Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B60E0DA4411EFB7BBC588762E951A.roa
File: DB4B60E0DA4411EFB7BBC588762E951A.roa (raw, json)
Hash identifier: mHz2inV4vknUFPMAZiWIZ4wkddOeYRslq/tZM92UEJc=
Subject key identifier: 2A:5F:2E:C8:50:43:6B:CE:58:CF:67:F4:AA:4F:7F:B0:E0:6E:7D:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B60E0DA4411EFB7BBC588762E951A.roa
Signing time: Fri 24 Jan 2025 11:17:54 +0000
ROA not before: Fri 24 Jan 2025 11:17:51 +0000
ROA not after: Wed 05 Mar 2025 11:17:51 +0000
asID: 202656
IP address blocks: 154.218.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83452 (0x145fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:17:51 2025 GMT
Not After : Mar 5 11:17:51 2025 GMT
Subject: CN=679376e2-411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:7d:4b:ef:16:9a:e5:52:94:18:be:d8:ab:
00:0c:6c:f6:f0:78:71:3a:c7:f5:af:4d:9c:e6:d7:
1e:7c:0e:2c:31:75:73:9f:f1:08:57:33:91:cd:25:
cc:24:70:a4:97:40:be:e1:4c:d0:cf:9e:fa:23:05:
79:8c:b3:af:1f:65:e3:a8:d3:85:be:1a:26:97:9d:
01:2f:52:e7:a8:08:4b:9b:05:25:f9:61:09:a6:ee:
67:70:d3:66:df:8b:6a:df:3b:68:8b:01:8e:b1:c4:
fe:1b:f1:23:57:0d:d1:89:25:76:81:96:da:dc:b4:
e8:37:91:62:64:b0:ca:a0:a3:a6:35:eb:6b:0e:83:
93:f2:b7:fe:ce:fd:55:e7:ef:f8:11:af:7d:e9:46:
fc:09:18:6b:cb:e1:c7:fa:52:03:c2:e7:9f:3f:5d:
31:d8:7c:ad:ae:68:2a:b0:68:7f:8a:88:0c:0b:b4:
f2:23:78:50:23:bf:77:07:f9:c2:5c:d4:6d:c1:e3:
32:e6:c0:34:c3:69:a8:ab:7d:0f:92:80:bc:09:2c:
b5:d4:97:52:6d:06:ab:1c:8a:08:06:45:d9:d7:89:
ae:e5:ca:74:e3:0e:e6:f3:5d:f8:31:10:23:eb:d1:
64:5b:ac:e5:2c:a5:6f:b6:31:50:c4:ee:ee:e2:ad:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:2E:C8:50:43:6B:CE:58:CF:67:F4:AA:4F:7F:B0:E0:6E:7D:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B60E0DA4411EFB7BBC588762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.31.0/24
Signature Algorithm: sha256WithRSAEncryption
46:00:09:90:a1:0d:f9:de:42:98:52:5c:82:e5:77:e1:d2:70:
24:58:e3:24:eb:c0:9a:25:b0:3b:fc:58:11:cf:60:3d:77:40:
11:43:ab:06:41:71:98:3a:1e:fe:9f:6b:f3:ef:1e:29:c0:dd:
85:65:0e:53:71:eb:8a:43:da:7a:07:00:b8:94:38:67:60:25:
e7:8b:6d:e2:df:bb:13:8a:2e:e9:01:8d:0d:6f:bb:21:85:da:
be:25:fa:97:aa:a3:6e:d3:37:f8:22:0e:11:3d:88:e0:87:a2:
5e:50:aa:31:37:55:5c:36:00:4c:d5:89:e1:64:2d:9b:71:e8:
2e:2a:be:43:2e:7b:71:af:ba:4e:24:25:7f:3a:9a:1c:53:2a:
96:15:b5:17:a2:bd:c3:5f:b0:c4:1c:e0:90:40:5b:cb:56:17:
6f:a3:97:97:99:eb:d6:8b:7b:c3:96:90:c5:6a:c3:95:a1:bd:
86:5f:27:b0:11:6a:20:44:d1:00:0c:6b:3b:4d:17:c9:2a:5d:
0a:bf:f7:dd:72:22:f8:bc:6c:09:b4:e4:d6:e6:8a:e4:57:a3:
aa:cc:d2:a8:b6:a1:f5:d1:4f:c3:54:89:25:ee:6b:7c:72:cd:
56:31:7a:23:c6:a4:44:26:1c:ba:f8:82:90:a1:f1:01:e6:e0:
84:4f:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:50 2025 by rpki-client