:d8:b0:40:62:b5:28:9d:00:8d:9a:
5e:8d:33:c6:71:f7:47:bb:89:4b:9f:1a:bc:ad:cb:
54:3f:f8:a7:31:d5:b9:db:29:34:9c:a4:0e:c4:6d:
a8:20:f6:b7:66:67:5e:86:eb:9b:ff:c1:2b:e0:ae:
71:50:08:c5:a4:ed:36:c3:57:c0:32:88:ca:08:4e:
5a:dc:a8:46:78:01:4e:96:3c:90:5c:8a:e0:1c:5c:
45:e2:c4:86:31:78:e0:08:70:d5:d4:0a:b8:59:ee:
67:fc:4c:af:99:e3:3d:15:47:d9:04:ff:62:66:84:
e5:28:f0:f7:71:6d:78:06:84:a0:af:31:ae:3a:72:
60:76:29:e7:ce:b9:2d:18:72:ed:e4:c8:0c:de:06:
2c:b8:66:d5:97:82:d4:f7:a7:a1:90:30:49:49:0f:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:D8:65:6A:A8:9D:E8:3A:E3:FC:36:56:0C:0C:04:D0:73:5F:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA592138D8AE11EF9F325556762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.230.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ae:08:6f:ee:05:10:29:79:3a:8d:ce:b1:7f:15:fd:5e:df:
d9:7e:33:7d:d8:4b:bc:47:4f:e8:25:d2:56:ef:16:e3:9e:7a:
21:fb:d7:e3:c9:c9:27:84:93:4e:8a:e8:c0:07:9a:46:da:a6:
41:9c:e9:57:08:2c:ed:45:40:9a:a6:2a:fc:d7:ce:22:ba:d9:
46:58:5f:96:c7:2b:2c:51:b1:5c:f5:67:f8:17:42:f5:97:2f:
d8:a7:75:64:bd:dc:80:61:ae:59:7a:36:23:36:de:00:bb:23:
f2:b6:42:5a:26:be:1b:9c:0d:b3:f2:b7:63:f0:6a:e1:3a:bf:
63:ff:ca:32:cb:a9:1c:18:1b:59:1f:3b:08:4c:c5:20:d6:cc:
b1:1b:aa:24:ce:3e:d7:ed:d5:4f:1e:ea:2e:11:fc:83:1c:e7:
f3:33:e6:03:e1:f7:ff:30:f1:4f:90:89:5c:b0:44:52:61:63:
57:db:dc:1c:7c:dd:f5:de:0f:b2:89:86:c0:e5:00:aa:88:52:
c4:5c:1e:1a:32:72:98:9b:cf:9e:ca:62:da:01:62:4d:74:9d:
74:c3:30:66:be:ba:80:a7:97:58:03:39:cd:cb:c1:23:87:91:
61:ee:30:77:07:57:1f:00:9c:d5:e8:8d:de:78:a0:9a:aa:9b:
93:98:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:02 2025 by rpki-client