Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7AB1B8D8AD11EF9F225C51762E951A.roa
File: CB7AB1B8D8AD11EF9F225C51762E951A.roa (raw, json)
Hash identifier: 99ZRc64qGed/3QfsBQVZVys2i+BX4P5Gp2u4+U40l0s=
Subject key identifier: EA:21:A3:CA:19:21:FC:B2:08:48:67:05:8A:63:C1:0F:9F:D4:78:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7AB1B8D8AD11EF9F225C51762E951A.roa
Signing time: Wed 22 Jan 2025 10:44:03 +0000
ROA not before: Wed 22 Jan 2025 10:43:58 +0000
ROA not after: Sat 08 Feb 2025 10:43:58 +0000
asID: 150008
IP address blocks: 154.210.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81618 (0x13ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:43:58 2025 GMT
Not After : Feb 8 10:43:58 2025 GMT
Subject: CN=6790cbf3-11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:69:a7:52:e9:5e:4d:78:a0:42:f1:d7:40:
70:bc:1e:df:b2:c9:a9:88:81:67:f2:3f:e3:ff:24:
83:e8:64:e0:1b:64:02:6b:48:bd:b4:43:0b:ab:8d:
b6:ad:f4:14:80:12:b8:7c:b1:bb:17:09:1b:69:1e:
47:89:41:ee:54:fd:5d:41:18:0c:1d:14:d9:1b:d0:
9c:f1:07:ab:92:fb:e6:f3:7e:37:ce:c9:db:d5:b1:
d5:1b:de:57:f4:f5:20:b1:39:e0:ab:27:1c:0d:9a:
0b:ab:75:79:65:ae:62:2a:ab:0a:fa:2d:6a:63:d2:
95:06:bf:bb:e3:67:f2:64:95:6d:7a:09:01:67:08:
b7:23:7e:a4:fe:fa:d9:da:3e:88:55:52:09:d1:5a:
39:91:1f:19:69:a3:26:c3:a8:31:c7:dd:73:c7:f8:
d8:5f:ea:af:0e:95:bc:67:fd:19:68:43:be:39:43:
00:f6:4e:6a:3b:b4:25:94:9f:07:a1:dd:95:97:5b:
7e:5d:13:50:ac:33:29:26:d1:37:d0:e8:fb:e2:05:
80:e0:8e:cd:0d:ae:a0:43:40:dd:0d:16:e7:c9:f2:
74:dd:8a:37:c5:ce:30:39:99:ef:02:1f:b0:d3:b6:
db:fd:00:5e:62:a1:21:ab:fc:a5:6b:a0:53:96:ba:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:A3:CA:19:21:FC:B2:08:48:67:05:8A:63:C1:0F:9F:D4:78:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB7AB1B8D8AD11EF9F225C51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:52:fa:9d:a1:7c:82:53:28:01:f7:a8:7f:cd:ee:ae:f3:93:
18:4d:a7:33:28:2e:b6:77:c6:c3:76:0d:0b:24:7e:8b:c5:a0:
8c:c1:83:3a:6c:c6:13:fd:21:69:df:35:74:0a:7e:41:12:d4:
8f:c6:f6:3f:46:f0:bd:1a:2e:e2:a9:90:82:5e:09:b8:7d:d3:
c3:21:3c:01:d9:2b:8d:db:16:5f:54:b9:53:0f:a8:34:47:a3:
db:28:53:2c:68:60:c0:b3:f1:a1:0b:f9:55:e2:48:65:08:94:
a8:ea:a3:4b:fb:71:28:d5:80:5e:7c:6e:83:13:83:1b:26:b0:
71:15:fc:24:e9:39:33:14:ae:5e:bf:d9:10:04:2d:9c:05:3c:
58:5f:33:ec:19:36:dc:d8:69:d1:66:98:b3:9f:f1:78:dc:66:
a2:fe:4b:27:62:84:7d:c2:b2:10:a1:ce:3d:4b:1f:5e:6b:1e:
63:4f:72:37:cf:2e:97:22:21:d2:6c:cb:4c:57:19:2e:47:cd:
65:65:fc:0d:d2:43:58:89:1e:e9:30:86:1e:84:0a:c6:54:cc:
36:79:1c:f3:b8:f2:56:a7:4e:a9:78:9f:a2:6a:8d:30:50:f3:
4a:2a:c9:6b:92:bb:cf:d5:c1:76:b5:54:cf:e8:83:14:e9:ce:
0d:7a:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:24 2025 by rpki-client