Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC178B2CDA2E11EF9A2CE472762E951A.roa
File: DC178B2CDA2E11EF9A2CE472762E951A.roa (raw, json)
Hash identifier: CfHc+B21tZ8r9lkYONvWO+ZFHsHJvJ1pBufbcavSX2k=
Subject key identifier: 23:25:83:83:A8:F9:FD:CC:11:9B:34:D7:15:64:E7:A7:23:94:98:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01447F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC178B2CDA2E11EF9A2CE472762E951A.roa
Signing time: Fri 24 Jan 2025 08:40:27 +0000
ROA not before: Fri 24 Jan 2025 08:40:23 +0000
ROA not after: Sat 01 Feb 2025 08:40:23 +0000
asID: 138797
IP address blocks: 154.210.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83071 (0x1447f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:40:23 2025 GMT
Not After : Feb 1 08:40:23 2025 GMT
Subject: CN=679351fb-81d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:59:c9:15:90:de:d8:dc:0e:fc:91:73:82:
a2:c2:9a:6a:97:08:48:4b:e8:cd:8c:41:1c:7c:de:
c2:11:54:92:95:7e:09:f4:4e:b1:f7:9f:1c:26:ac:
c0:f3:a1:54:93:79:69:3b:5d:03:49:14:f3:13:fb:
09:93:07:d3:25:65:70:d9:4f:4f:48:5b:5c:14:e2:
67:cb:1a:1d:e7:48:98:11:ef:97:0c:ec:46:a9:7a:
34:68:e6:b2:02:d4:72:cc:94:cf:d9:d8:39:6f:99:
b8:21:61:91:54:bd:25:aa:68:59:fc:20:06:1e:cd:
a1:32:d8:91:c0:72:41:54:b8:54:4e:95:05:8e:e7:
e7:e5:0b:37:29:c5:ed:14:56:e3:63:74:85:24:53:
a0:53:3a:8e:97:c5:5b:5c:d8:41:0b:e2:ae:99:e3:
51:5f:3d:06:3f:9e:15:68:dc:56:e0:a8:1e:35:b9:
76:1d:7f:46:12:0e:36:63:ce:c2:90:32:7e:0b:0c:
ce:94:b4:09:a0:bd:90:ac:48:ee:28:95:ea:e1:77:
f6:39:5a:ef:c3:b7:42:9f:d6:14:4f:87:41:66:96:
3d:f4:b5:5d:cd:89:14:00:92:63:ed:67:02:10:56:
08:ed:48:b6:b5:ef:bd:fc:8f:81:90:73:6d:c1:4d:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:25:83:83:A8:F9:FD:CC:11:9B:34:D7:15:64:E7:A7:23:94:98:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC178B2CDA2E11EF9A2CE472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4d:fa:fb:18:32:47:ee:11:7c:15:52:f7:ac:09:a7:c5:58:
a1:2f:77:7d:0d:28:21:20:d2:8e:f1:58:2b:72:7d:f0:3e:5c:
8d:3e:a6:7b:8c:48:f6:84:df:1b:da:bc:e9:03:2e:87:a4:d9:
c6:61:fd:9f:47:59:39:78:dd:59:e4:f7:27:0f:6d:2a:4d:ce:
45:5e:6c:8f:ec:6d:a7:47:de:8d:3e:c8:04:15:cd:fb:97:60:
e8:74:45:ed:d2:e2:18:15:e5:dd:57:cc:41:48:94:84:32:41:
a8:90:62:08:66:4c:f3:8b:1e:ad:f0:97:0b:a7:bb:96:ba:69:
ae:aa:c8:25:cc:b6:5a:94:61:47:cf:6c:81:84:07:7c:aa:47:
11:32:ea:f3:3a:08:47:57:cd:bc:c9:ce:2f:9e:09:55:fc:c1:
b7:55:de:39:fd:08:7a:b9:e4:45:50:b5:ff:7b:78:ee:ab:49:
d7:80:d5:b5:e4:a4:26:f4:1a:ce:7a:61:43:69:e4:70:6c:51:
26:18:79:a0:e8:8e:1b:9e:5c:d2:b4:7c:24:99:4f:5e:97:16:
43:c6:c0:86:ad:4c:5d:02:19:06:58:61:19:1a:d7:41:b2:d6:
6b:46:45:21:92:39:0f:82:5b:6e:7e:90:9d:e5:cc:0c:83:82:
e1:69:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:07 2025 by rpki-client