Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2351B72DA4E11EFBA88044C762E951A.roa
File: D2351B72DA4E11EFBA88044C762E951A.roa (raw, json)
Hash identifier: tASrQqtA6lwJYYiCmzrtlrnLFcUn02QB6rBdaLdnNh4=
Subject key identifier: 91:0D:E6:70:04:EA:19:0A:74:E1:BF:C8:F8:14:8D:71:1C:3E:D2:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2351B72DA4E11EFBA88044C762E951A.roa
Signing time: Fri 24 Jan 2025 12:29:14 +0000
ROA not before: Fri 24 Jan 2025 12:29:10 +0000
ROA not after: Wed 05 Mar 2025 12:29:10 +0000
asID: 44559
IP address blocks: 154.209.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83658 (0x146ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:29:10 2025 GMT
Not After : Mar 5 12:29:10 2025 GMT
Subject: CN=6793879a-29c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:2e:e2:ae:4b:ad:ed:f0:70:5b:a4:da:a1:
a2:81:3b:b8:5e:aa:88:b0:79:9d:be:5d:ac:f1:50:
04:49:27:c0:65:27:ee:1f:1d:5a:b2:98:7a:3f:56:
d0:68:72:27:45:9f:e2:15:1e:4c:d9:cd:e3:33:76:
62:d8:9c:87:45:62:b4:62:17:b0:9b:59:f3:5a:7b:
22:19:3c:d5:20:1d:56:9a:64:78:cd:aa:d9:4f:05:
d6:36:58:46:09:4e:20:31:76:22:f1:f8:7b:83:43:
a1:69:80:ed:fc:b3:07:d4:56:f9:9a:77:d1:92:3c:
53:4a:a3:85:ce:5f:28:3e:0e:53:39:e8:ea:10:bd:
ea:22:bd:f0:7d:9e:d9:49:6a:10:d3:de:3d:4f:ac:
68:6c:48:7d:66:da:03:a6:a7:cd:30:9f:9a:5f:c9:
a9:98:fe:bd:1c:43:fe:e9:5a:4a:ee:a0:ee:bb:ed:
4b:d8:f2:fc:ec:83:00:8a:90:34:5a:6a:8d:2c:47:
63:e6:a2:29:1b:bf:28:74:14:43:85:b3:3e:69:77:
d4:81:3a:bd:75:17:0a:60:36:99:ba:40:1b:a7:b9:
21:de:f7:e1:96:94:f6:79:3f:45:39:72:45:fc:8f:
c4:6b:0e:a4:71:aa:cd:6d:0b:33:fe:84:3a:8b:4f:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0D:E6:70:04:EA:19:0A:74:E1:BF:C8:F8:14:8D:71:1C:3E:D2:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2351B72DA4E11EFBA88044C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9b:1e:f5:8d:0b:54:30:87:5f:13:00:88:c4:27:b0:1e:6a:
d8:1c:6f:35:a4:85:92:8d:f5:47:b3:a7:1a:69:cb:f7:6d:7f:
53:dd:71:84:db:70:d8:9e:fc:c6:23:6e:5c:6e:f9:0b:42:d0:
6b:a5:b6:6a:d1:de:1a:e5:35:e8:be:0f:6c:2e:d0:fe:cc:34:
e0:6f:2f:ea:c9:cd:61:f1:d3:82:f1:83:0c:a5:e2:3a:6c:32:
c8:f5:7a:48:a3:8a:a6:36:0d:4e:fa:f5:46:1c:d0:39:a2:08:
5e:df:4f:2a:bf:ea:43:76:d2:35:92:bb:06:85:c7:94:ee:4c:
c6:56:7e:68:0d:4f:14:e2:95:8c:ec:17:af:e8:78:28:80:eb:
e7:f1:1f:22:dd:2e:d4:f4:f0:6f:89:25:c9:b2:8c:ea:0b:07:
41:50:2b:19:48:8b:49:35:3e:38:c7:2d:f2:df:43:56:31:e1:
2e:5b:2d:53:79:50:0c:d9:67:52:97:a8:80:e7:aa:4e:22:c0:
e4:49:eb:32:61:8f:e4:b3:ef:03:28:89:cd:d1:b0:73:6d:3c:
fd:4c:69:8b:19:a4:b6:18:54:70:21:a8:96:ef:f6:5c:8d:54:
4d:92:8c:e4:65:6d:8f:9d:13:fc:91:8d:24:dd:b2:c9:b6:ea:
42:27:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:19 2025 by rpki-client