Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7B6122ADA6911EF93E48B84762E951A.roa
File: D7B6122ADA6911EF93E48B84762E951A.roa (raw, json)
Hash identifier: veLci+VmvCbgFG+86vU3w0QBMH5JeIgSvw5Pw3TZzjQ=
Subject key identifier: 4C:B1:77:C9:F8:91:C9:96:DE:1A:1B:CA:58:DD:57:E2:ED:3B:9E:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7B6122ADA6911EF93E48B84762E951A.roa
Signing time: Fri 24 Jan 2025 15:42:40 +0000
ROA not before: Fri 24 Jan 2025 15:42:36 +0000
ROA not after: Mon 03 Mar 2025 15:42:36 +0000
asID: 203020
IP address blocks: 154.223.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84157 (0x148bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:42:36 2025 GMT
Not After : Mar 3 15:42:36 2025 GMT
Subject: CN=6793b4f0-c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:9e:3d:f8:ba:7c:e9:ea:32:2e:4a:ad:bc:
64:f4:d3:c1:aa:73:47:8b:05:23:dd:a5:95:b9:df:
8a:29:f7:bf:ee:59:7f:d8:be:d9:f3:f3:47:e5:b4:
d5:39:cb:5f:10:8e:61:86:29:78:2b:cb:f9:5b:66:
40:5c:e5:fa:63:a2:fb:2e:c9:3a:c2:3d:7a:86:7f:
18:b6:4b:ee:aa:22:6a:e6:25:67:28:e8:10:97:fa:
2a:2b:bc:05:c6:82:fd:31:b4:e6:f0:b1:1f:94:a0:
e3:2d:76:08:bf:34:91:c4:b5:0e:0a:c7:7a:d2:94:
ed:84:5f:d5:cd:e1:fb:36:77:4c:43:55:56:d3:ee:
86:9a:42:40:53:2f:7c:7e:70:0d:4d:ff:9d:67:0a:
de:a1:12:e5:c5:18:c2:be:cf:59:98:75:f7:62:e8:
87:28:99:6d:8b:1e:69:ec:41:c4:cf:4c:93:0c:2e:
48:63:88:49:3c:8b:2a:1e:00:ae:fe:79:aa:38:42:
f2:97:f6:56:8c:47:5d:62:26:8f:49:88:f0:24:64:
13:73:56:d0:df:bc:6c:14:28:83:ce:43:76:53:80:
b1:9e:9c:77:b5:d1:31:d6:9c:fc:b4:63:f8:29:f4:
6a:81:f8:5d:a7:b8:55:94:5a:8d:03:19:2e:34:26:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:77:C9:F8:91:C9:96:DE:1A:1B:CA:58:DD:57:E2:ED:3B:9E:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7B6122ADA6911EF93E48B84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9b:49:76:c3:f1:06:75:12:88:60:61:c9:4c:5e:91:e5:a5:
c2:fc:c4:dd:f4:d2:f9:fe:b5:a7:25:63:4c:bd:e0:bf:16:53:
d6:79:53:e0:ff:c9:1d:08:36:cc:cd:e5:ee:9a:cf:73:75:7b:
87:03:75:96:7a:f2:a8:cd:65:33:15:b1:ee:4a:f5:64:72:cc:
8a:46:fb:0b:09:e7:ae:01:64:ed:17:f7:2e:e2:a5:b6:36:69:
cf:b3:c5:e6:dd:7d:c7:81:09:eb:30:d2:c1:07:f4:2f:99:4f:
69:46:47:29:10:ce:99:c4:9a:01:a4:36:c5:2e:d6:08:bb:b7:
c0:02:ff:9b:b4:0d:2a:65:29:9d:4b:c3:cb:9e:65:d6:a8:c9:
c8:2d:ea:23:0a:39:c6:68:3d:d5:b6:75:c2:b0:46:fe:7a:58:
af:e9:aa:7b:01:1a:c3:a2:0e:05:42:1c:9e:21:af:7b:e2:6d:
9f:26:56:73:f7:e8:1e:ef:36:a6:ab:10:68:e4:c6:f5:63:46:
fa:8a:57:c3:f1:b2:68:65:cc:e3:3b:78:8d:5e:e8:c1:a4:11:
05:3f:79:c3:67:df:6e:61:f0:2d:09:41:d1:70:55:e1:eb:30:
bf:b4:5b:92:b6:0f:15:32:6c:61:0a:88:2b:da:0d:78:f9:0b:
e2:cf:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:35 2025 by rpki-client