Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD31547CDA6411EF8C068461762E951A.roa
File: CD31547CDA6411EF8C068461762E951A.roa (raw, json)
Hash identifier: 0+BC0yYuZxmCobQE2hxgNXX2FCSKeSrXc3xEmd5KcG4=
Subject key identifier: B7:5B:0A:DF:79:F3:4C:7D:E2:B7:0C:9E:40:27:AF:82:96:22:A3:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014894
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD31547CDA6411EF8C068461762E951A.roa
Signing time: Fri 24 Jan 2025 15:06:35 +0000
ROA not before: Fri 24 Jan 2025 15:06:31 +0000
ROA not after: Sat 01 Mar 2025 15:06:31 +0000
asID: 44559
IP address blocks: 154.203.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84116 (0x14894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:06:31 2025 GMT
Not After : Mar 1 15:06:31 2025 GMT
Subject: CN=6793ac7a-7138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:ba:db:c0:c0:ce:68:16:c0:94:06:d3:bb:
45:ff:08:49:bc:37:80:a5:55:5d:8a:56:66:4d:5d:
4b:2c:cb:f2:a6:ac:62:74:63:0f:07:c4:c0:46:e9:
5c:5a:6f:84:25:36:05:58:51:fd:89:65:0a:f0:32:
55:a1:fa:aa:fc:04:a9:4b:0d:60:fd:06:bb:f0:4e:
e0:0a:78:83:30:73:23:35:dc:5f:ee:c1:d2:e4:b5:
9b:b5:25:f6:38:c0:c7:1e:77:01:0a:78:09:21:59:
a0:22:3e:51:f6:7e:ae:6b:fc:6d:f1:c1:c1:e4:b7:
d2:a7:b4:4e:fd:06:82:d6:59:35:92:9d:34:e5:88:
fe:85:28:91:73:20:4b:05:85:a9:3d:c7:a1:ed:71:
40:44:ae:c2:65:d5:09:03:66:04:87:24:04:a1:68:
0a:14:c2:9f:3a:b4:b5:fd:f6:2b:80:b5:f9:6b:65:
00:b8:c3:dd:41:56:a7:fe:2c:70:f8:e5:75:02:d7:
b0:44:7f:6e:cb:68:71:86:b9:5d:e7:4d:13:75:16:
9a:8c:fe:57:a9:6d:8e:a7:be:70:3f:db:99:a1:54:
32:b9:ce:86:1b:36:10:7f:11:d4:9c:f3:02:5b:e2:
63:50:57:46:9e:59:fc:96:67:20:43:d4:07:8d:c9:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5B:0A:DF:79:F3:4C:7D:E2:B7:0C:9E:40:27:AF:82:96:22:A3:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD31547CDA6411EF8C068461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6c:fc:b2:0e:2c:e6:9e:17:91:1f:59:56:d4:37:c1:54:d4:
86:7b:89:0c:88:17:9b:0b:1d:72:48:5a:78:fd:d0:33:4f:a8:
f6:fa:4a:16:c0:3e:86:32:22:7e:9d:7b:eb:5b:90:78:8b:7e:
b3:11:21:1a:d5:d8:38:2a:1c:de:47:67:b9:be:0d:04:a9:fd:
00:de:c7:54:91:9c:c7:0c:08:7f:ab:92:1a:61:f7:32:a5:01:
4e:fb:13:c8:e5:52:dc:74:2c:87:31:71:c6:c3:a6:22:ad:7e:
5e:45:51:76:4b:f6:ea:a4:ea:a8:36:d5:5f:7a:6e:51:24:7b:
3b:db:f3:d1:5c:5c:7f:92:47:4c:b2:24:01:a8:f3:f9:1a:93:
49:54:63:b5:73:5a:24:b7:55:0b:c6:ea:b0:7c:7f:64:14:ce:
7a:dc:21:54:a7:72:87:b9:0c:e2:d5:2b:f2:b1:fb:87:bc:74:
70:2d:6b:7d:73:d6:29:39:cf:b2:37:62:a6:b2:f2:e2:b7:1a:
7e:5b:b2:e3:fd:0a:15:40:88:ea:2d:ce:b8:ff:2f:db:9e:80:
c4:4d:19:7a:83:f1:af:a5:d7:76:b4:19:8a:c1:d5:c3:0c:3f:
74:78:8b:0b:a5:dd:03:c2:4c:2f:55:eb:04:ac:b3:2d:4f:94:
1d:19:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:38 2025 by rpki-client