Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0927D3ADA6311EFBE769F5A762E951A.roa
File: E0927D3ADA6311EFBE769F5A762E951A.roa (raw, json)
Hash identifier: Bi0xZk3NS9Nj0xMA8M8+fwa2ObLpkRRUmnpY/0eOvWg=
Subject key identifier: 5F:65:7C:14:58:3C:3C:7B:12:60:B7:F7:DA:8A:04:AC:2C:39:CC:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014888
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0927D3ADA6311EFBE769F5A762E951A.roa
Signing time: Fri 24 Jan 2025 14:59:58 +0000
ROA not before: Fri 24 Jan 2025 14:59:54 +0000
ROA not after: Sat 01 Mar 2025 14:59:54 +0000
asID: 44559
IP address blocks: 154.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84104 (0x14888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:59:54 2025 GMT
Not After : Mar 1 14:59:54 2025 GMT
Subject: CN=6793aaed-04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:6c:6f:3d:3f:42:8c:92:d1:e3:43:70:e3:
96:4a:7d:8b:a6:38:98:70:4c:8a:71:a7:e1:4d:f4:
72:fa:57:f9:09:23:f9:46:62:e2:ac:4f:b8:ad:ca:
d6:34:64:ba:8e:e2:b7:cd:3d:20:5d:a6:09:5d:e5:
de:35:e3:14:50:96:5e:e6:6a:5e:52:80:f5:44:34:
27:db:d5:1e:cd:30:de:28:e3:14:b0:5a:9f:1a:d2:
36:45:5f:cb:d3:be:59:6f:72:44:9c:e6:67:91:4e:
53:5c:c5:52:08:a1:ee:e1:dc:f6:af:92:93:af:ad:
0c:20:67:59:cf:53:aa:ed:51:85:80:c5:f4:a2:a3:
16:88:15:77:43:6a:94:b8:f3:8a:d2:e1:79:90:73:
c0:a8:0a:81:b9:5a:cf:a0:e1:f4:aa:a8:6e:30:ef:
9a:cc:20:b2:04:68:33:8e:e7:38:c2:26:1b:5f:2a:
c0:ca:71:c8:ff:f7:af:20:73:67:15:64:9f:f5:53:
b4:f5:7b:dd:35:bf:60:64:32:b1:7d:86:0b:cc:cd:
2a:64:b5:bf:d0:32:f8:db:ff:ba:b9:49:3e:6d:28:
48:33:45:6a:9f:bb:6b:20:59:a0:66:f1:12:d5:03:
0b:22:bb:6b:f0:64:6a:71:1a:3a:c4:c1:f8:8f:05:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:7C:14:58:3C:3C:7B:12:60:B7:F7:DA:8A:04:AC:2C:39:CC:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0927D3ADA6311EFBE769F5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4d:bd:a1:8e:b0:8f:9d:68:13:85:2a:d3:04:90:43:b8:43:
10:b1:34:91:4f:a4:29:61:23:9d:20:bd:7b:c5:28:35:1f:e2:
09:6d:0a:d2:bb:95:f7:da:fb:5f:3c:db:22:5e:f7:5b:43:9f:
00:b4:c8:e0:96:dd:fe:9e:4f:6d:c7:70:a1:b2:85:e5:01:5b:
52:3e:68:cd:5e:77:d6:0d:d0:9b:29:93:5e:b5:93:84:25:ce:
ef:d2:e8:54:ab:03:8b:6c:1a:58:60:cd:4e:84:fb:36:8e:e9:
dd:3a:a0:b3:fe:53:6e:d5:69:13:bf:3e:36:30:af:07:1b:f1:
22:58:f4:5a:5d:49:f2:ef:2d:b8:16:36:8f:a2:97:2e:a4:23:
fa:01:92:90:0b:4c:ab:36:e6:98:63:fb:1c:41:a9:70:c9:a6:
81:43:33:d9:fd:09:15:7b:ad:b6:19:e7:b6:af:98:1a:a8:35:
4c:71:1c:d0:1c:d1:e6:04:36:c4:ad:c6:e3:d4:ed:46:47:f7:
d8:68:81:51:b4:98:6c:95:89:c6:27:76:2f:c7:af:e5:83:0a:
c0:3d:a9:5d:33:10:fa:36:ed:42:c0:22:cc:be:58:2c:ca:29:
2a:2f:4a:75:16:cc:5f:9d:a9:f1:d6:5e:aa:9c:e5:2a:a8:00:
7e:76:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:35 2025 by rpki-client