Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3014350CADA11EFB5426B82762E951A.roa
File: E3014350CADA11EFB5426B82762E951A.roa (raw, json)
Hash identifier: o/ckL5M72ndWtWIg2ztG8G00wcAlBRJTpnJ2c6Vl3Es=
Subject key identifier: 7C:8E:8E:90:DF:59:5B:0C:44:0C:EB:3F:1B:3E:9F:77:DB:C8:0A:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01354D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3014350CADA11EFB5426B82762E951A.roa
Signing time: Sat 04 Jan 2025 20:31:33 +0000
ROA not before: Sun 05 Jan 2025 20:31:29 +0000
ROA not after: Sat 08 Feb 2025 20:31:29 +0000
asID: 203020
IP address blocks: 154.217.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79181 (0x1354d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:31:29 2025 GMT
Not After : Feb 8 20:31:29 2025 GMT
Subject: CN=67799aa5-9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:95:94:be:4c:0a:b3:7a:e2:a3:9c:23:ac:
d3:ca:20:c1:5a:b3:ac:85:41:aa:89:d1:ec:4f:86:
29:8a:19:98:c1:e7:cd:7d:38:6b:37:cf:6d:80:74:
43:c7:f4:22:3e:fb:f7:c4:74:97:cc:6a:63:09:7c:
1f:01:74:2c:21:04:d1:ee:43:0a:d5:91:3d:fa:a0:
7d:8d:93:11:d6:18:f2:8e:18:93:52:3c:6a:d6:8e:
79:01:5f:6c:08:21:5c:f0:82:79:34:63:e3:b9:45:
53:1b:9d:55:85:99:b3:93:ba:05:7b:e7:b1:bb:86:
50:20:90:2e:42:d2:65:b9:93:7b:ed:9f:f4:fe:a3:
4d:5e:46:54:09:c8:45:74:a6:00:7f:49:39:39:8f:
ec:00:b3:57:c6:88:d2:6d:17:50:79:10:fc:06:e6:
5e:8c:5a:50:c1:17:f7:52:a5:4c:30:d1:69:63:1b:
ba:6f:c5:a4:0a:87:19:4b:3d:ad:d2:b4:fd:0f:c7:
1f:c3:92:04:54:bb:76:83:67:e0:61:d6:bf:9b:ae:
e9:a8:b5:77:9c:47:e0:5b:31:af:09:84:ad:75:9e:
98:7c:f6:05:c0:01:d2:fa:b1:89:c1:e2:89:4d:7f:
49:4b:8a:20:e6:56:c8:37:4f:2f:71:3b:23:98:0e:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:8E:90:DF:59:5B:0C:44:0C:EB:3F:1B:3E:9F:77:DB:C8:0A:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3014350CADA11EFB5426B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ef:b5:1b:42:ec:f2:64:4e:39:f1:7c:57:b5:60:cf:a4:00:
58:f9:30:5d:92:e2:3e:e4:b7:f6:b4:49:74:5d:fb:3f:d7:87:
42:1c:6e:d1:b2:1b:6a:e5:d8:1a:79:14:6f:be:86:4a:1e:76:
41:19:42:b3:9a:f3:94:af:95:1e:0a:98:44:bb:83:97:82:f2:
72:4c:4d:c9:0a:d0:5d:a8:e5:69:75:98:80:11:76:6e:a3:d9:
36:cb:e8:9c:29:70:76:de:d0:e5:87:b8:3c:2a:4f:a9:64:2f:
87:30:8d:b3:03:09:f0:d1:99:99:26:e8:d2:45:31:bc:30:8d:
50:f4:3d:21:03:bc:c5:e2:91:54:9c:ba:a4:d3:5e:f0:d3:96:
a0:6a:76:eb:db:70:98:dd:ed:94:a8:16:39:c1:c8:14:8c:80:
e0:0f:a2:32:eb:f8:c3:b8:54:78:f5:72:a6:bf:6a:df:58:9d:
31:c7:27:f2:a6:06:bf:44:13:88:de:a1:a7:bb:b7:eb:04:ec:
81:7d:db:66:de:32:5d:4e:ed:32:9b:98:bc:29:1f:27:af:77:
7d:eb:6b:95:57:e7:a2:8b:b4:b0:16:51:4a:79:95:54:07:a4:
71:65:0a:35:25:6c:3d:80:f4:af:38:78:44:d2:c6:50:a5:3e:
6f:1d:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:34:51 2025 by rpki-client