Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E68548D8E611EF877F6B4D762E951A.roa
File: E5E68548D8E611EF877F6B4D762E951A.roa (raw, json)
Hash identifier: t5swbVhD+y4Z/fCENoEVT/cZZeeNELlqZqIRsC/on3k=
Subject key identifier: 40:D3:8E:35:6A:E8:5B:97:BA:45:41:31:D2:1B:AB:77:87:6A:00:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E68548D8E611EF877F6B4D762E951A.roa
Signing time: Wed 22 Jan 2025 17:32:48 +0000
ROA not before: Wed 22 Jan 2025 17:32:45 +0000
ROA not after: Sat 15 Mar 2025 17:32:45 +0000
asID: 138915
IP address blocks: 154.206.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81940 (0x14014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:32:45 2025 GMT
Not After : Mar 15 17:32:45 2025 GMT
Subject: CN=67912bc0-52d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:76:87:ac:f1:a8:6b:25:06:55:f2:ef:c8:
e3:ef:6e:48:ea:65:f9:32:76:90:cd:78:11:ea:33:
cf:bf:8f:b9:99:59:06:00:74:04:ea:dc:3c:79:73:
bd:76:37:fc:d3:a5:cf:bf:54:b7:77:72:fe:8f:f6:
2f:46:bf:b8:e6:5f:ec:e6:e6:92:76:6f:23:50:82:
f4:63:1a:5d:9e:df:ea:7c:e9:64:60:0f:4f:09:2d:
f0:17:57:1e:5c:ab:b4:65:00:0f:80:d8:f6:cf:88:
3d:69:27:85:8d:38:91:83:0b:a5:95:50:a1:9a:0b:
a4:0c:88:ff:61:19:fe:b8:96:d3:39:22:ef:16:d5:
17:00:77:58:a3:88:e8:34:04:d1:51:6c:a4:cf:db:
e6:b3:51:3c:d1:95:45:cd:c2:a4:47:26:2d:8e:e9:
82:32:67:a8:05:b1:53:ca:2a:2e:1b:6c:02:84:f1:
44:d2:45:8d:7e:ca:bb:af:12:ab:d2:a5:5c:91:31:
4d:a7:1c:d3:02:b8:fe:5b:52:bb:ab:44:5e:fc:3e:
f8:85:15:31:4c:5f:f6:36:79:f8:4a:bb:5e:a2:c5:
fd:4e:44:7d:cc:8b:c9:46:00:4d:45:ec:59:40:97:
92:0a:b7:00:db:b4:7e:ff:45:1d:25:16:85:e1:6b:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:8E:35:6A:E8:5B:97:BA:45:41:31:D2:1B:AB:77:87:6A:00:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E68548D8E611EF877F6B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:05:d0:5f:66:07:e2:15:f6:63:36:1f:7a:f1:9d:2c:f4:65:
66:34:0c:d0:fe:c0:0f:2b:be:ef:63:f9:6f:8a:91:90:3c:e1:
1e:42:22:85:4e:c2:d1:86:7c:59:69:e1:5f:05:da:0d:90:90:
d6:99:55:47:f6:7e:30:f3:b4:e6:e4:7e:f2:cc:6f:a6:bf:6c:
d3:da:47:eb:82:8d:c5:e4:92:12:d2:6e:06:7f:a4:e3:74:db:
03:5c:13:24:52:58:87:15:74:74:72:67:9f:2c:9b:3a:6b:58:
c4:84:0b:ca:63:ab:d4:e4:04:1e:6e:c5:f4:1a:ad:04:74:07:
73:dd:9e:36:7f:67:fb:f9:4f:e6:7a:b5:be:ff:1c:a4:36:2b:
f5:d7:2e:df:2b:2c:94:20:0a:58:0d:fa:01:c4:75:91:8a:97:
48:63:bb:f5:63:9f:74:5f:19:38:ce:ce:08:4d:9e:2e:cf:46:
ac:4d:0a:57:44:61:3b:ea:cb:e7:62:07:a6:27:ab:31:eb:0c:
3f:89:52:d2:85:0f:9e:cf:40:98:af:2e:7f:2a:26:71:6c:2e:
97:10:77:74:ca:09:20:2d:5f:38:36:ae:a5:29:76:45:1f:6a:
9e:87:21:f3:42:32:06:ff:3a:b9:1e:f2:0f:c2:e4:a0:de:56:
13:08:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:08 2025 by rpki-client