Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5660472CBE411EF88CA5EA6762E951A.roa
File: E5660472CBE411EF88CA5EA6762E951A.roa (raw, json)
Hash identifier: w4LrFNJOp2QNBC5u+rQgIVDhm1FY41IG1tmozvivkto=
Subject key identifier: 00:CA:C9:BF:C2:39:32:79:19:CA:A4:23:7E:58:78:1E:61:26:44:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013579
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5660472CBE411EF88CA5EA6762E951A.roa
Signing time: Mon 06 Jan 2025 04:15:43 +0000
ROA not before: Mon 06 Jan 2025 04:15:40 +0000
ROA not after: Sun 09 Feb 2025 04:15:40 +0000
asID: 30781
IP address blocks: 154.217.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79225 (0x13579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:15:40 2025 GMT
Not After : Feb 9 04:15:40 2025 GMT
Subject: CN=677b58ef-ddb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:4c:1b:f8:fa:c5:3c:8e:48:f4:34:1c:c7:
5b:82:dd:56:0b:12:c6:00:2f:3e:22:6d:1d:93:9e:
e3:92:c0:3e:53:53:4a:c5:fa:40:f6:be:97:fb:0b:
17:ad:72:98:a0:9e:3e:c1:da:8d:f5:d0:0e:2a:17:
3f:43:c9:32:06:a7:f8:b4:b2:0f:9e:d8:29:70:a5:
91:f1:e9:b1:7c:5a:28:41:4e:73:5c:c3:03:63:36:
c7:76:14:f8:df:20:24:47:b8:2b:52:97:cf:0a:a2:
62:69:a0:1b:10:17:11:df:35:6a:5b:b0:78:7b:14:
b6:0b:02:be:ba:0a:1d:1e:2b:9a:52:5f:00:e4:af:
40:19:29:bb:85:bc:ba:1c:24:52:3d:a5:22:23:76:
94:36:77:4f:ca:a7:4b:84:66:81:f1:bd:49:99:01:
b8:9b:5a:23:b2:da:db:8f:05:c5:94:4d:2e:8d:91:
0d:61:0f:ee:d3:a0:8a:a3:dd:8c:d2:8b:ea:e8:db:
0a:6e:ac:3c:87:b0:84:00:b9:27:34:79:b3:3a:6b:
9d:35:fb:14:9c:d6:b6:fd:9a:1b:90:7f:6f:16:55:
2d:af:6a:6d:cc:b2:9c:64:c5:da:5e:b2:5b:24:22:
70:47:3e:31:43:2d:3e:31:a7:3f:04:98:3a:86:10:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:C9:BF:C2:39:32:79:19:CA:A4:23:7E:58:78:1E:61:26:44:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5660472CBE411EF88CA5EA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.184.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:93:5c:71:0f:0d:2e:45:27:50:6a:90:99:36:43:ad:bd:25:
14:55:d4:10:8f:ea:8a:9b:11:74:05:39:ac:93:78:9d:0c:b6:
99:44:b7:91:24:8e:24:e1:23:a9:a5:a1:51:5d:f2:b4:9e:6e:
51:37:b6:73:c8:02:38:2a:de:50:14:a6:0d:29:55:7c:60:6e:
f0:a0:c0:33:46:01:ba:18:b4:ea:07:5f:b7:1c:9c:cc:af:3c:
03:4f:09:89:b7:56:9c:f1:53:aa:7a:e0:a1:57:26:4d:2b:15:
fb:ca:d7:04:8d:64:65:a8:d5:ea:96:85:4b:ca:0a:b2:24:1a:
e1:b8:7e:09:50:ce:bf:d9:7d:ec:bc:72:83:2c:a3:da:05:03:
4c:b9:31:90:3f:e6:b5:3c:5a:e4:da:96:0f:a7:d5:35:d4:d9:
94:52:da:f0:77:d4:a0:4e:60:e8:39:88:fb:7b:ad:c6:af:e8:
3a:aa:0a:2c:59:21:25:0c:a6:bd:a5:00:2f:f3:7f:8e:90:b4:
e5:62:c0:15:34:73:26:b7:38:77:18:5d:1c:5e:d2:83:00:68:
8f:8a:55:bf:aa:66:c5:8b:f4:95:91:7d:f9:bc:88:ad:0f:2f:
65:4c:68:06:7f:3f:cb:89:09:3b:fe:d0:15:80:89:21:06:01:
d7:e7:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:51 2025 by rpki-client