Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF357B4DD5B11EFB47B6965762E951A.roa
File: DAF357B4DD5B11EFB47B6965762E951A.roa (raw, json)
Hash identifier: pGdPMNYlgTNrAFx0mVCX5h611QkNFjUOi2dJdUz2YBE=
Subject key identifier: F2:3C:6C:9A:BB:0E:4F:47:90:E0:9E:8B:2B:9D:8C:B7:C9:0A:58:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF357B4DD5B11EFB47B6965762E951A.roa
Signing time: Tue 28 Jan 2025 09:40:06 +0000
ROA not before: Tue 28 Jan 2025 09:40:02 +0000
ROA not after: Tue 04 Feb 2025 09:40:02 +0000
asID: 5065
IP address blocks: 154.206.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85158 (0x14ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:40:02 2025 GMT
Not After : Feb 4 09:40:02 2025 GMT
Subject: CN=6798a5f6-82be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:51:1b:50:6f:93:b3:51:43:43:b8:33:35:
ca:28:9e:e2:18:29:68:42:26:2c:f6:22:28:1a:34:
d6:f4:54:42:f1:41:23:a0:9c:86:ef:53:3d:2a:3d:
c8:fb:7b:ce:bc:92:35:92:3c:d6:3a:8e:89:71:6e:
c0:77:fc:f3:0b:ff:3f:52:3c:41:bb:33:b8:e5:48:
60:94:92:e8:03:c6:ee:e5:58:f9:94:69:6d:f8:f5:
53:b0:13:f9:50:72:61:40:a1:09:d3:10:78:8d:1b:
45:8e:c8:e0:3c:22:38:15:bb:39:fe:98:68:48:3d:
bb:64:7b:74:46:a7:d6:67:bc:74:7a:fb:c8:5b:40:
15:c1:9c:2b:fd:88:42:58:22:48:22:67:b2:7c:05:
a3:a9:1c:80:5f:7e:36:53:5c:bb:fd:3c:6e:ef:c7:
04:6c:51:ea:a0:62:ba:19:24:ef:09:18:78:41:dc:
35:36:ab:90:3a:e2:9b:61:b1:87:a6:93:d1:59:0c:
74:e0:d9:69:1e:72:9a:f8:20:06:50:3e:25:41:91:
10:91:80:61:c3:fa:69:75:d8:c5:26:3d:5e:30:b1:
0b:61:8b:d0:9b:93:3e:6d:30:21:87:20:f7:98:d6:
ff:f8:88:28:54:6b:6a:06:8f:ff:e3:2f:44:67:b1:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:6C:9A:BB:0E:4F:47:90:E0:9E:8B:2B:9D:8C:B7:C9:0A:58:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF357B4DD5B11EFB47B6965762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.43.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f8:46:9e:c4:b3:cc:e2:90:4c:00:4c:3b:2b:db:ca:a1:89:
cd:36:42:0d:b7:7d:70:4b:2e:05:56:22:64:73:4d:56:33:0f:
9d:c4:45:5c:37:aa:db:22:b7:13:d5:6d:ae:84:67:1e:8d:cf:
32:7b:d6:7b:b9:9e:82:06:ad:ee:ad:8d:f1:4c:7a:9a:e8:27:
b2:fd:63:5b:07:33:36:8b:0a:e4:c6:23:a3:15:63:11:f2:1e:
2c:64:8e:d3:97:19:c6:13:7b:24:2e:64:18:48:d0:29:3d:39:
44:18:43:6b:98:c8:f4:cd:70:d8:83:de:43:47:e8:6f:ce:04:
29:ea:21:f1:f1:28:38:cd:f6:9b:75:01:04:c1:a0:12:ae:b2:
83:63:90:10:ba:03:ae:f3:23:ff:0f:75:bd:0f:7e:43:fa:d4:
5f:55:b3:e5:93:28:b4:2b:78:35:dc:2a:3b:17:4f:ff:a8:67:
e3:2c:bd:38:85:43:58:0b:21:b7:10:5f:9c:5b:ef:bc:96:47:
80:fc:ed:d3:23:33:29:1c:06:9c:92:23:6f:43:74:f6:fc:29:
df:95:cb:fa:f3:d8:b8:6b:0f:1b:5f:4c:77:73:b0:aa:3e:3f:
59:69:dd:2e:c1:84:27:b2:0e:b8:b0:7c:2b:7a:8d:85:f1:33:
b3:72:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:52 2025 by rpki-client