Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF9C062DA5211EFAE7C0768762E951A.roa
File: DDF9C062DA5211EFAE7C0768762E951A.roa (raw, json)
Hash identifier: I+Njydc+IDQ98dxON/INdFJuyUXMnPACfPtLYyK95OQ=
Subject key identifier: ED:84:7F:9C:34:C0:62:2E:25:FB:D9:F5:2F:E6:3A:18:90:F5:85:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01472A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF9C062DA5211EFAE7C0768762E951A.roa
Signing time: Fri 24 Jan 2025 12:58:12 +0000
ROA not before: Fri 24 Jan 2025 12:58:08 +0000
ROA not after: Wed 05 Mar 2025 12:58:08 +0000
asID: 44559
IP address blocks: 154.209.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83754 (0x1472a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:58:08 2025 GMT
Not After : Mar 5 12:58:08 2025 GMT
Subject: CN=67938e64-6284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:ff:77:d7:88:99:8d:7e:7c:05:71:d6:4b:
f6:5a:48:8f:13:e4:14:32:0e:91:05:f7:e4:d0:95:
b9:76:fb:7d:05:a7:e3:9e:90:f0:e2:ac:e3:87:f2:
ad:8c:8b:00:48:08:72:c4:24:3d:7d:df:6e:8b:f1:
d8:59:9d:21:52:ac:19:ca:27:64:3f:e3:a0:c1:29:
cf:13:45:17:7f:80:75:5f:5c:bc:86:8d:1b:31:c8:
b8:bc:5b:6c:3e:8d:55:d7:48:99:66:36:3a:ff:81:
05:9c:c0:0c:1b:df:08:07:96:75:76:45:ee:a5:07:
42:35:7a:55:d1:c9:24:12:8f:29:c3:8a:d3:15:8e:
4f:f9:ef:31:35:93:34:74:f7:6e:41:cc:54:89:30:
ed:f4:57:0e:6b:f6:1d:b8:fd:85:46:01:97:7c:71:
75:92:e0:75:45:7b:58:dc:f0:c0:06:9e:d8:69:42:
ee:35:c2:eb:73:9d:fd:29:00:7d:41:aa:e2:72:f4:
f9:37:3a:87:7f:06:4d:cd:d3:0f:95:35:e9:87:36:
a9:f8:88:1d:5f:8a:12:c9:7d:8b:5c:a5:0e:42:8f:
ea:63:70:ea:d7:5c:fe:57:2b:67:05:83:ea:8f:af:
5e:67:27:9c:d4:dc:5c:84:a2:a2:21:b4:84:91:19:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:7F:9C:34:C0:62:2E:25:FB:D9:F5:2F:E6:3A:18:90:F5:85:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF9C062DA5211EFAE7C0768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
23:10:0f:10:b9:97:cf:9b:b9:b4:39:bd:32:a2:81:a1:a8:5a:
c1:da:1a:bd:4e:84:9b:d3:c1:d9:cc:05:22:2a:ef:08:5e:c6:
75:18:80:d0:38:b8:43:d7:56:3d:3d:ee:0d:0c:f8:b7:01:bc:
d2:2f:99:1b:4a:56:f2:bb:b4:f8:57:3d:b9:89:82:7f:ac:7f:
f9:72:f3:38:75:e2:a9:84:bc:2d:4e:f0:69:f0:98:b5:56:bb:
4e:40:b1:91:f1:0e:dc:f0:e5:a9:e0:8d:80:49:67:c9:2c:e6:
ea:2c:f6:07:69:63:91:ff:d8:c4:4e:c8:f0:f1:20:11:0a:2d:
3e:43:95:09:a4:e1:a9:40:e3:dd:a3:a7:14:74:6e:2c:04:3a:
8b:b2:f5:94:c2:97:ad:bf:59:83:61:79:88:e4:8a:b4:71:88:
b8:ca:7d:a3:9d:ab:77:0d:ff:6a:16:b2:91:37:5e:09:0d:40:
04:bb:51:12:b8:0b:ad:7c:a8:83:5c:8e:18:36:c7:d1:f7:9b:
a2:f9:87:3d:13:39:54:5f:8f:4f:ad:29:52:8f:aa:dd:4d:9a:
2e:2c:34:03:d8:01:3b:c3:43:9a:75:79:dd:fc:c3:64:d9:f9:
e9:1a:cf:f1:4e:0e:2b:15:98:a9:ca:52:e0:f9:f4:e1:35:5f:
81:b3:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:15 2025 by rpki-client