Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1A683B6D40011EFA8C39AA8762E951A.roa
File: D1A683B6D40011EFA8C39AA8762E951A.roa (raw, json)
Hash identifier: ar3AO1pTWTr5pfKf40XPJvBD5cEEac6S2Q2BR8TX72c=
Subject key identifier: 80:76:D7:72:10:9B:12:9F:56:6F:63:D3:3D:E0:25:76:49:49:90:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1A683B6D40011EFA8C39AA8762E951A.roa
Signing time: Thu 16 Jan 2025 11:55:45 +0000
ROA not before: Thu 16 Jan 2025 11:55:42 +0000
ROA not after: Sun 16 Mar 2025 11:55:42 +0000
asID: 17561
IP address blocks: 154.206.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80910 (0x13c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:55:42 2025 GMT
Not After : Mar 16 11:55:42 2025 GMT
Subject: CN=6788f3c1-4f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:92:88:68:bd:ec:c3:bb:50:25:04:90:34:
e5:06:d2:0b:16:86:b5:12:8c:99:6b:2e:37:b5:85:
63:96:e6:92:48:d0:58:e5:d0:64:c6:36:9a:99:90:
4a:96:62:fb:ed:a9:ca:ca:10:8b:ed:f1:94:29:41:
d1:fb:b6:17:dc:ac:56:12:79:21:da:f9:50:a8:66:
1a:98:e8:50:5a:2a:a0:c9:f8:f0:e9:75:76:e8:de:
05:b7:df:d2:3c:63:10:e6:8a:cc:d0:5b:22:cc:62:
83:33:bb:1b:f1:04:34:0b:93:2a:78:0c:4d:cd:86:
69:38:84:7e:4b:81:db:7f:40:ff:e5:c0:38:ec:0c:
f3:b1:2d:8d:b9:a0:7e:f8:6f:5a:76:13:35:04:2d:
71:97:1e:ef:50:20:e1:30:57:03:5b:1a:8a:44:eb:
11:b5:ca:c1:0c:48:ff:e0:ee:8d:a8:d7:64:1c:96:
55:ef:37:6a:2e:8a:8e:9e:f8:c9:fe:01:91:09:1a:
fc:c1:14:64:b6:e1:e4:ad:1a:95:05:d0:14:f2:cb:
0d:0b:9b:83:66:4b:7c:ec:12:ae:bf:f5:33:df:03:
96:a6:6d:51:ad:fb:e0:4f:20:21:01:8e:de:7b:58:
10:34:40:e6:c7:cd:65:e3:7b:b1:2a:c8:61:c4:f5:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:D7:72:10:9B:12:9F:56:6F:63:D3:3D:E0:25:76:49:49:90:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1A683B6D40011EFA8C39AA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6e:02:60:98:c5:13:a5:3c:88:63:c0:34:0b:53:0d:93:cf:
ae:05:42:52:84:6a:61:ff:86:7e:1b:0c:da:d9:9b:15:0d:bb:
b8:a8:be:bd:c0:4d:45:15:96:e7:49:9c:aa:22:22:a0:4d:ce:
d4:4c:8e:d5:1f:a5:37:d4:b9:27:22:24:22:5f:6d:9d:53:30:
3a:09:06:0c:9b:a9:bf:bd:53:93:46:ea:63:ff:5f:51:a8:2a:
c6:f5:68:e0:37:34:8d:7c:ad:26:cc:10:e6:f6:1a:d6:85:85:
cc:b9:7c:d8:ac:19:3d:e2:42:09:ce:b9:6c:5a:6f:15:1d:8a:
75:09:46:08:85:37:65:10:9e:06:d1:26:2a:84:ab:ba:c1:06:
60:d1:ec:b8:5a:58:8d:ae:1c:da:c7:08:20:a6:41:a0:c6:63:
32:27:2a:29:6d:51:c6:ec:e9:3d:0d:d2:9c:b1:da:e1:64:71:
93:52:38:35:4e:c7:ee:38:f7:94:6f:ec:48:17:8b:58:bf:d8:
b6:fb:93:88:bc:a7:de:ed:79:64:3b:fd:df:45:1e:d7:99:6f:
e9:41:15:32:15:06:23:58:21:b4:19:53:12:0d:c4:13:58:41:
d6:7e:23:80:60:0e:8b:34:0a:35:c4:8e:60:75:e1:fd:ac:ff:
13:e8:d6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:49 2025 by rpki-client