Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F3759EDA5111EFA2BA345F762E951A.roa
File: E4F3759EDA5111EFA2BA345F762E951A.roa (raw, json)
Hash identifier: 0WVZZ4SORaZyuNUKCEjHxGB73PXAbp6IOD9zY0ESta8=
Subject key identifier: 81:A1:03:23:CA:DE:E8:1A:86:90:9D:15:8C:4B:54:64:26:2A:71:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014711
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F3759EDA5111EFA2BA345F762E951A.roa
Signing time: Fri 24 Jan 2025 12:51:14 +0000
ROA not before: Fri 24 Jan 2025 12:51:10 +0000
ROA not after: Wed 05 Mar 2025 12:51:10 +0000
asID: 44559
IP address blocks: 154.209.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83729 (0x14711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:51:10 2025 GMT
Not After : Mar 5 12:51:10 2025 GMT
Subject: CN=67938cc2-bc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:5c:bd:d8:11:b1:01:08:2b:70:7b:ca:5a:
b9:8b:6c:fb:97:a3:1c:47:74:02:c7:a8:fb:eb:e4:
af:4c:6e:ca:e8:97:54:00:04:59:3a:36:63:91:d2:
4c:e2:0e:9f:47:90:17:a8:54:6f:f9:d2:22:21:9a:
c9:31:5f:b5:b5:2d:98:64:18:3f:e4:94:b4:e0:2b:
f5:d7:f0:b0:b1:de:32:14:0b:0f:d7:38:c6:96:20:
5e:ef:21:d2:50:4f:5e:19:50:6f:5d:d7:23:4b:f5:
89:25:fa:15:38:13:b8:de:a4:21:15:0b:f9:28:db:
f9:dc:b6:84:48:46:74:40:d8:d0:25:30:7e:cc:33:
e6:18:f3:e9:07:92:a8:63:e0:3f:88:ec:a1:56:d8:
fa:5a:1d:7b:8b:d1:43:12:49:bb:28:3b:6e:24:1d:
a0:2d:1e:40:8a:70:60:73:c6:a2:5d:dd:f7:99:db:
73:14:64:19:74:49:ce:6f:ac:0b:65:65:0a:de:46:
0a:e0:9b:1f:47:30:e5:3a:fe:48:c4:12:16:a3:ce:
c0:32:74:82:a5:53:5e:ca:f0:83:20:72:ca:bc:d9:
59:01:26:57:27:b1:6e:c4:28:45:04:f8:02:54:98:
24:48:66:80:7a:ff:64:b9:f9:24:f3:9d:11:85:b0:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:03:23:CA:DE:E8:1A:86:90:9D:15:8C:4B:54:64:26:2A:71:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F3759EDA5111EFA2BA345F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4a:3f:5a:fe:df:a5:9d:29:bc:31:44:0b:ab:1a:fc:4d:90:
74:c5:b1:d1:f8:0a:af:ba:3e:45:26:1d:00:74:0c:95:94:30:
2f:00:d1:da:b5:ac:ab:7a:53:f3:d1:ee:09:a4:24:13:56:03:
7d:da:5a:96:19:ec:25:7b:50:b1:18:dc:47:67:e8:0a:8c:e0:
6e:5c:ed:f7:f5:1c:40:58:13:c9:45:83:34:d8:99:56:69:9b:
9d:a8:f6:4b:81:8f:01:2d:bb:20:84:6c:c8:a4:32:62:4b:ee:
75:a7:c5:4f:1f:81:6c:fc:d6:fd:d0:6b:8b:01:ea:2a:c4:f3:
ef:5f:86:da:25:9f:94:df:30:d3:02:d2:fb:8e:e0:36:d4:1c:
d4:90:31:38:6c:3e:a8:29:73:2b:7f:36:6a:3a:58:c6:53:64:
71:01:79:ee:38:2e:90:dc:f6:3f:29:20:b0:7b:66:8a:cc:85:
16:9e:50:1a:74:03:19:24:48:e1:90:f2:81:27:1e:ac:6d:91:
19:3b:f2:c8:af:ef:4d:70:f2:51:18:36:a9:64:6e:b4:b0:0e:
4a:4a:26:1c:4c:2e:e2:40:ba:3c:3f:32:20:43:87:d3:b8:c1:
d3:df:8d:32:6e:4c:e4:33:9f:54:a5:8e:a4:05:98:82:3b:04:
b9:2c:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:37 2025 by rpki-client