Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF49F18EB5FA11EF8168F68D762E951A.roa
File: DF49F18EB5FA11EF8168F68D762E951A.roa (raw, json)
Hash identifier: wllOQpdJtqHG+bhGlSuqa6vnfHD9GDTW18mSRJtF4TI=
Subject key identifier: 18:97:60:EF:01:F1:40:F3:16:3C:47:02:A2:30:32:BE:9A:D5:8E:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF49F18EB5FA11EF8168F68D762E951A.roa
Signing time: Mon 09 Dec 2024 06:57:36 +0000
ROA not before: Mon 09 Dec 2024 06:57:33 +0000
ROA not after: Thu 06 Feb 2025 06:57:33 +0000
asID: 149014
IP address blocks: 154.223.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72127 (0x119bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 06:57:33 2024 GMT
Not After : Feb 6 06:57:33 2025 GMT
Subject: CN=675694e0-0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:11:52:ea:c7:e4:a9:03:02:c7:5a:29:8a:
74:83:fe:82:db:74:a5:ca:38:25:47:08:74:9e:df:
a6:96:d7:e8:76:a7:c5:9c:35:fb:4c:90:97:79:28:
8a:5e:d4:76:c2:b8:06:0e:2d:1a:5e:19:23:99:52:
a0:7d:08:9f:10:3b:8e:36:db:c6:7e:a1:12:5f:1d:
d2:1e:cd:45:bd:33:92:f3:63:ea:55:a7:fb:97:d1:
67:17:60:78:4e:fd:06:9e:83:d6:7d:2e:19:4e:17:
c9:ad:f1:8b:14:25:b9:2c:db:03:1b:dd:f8:a4:18:
87:fb:2e:a1:f8:ee:3b:b8:ab:56:27:81:40:05:c5:
0d:3b:a1:03:af:d8:0d:3c:fa:90:ed:72:05:2e:e3:
f6:1e:f8:8d:b4:1e:e7:b5:fe:2f:77:05:19:3c:38:
35:4e:66:26:36:5a:99:b3:e8:eb:07:5c:f8:37:86:
05:39:1d:ee:a6:02:98:15:60:00:93:1d:fa:db:ab:
60:b8:10:fe:85:d2:f1:c9:b5:79:33:e2:fa:89:2d:
93:24:a1:08:94:02:ff:71:f3:68:fb:4e:ab:cb:b5:
45:65:c2:5b:0b:1c:73:16:d0:83:fa:2f:9c:c1:2e:
31:1e:a3:26:41:94:dc:6a:0c:82:f2:90:59:fd:e9:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:60:EF:01:F1:40:F3:16:3C:47:02:A2:30:32:BE:9A:D5:8E:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF49F18EB5FA11EF8168F68D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
96:e0:52:e3:75:4b:81:9b:78:d0:48:02:99:41:fa:4e:f1:06:
99:ee:9f:60:5e:d4:97:fb:ea:7d:89:42:d9:bd:8d:7a:4f:a2:
e4:32:5c:4c:f8:66:e2:70:ce:ca:09:55:52:72:e5:b2:d8:1e:
79:f8:11:83:fa:60:24:9e:4f:0a:26:71:cb:2b:e3:38:5f:fe:
e7:2f:6f:77:09:73:28:23:99:c1:76:a4:f2:90:c8:12:df:b5:
46:e8:95:05:9f:ca:8d:f8:dd:0b:7f:dc:fb:0d:6d:41:c5:3f:
83:3c:1d:ee:0f:d9:f1:c3:0f:8a:24:e2:21:65:0f:36:07:df:
00:b1:56:28:db:61:00:c8:67:df:0f:58:5b:da:14:ee:65:7b:
90:a5:74:32:5f:6f:9a:d3:5e:d3:f0:11:f6:3a:6d:3e:42:67:
01:67:68:bc:95:fe:8c:9a:59:39:5f:63:de:da:8e:ee:2e:51:
05:7a:18:6d:46:25:14:24:99:98:8d:e5:62:6d:62:c1:8a:5f:
9f:48:2b:59:4c:e1:d1:a3:66:6c:30:75:ba:d1:4c:c0:23:ba:
0d:a6:1b:3f:79:8e:db:43:d7:1b:04:31:4a:2b:19:aa:6d:9f:
8b:db:34:5b:d2:26:e0:2b:7f:eb:7f:7c:1f:cb:0f:f8:63:89:
b7:e2:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:28 2025 by rpki-client