Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07EA8F6DC9811EFAC83CF41762E951A.roa
File: D07EA8F6DC9811EFAC83CF41762E951A.roa (raw, json)
Hash identifier: +k64YcyYTUclro/5wmAjtgfgP1r2cagMNGpUezNVtsg=
Subject key identifier: CE:B0:05:B5:FD:C2:7C:0B:F7:1B:B2:19:AF:5F:00:86:83:B0:09:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07EA8F6DC9811EFAC83CF41762E951A.roa
Signing time: Mon 27 Jan 2025 10:23:56 +0000
ROA not before: Mon 27 Jan 2025 10:23:52 +0000
ROA not after: Sat 08 Feb 2025 10:23:52 +0000
asID: 7018
IP address blocks: 154.83.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84897 (0x14ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:23:52 2025 GMT
Not After : Feb 8 10:23:52 2025 GMT
Subject: CN=67975ebc-f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:af:5e:9e:ea:2e:b8:3a:06:da:f4:09:37:
3e:d0:fa:3a:25:19:ea:4f:a1:85:6b:14:d9:c3:71:
47:48:74:1c:d5:9e:67:21:4c:15:e8:05:93:a1:a5:
14:15:51:2b:18:d3:82:90:2b:50:4a:68:01:31:67:
cb:50:e6:a0:fc:d9:f6:7e:52:4a:56:a4:df:f0:49:
d8:a6:34:05:28:19:6d:e9:2a:f3:12:a7:25:4b:5b:
56:df:f5:3d:1e:b8:a1:8c:06:cb:38:3a:be:7b:b7:
a0:98:19:aa:e6:9a:6d:81:b2:05:94:43:75:18:1b:
b0:75:66:1e:37:af:27:96:4a:32:84:b3:f0:ad:a1:
24:47:6e:51:1c:44:6b:5a:92:34:20:10:ec:6a:a4:
78:86:44:5c:0e:d6:da:f8:40:62:51:93:67:b5:31:
29:0b:01:52:4f:a9:cf:60:ed:76:c5:54:b6:01:cc:
7e:79:94:54:93:06:44:cd:1f:b6:1d:c5:78:58:30:
61:46:d5:0c:42:03:87:d7:ed:ec:a3:ae:b8:45:77:
1c:7f:3c:a7:2f:28:29:cc:28:bb:0e:45:7c:56:0b:
8b:95:1e:84:73:ff:5b:60:72:e9:12:14:98:c2:6e:
5a:d8:5b:06:0e:18:41:44:71:97:52:1a:c3:df:4e:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:05:B5:FD:C2:7C:0B:F7:1B:B2:19:AF:5F:00:86:83:B0:09:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07EA8F6DC9811EFAC83CF41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.200.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:e3:11:e9:d4:20:47:0c:8b:f4:2e:d0:e2:92:bb:87:30:7b:
84:4a:dc:07:f5:90:11:06:46:c1:ac:f8:4b:7a:d2:1c:2c:06:
2e:e3:e3:cc:ce:9d:76:89:a5:aa:a3:82:28:35:32:26:93:50:
6b:35:15:1d:35:00:08:02:33:9f:6d:7b:34:85:a5:40:45:f3:
d8:53:1c:27:3a:91:84:3f:fa:6b:3f:b3:73:cf:f6:ae:2b:c4:
09:dc:b6:5b:44:15:ec:2f:32:ca:ba:bf:6a:89:43:09:7f:c8:
c0:e5:75:07:09:34:50:fa:de:44:02:bd:89:2d:b0:4b:8e:98:
aa:6a:81:1f:84:b6:bb:cf:db:a3:7b:e0:2a:d2:53:7d:63:fe:
73:a2:a7:a6:06:45:fb:3d:17:c7:bd:d2:54:5b:4d:b3:1d:b6:
78:6d:8e:72:1b:61:db:06:8d:81:6c:3b:48:76:49:74:78:8f:
bb:95:08:70:ab:a7:e1:f4:bd:d2:36:cc:6d:58:6d:6b:08:bc:
c2:61:06:56:54:2f:4c:33:60:fd:4b:b6:14:35:63:cb:0f:95:
6e:4b:7b:ea:88:3b:ce:56:5a:00:81:34:47:3f:d8:fb:ee:c8:
c9:5a:ab:ec:99:cf:fe:20:d6:37:64:a9:c7:d3:7f:bb:ef:86:
91:74:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:24 2025 by rpki-client