Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE31D8D0CCC011EFB0CBA59A762E951A.roa
File: CE31D8D0CCC011EFB0CBA59A762E951A.roa (raw, json)
Hash identifier: E9rzXplCd/HpL9ommRqU1R1QLenAOty0SHBlqB2qFIw=
Subject key identifier: 0D:7B:4B:2F:40:67:63:27:ED:D4:A1:F7:4F:8B:9A:C3:86:91:AC:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01362D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE31D8D0CCC011EFB0CBA59A762E951A.roa
Signing time: Tue 07 Jan 2025 06:29:54 +0000
ROA not before: Tue 07 Jan 2025 06:29:50 +0000
ROA not after: Tue 04 Feb 2025 06:29:50 +0000
asID: 7018
IP address blocks: 154.90.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79405 (0x1362d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:29:50 2025 GMT
Not After : Feb 4 06:29:50 2025 GMT
Subject: CN=677cc9e2-ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:71:7f:54:10:6d:a7:72:3c:20:39:f6:9b:
4a:3a:20:06:81:ce:ab:60:4b:84:fc:a5:cd:c4:1a:
0e:2b:4b:c9:24:1e:bd:82:4a:2a:63:f2:e6:94:ec:
58:4d:69:80:91:02:5c:53:2d:ae:0a:13:71:57:9c:
f3:8c:4c:e2:5d:b4:82:aa:58:d7:be:34:73:7a:28:
cd:43:ad:73:a3:a1:f6:58:a3:1c:07:db:77:b9:6a:
cf:55:97:d7:36:2a:e4:24:2a:94:28:54:a2:6a:b4:
cc:50:2e:d2:83:17:fb:47:f2:9a:da:98:45:ea:79:
13:49:96:f0:28:7f:02:6a:0a:c5:7b:4a:b2:1c:ac:
21:46:85:71:90:1e:3c:5e:15:6b:57:c3:60:bc:c9:
6a:45:27:3a:fc:ab:af:21:8e:91:61:a3:7f:2e:21:
74:98:b9:cd:62:ef:44:9e:f6:7d:60:26:56:59:db:
d8:33:6b:d6:95:35:10:4a:45:89:ed:b0:00:fe:14:
49:0e:51:a6:37:6b:3d:c0:33:d2:81:73:50:d3:b4:
8a:c1:e9:92:ae:84:e5:52:68:a1:d7:63:11:ea:1f:
c3:9f:ca:c4:9c:04:b8:bc:db:ff:6c:87:10:34:3c:
a6:44:4f:05:71:7a:6a:b4:b2:16:07:f5:d1:f7:3c:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:4B:2F:40:67:63:27:ED:D4:A1:F7:4F:8B:9A:C3:86:91:AC:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE31D8D0CCC011EFB0CBA59A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.8.0/21
Signature Algorithm: sha256WithRSAEncryption
07:0e:3d:64:fe:b4:68:63:41:d6:42:52:0e:8a:94:40:8a:74:
3f:82:fc:2e:aa:cc:42:34:44:6c:3f:bd:0c:f2:77:0c:07:b1:
3a:bc:07:63:5f:70:50:1b:34:b9:2c:05:17:bc:00:ae:5b:87:
b5:87:ec:27:6e:51:c7:8a:47:fc:8b:aa:e4:0f:40:eb:e4:20:
53:3f:1a:68:fa:87:a5:07:4d:d3:f1:02:35:2f:a2:77:89:4e:
40:0f:53:8c:a6:7a:bf:0c:2c:8d:51:01:c7:b4:d3:18:69:aa:
fa:e3:e7:00:e5:55:29:ec:e7:23:06:2d:9b:91:47:f6:68:81:
f6:ba:7d:d8:02:6b:8c:1a:c6:75:66:5f:81:cb:a7:3a:8e:75:
e3:e1:47:c3:27:fc:8e:ca:70:bf:d4:05:07:a1:42:af:ad:39:
71:c9:ba:94:b1:5e:9e:0b:64:d2:a8:5a:0c:e2:01:96:24:3e:
8a:6a:59:6e:1e:db:44:8a:b7:0f:e9:f9:5a:52:5c:1b:0b:9a:
25:f7:63:21:e3:f5:a9:c6:17:8c:34:09:47:ea:a3:10:bd:31:
6f:9a:af:23:8c:d4:97:fb:d9:92:d5:ac:be:9d:74:6b:4c:63:
b0:12:80:54:dd:96:95:6a:83:00:66:bf:e3:54:f0:9c:0b:0b:
4d:fb:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:36 2025 by rpki-client