Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADBEAD0CEFA11EF8DF36252762E951A.roa
File: DADBEAD0CEFA11EF8DF36252762E951A.roa (raw, json)
Hash identifier: cMQxAWQid+Dr6i6mK4oSQy9xdvhLW1d5BDApVjvxKQk=
Subject key identifier: 69:B1:32:B7:17:0A:92:0B:A6:5A:17:26:7E:B5:44:69:91:4F:CC:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01398D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADBEAD0CEFA11EF8DF36252762E951A.roa
Signing time: Fri 10 Jan 2025 02:30:28 +0000
ROA not before: Fri 10 Jan 2025 02:30:24 +0000
ROA not after: Fri 14 Feb 2025 02:30:24 +0000
asID: 395793
IP address blocks: 154.91.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80269 (0x1398d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 02:30:24 2025 GMT
Not After : Feb 14 02:30:24 2025 GMT
Subject: CN=67808644-b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:9d:77:e7:94:dd:51:27:9c:57:ec:dc:3b:
59:25:1d:18:8a:4b:f0:97:5b:97:f9:1c:77:13:f7:
72:fb:8c:29:c5:68:76:7c:db:c8:78:a7:da:5a:69:
35:32:c2:d1:47:97:6e:b6:c0:83:8f:d9:a2:f5:56:
ce:39:06:b4:61:f9:a9:50:34:1c:16:58:f9:8a:a6:
9f:8b:55:ef:ee:df:ee:a3:de:50:bc:58:b4:78:99:
e6:e4:0e:8e:15:19:10:da:48:e8:e2:d6:40:a2:23:
b9:0d:c6:ad:e8:29:d4:43:a1:c4:ff:b2:80:f6:39:
1a:cf:ef:51:7f:e5:9d:dc:bc:bf:2c:87:39:60:b2:
15:5f:66:c2:7c:ab:21:10:fe:49:82:d2:ad:ab:71:
f3:fd:3c:cf:fa:d3:4d:b4:33:73:07:af:32:92:0d:
6f:c3:d7:4a:fb:49:2d:1e:00:aa:2c:8a:33:f8:3e:
5e:ff:98:ec:bf:a9:94:c2:ba:c4:1c:88:63:75:58:
a1:c1:f4:f0:a9:fd:69:5c:3f:b6:98:3c:3b:ac:ca:
f9:04:44:23:e7:8d:94:f5:ab:4b:5d:f5:48:cb:b5:
c8:3c:0a:2c:ea:8a:46:c7:e1:83:8e:f9:5d:33:86:
14:1c:d7:93:1a:b1:84:02:fc:c4:8d:20:d8:ad:6c:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:32:B7:17:0A:92:0B:A6:5A:17:26:7E:B5:44:69:91:4F:CC:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADBEAD0CEFA11EF8DF36252762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.152.0/22
Signature Algorithm: sha256WithRSAEncryption
09:eb:40:0a:fa:4f:0a:5d:a9:25:51:1b:91:3a:c5:7f:14:ca:
27:79:f1:0b:a7:39:29:92:8f:df:db:5d:eb:e7:26:92:4a:65:
4c:40:f1:62:2c:f2:bd:bf:6e:46:85:c8:de:88:8b:99:92:33:
b9:69:ca:0c:03:be:f7:0c:eb:3a:29:90:0b:56:42:7b:78:dc:
1b:11:3c:c7:3b:c5:27:8e:4e:5e:bd:c1:fa:93:b8:27:79:c8:
6c:fd:4f:5a:82:00:af:11:d5:24:98:65:8f:bd:25:6c:aa:58:
6b:a7:7e:ce:6a:c8:df:b1:f4:3e:ec:42:c4:e2:81:cd:08:1a:
1d:4d:78:35:4a:98:44:58:03:b9:81:bb:d8:86:c5:4e:b9:09:
51:e7:d1:54:c5:56:4b:de:3e:a5:78:31:58:a6:44:35:2c:cd:
be:c1:f4:89:b4:d5:53:c3:aa:88:10:fb:92:3f:a1:58:c1:23:
66:48:64:00:b2:a8:0a:29:2f:f8:3a:0d:2a:b8:d3:2e:99:b7:
71:c7:87:61:79:fb:31:e9:ed:d7:8e:65:f4:d1:58:11:ff:ec:
56:71:87:25:80:02:9d:87:ab:85:a4:7f:5d:a3:a5:e9:2c:b0:
61:d6:73:58:9d:92:3b:ae:2f:e4:3f:67:3b:30:38:b4:b9:3a:
7f:5d:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:57 2025 by rpki-client