Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66BC3ECDA5E11EFAEF131B8762E951A.roa
File: E66BC3ECDA5E11EFAEF131B8762E951A.roa (raw, json)
Hash identifier: ytPL4YKaFQUifJSHeKSpIwnUHkpG+gsfNikOudPcXpo=
Subject key identifier: D5:55:33:F4:2F:B8:0C:A6:E7:FE:1F:A3:21:3E:40:9B:27:9C:1A:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014819
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66BC3ECDA5E11EFAEF131B8762E951A.roa
Signing time: Fri 24 Jan 2025 14:24:20 +0000
ROA not before: Fri 24 Jan 2025 14:24:16 +0000
ROA not after: Sat 01 Mar 2025 14:24:16 +0000
asID: 44559
IP address blocks: 154.205.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83993 (0x14819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:24:16 2025 GMT
Not After : Mar 1 14:24:16 2025 GMT
Subject: CN=6793a294-dcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:1a:5a:7e:f9:60:48:72:67:ee:59:ba:41:
f8:9b:0b:dd:d1:16:e7:78:81:8c:40:cb:76:01:68:
0c:64:5a:0f:c6:83:41:57:6a:69:ee:35:96:6a:4f:
58:51:e6:6c:3a:cc:a5:9a:f4:19:b4:0c:bc:80:33:
d4:d6:21:29:ca:a4:e8:04:2c:28:44:03:c8:32:8a:
25:e4:fe:91:ac:f9:3f:e3:17:c4:a1:06:1c:4a:db:
54:ed:d5:18:98:1a:70:00:bd:a8:b9:aa:9a:df:4b:
83:8b:ef:d4:72:d6:4a:8b:c4:85:4a:f0:0f:2c:96:
5c:3d:45:a4:62:42:6f:36:ee:26:04:3c:09:13:a4:
03:21:15:cf:1f:f3:a3:31:c0:19:f8:63:62:65:cb:
d6:5a:a2:cc:d2:9a:5f:1c:e1:7e:c7:8d:b6:74:33:
59:f5:d5:e0:88:a3:48:b3:ac:c7:e6:1e:97:be:d9:
00:61:99:02:64:94:f0:88:62:53:c1:d9:ff:ab:6a:
11:e3:ec:00:f6:d5:f0:5e:6a:2c:ef:fd:2d:dd:8d:
6e:a6:9f:48:78:99:e1:0d:a0:25:50:d1:10:fa:bd:
bc:87:ad:3e:f2:ba:02:5c:79:a0:f7:81:66:fd:99:
db:21:99:b1:2e:dd:bf:2b:f9:86:9f:d4:fc:c8:96:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:33:F4:2F:B8:0C:A6:E7:FE:1F:A3:21:3E:40:9B:27:9C:1A:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66BC3ECDA5E11EFAEF131B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.28.0/24
Signature Algorithm: sha256WithRSAEncryption
26:04:c6:33:38:e7:f2:9d:da:15:c4:1b:2d:64:4e:87:ef:58:
42:88:ae:55:ba:31:df:5d:ff:09:68:4c:b5:26:5e:5a:8d:1a:
6e:45:8d:0e:d1:2d:70:5b:c3:1c:a5:bc:57:75:5c:13:a0:31:
e7:13:3a:54:f4:dd:76:d0:41:a7:a4:66:d0:3c:c5:24:ca:99:
02:11:10:33:73:a6:84:41:63:25:ea:65:3a:4a:d6:b7:68:e1:
00:93:d8:07:b8:07:d4:08:a3:58:f9:c6:59:fc:ce:a7:d9:ff:
7f:fb:bc:26:d7:59:2d:80:9f:27:21:bc:7b:40:ab:f1:00:27:
04:02:41:db:5a:93:7e:52:e9:f1:c6:90:fe:84:f5:f3:19:b0:
94:df:ff:82:24:64:79:7c:e1:7c:31:11:2d:5d:1f:27:9c:ea:
88:13:ba:56:ad:4f:e2:f4:12:49:b5:9b:3b:28:09:02:35:d6:
e0:72:62:21:11:e4:a0:e2:40:49:ea:74:16:2c:8b:9a:08:6b:
7d:e1:70:7d:4f:91:48:5a:46:cc:48:ff:34:18:cb:8c:5a:cd:
5b:34:cd:6b:b6:b7:e9:f4:5c:56:96:76:1a:92:a4:b0:f2:14:
c0:ff:4c:e9:b3:55:05:66:ea:4f:10:ec:43:23:ba:d4:81:e5:
b6:43:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:49:16 2025 by rpki-client