Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71C707CDD5E11EF9841B379762E951A.roa
File: E71C707CDD5E11EF9841B379762E951A.roa (raw, json)
Hash identifier: IF+60RkLSTyisDNddMWWTcZMyCnxy1AL2/DhYg1Pzhw=
Subject key identifier: D9:AE:34:BB:7B:7B:9C:15:75:EF:48:52:55:8D:B6:77:49:FB:0B:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71C707CDD5E11EF9841B379762E951A.roa
Signing time: Tue 28 Jan 2025 10:01:55 +0000
ROA not before: Tue 28 Jan 2025 10:01:51 +0000
ROA not after: Sun 09 Feb 2025 10:01:51 +0000
asID: 7018
IP address blocks: 154.81.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85176 (0x14cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:01:51 2025 GMT
Not After : Feb 9 10:01:51 2025 GMT
Subject: CN=6798ab13-dcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:66:34:3b:e3:69:20:79:24:43:ab:e5:2f:
db:01:c4:78:ef:25:05:90:40:e5:6b:ac:86:35:27:
db:1d:35:8d:b5:9f:1c:d2:47:ec:ce:1f:19:52:03:
14:37:07:c2:97:9d:31:cd:43:df:6a:22:4d:4f:db:
56:d8:fa:30:50:fa:43:8e:32:37:76:fd:d1:56:c2:
12:99:47:ad:53:32:6d:46:83:04:42:29:15:b1:c9:
9b:8b:01:4c:3a:17:44:8d:fd:28:e6:bf:46:91:64:
8b:38:b8:28:2a:29:14:ce:f1:ed:9e:f2:33:5e:dc:
30:18:c2:61:3e:96:90:49:fa:4f:8a:90:7f:3b:f2:
48:cd:89:4d:cd:c4:17:d0:ce:59:00:c1:ae:cb:71:
1e:20:ff:f8:dd:cd:d8:1f:78:c0:13:36:7e:aa:bb:
73:5a:d5:e1:ae:49:2d:33:c6:58:bd:46:33:1e:21:
df:b8:10:89:db:cb:e7:98:7f:d9:be:cc:9a:d9:b9:
f4:14:3b:f6:b4:37:86:4f:d9:f7:cd:99:03:15:99:
7d:55:16:e4:63:84:e8:eb:08:5b:61:38:83:ff:af:
ec:c7:55:92:d5:8b:d4:9f:1d:ef:14:2a:c6:74:1b:
a2:3e:cb:e1:ff:8b:c1:12:23:9c:d5:55:2e:4d:a3:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:34:BB:7B:7B:9C:15:75:EF:48:52:55:8D:B6:77:49:FB:0B:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E71C707CDD5E11EF9841B379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:2a:08:22:8e:8e:2c:06:67:2a:a2:8d:ef:46:4f:c1:5b:9e:
ef:b1:7c:96:68:be:f5:6d:f3:89:df:e3:6a:68:74:ff:01:26:
52:c7:e6:5a:08:97:28:94:de:29:63:d5:e7:9a:75:4a:73:22:
d4:60:bf:73:fc:a6:71:a0:c4:c5:8b:0b:68:40:a9:b5:75:eb:
dc:5a:3d:5b:0b:8e:ea:05:39:6c:76:e7:82:e8:d9:28:8a:cb:
57:22:6f:1b:26:51:7c:0e:b6:e5:be:e3:57:dc:af:89:cb:1b:
70:ba:e9:6f:f5:79:c2:9e:bf:9e:2c:66:08:1b:93:3e:1b:98:
2b:ab:c3:91:65:c1:c8:fd:b0:9b:60:33:4c:3b:9f:10:58:a4:
52:94:fa:0e:37:69:97:a2:bb:5c:b4:f2:13:9f:e6:25:78:ee:
92:85:16:dd:45:49:97:f5:d1:2f:95:d7:f7:d5:d4:3f:a6:4f:
f0:9a:c2:a1:32:8e:42:fd:8c:81:bb:36:50:27:4e:7e:a1:1a:
ff:e6:87:e0:17:50:66:b5:bd:98:e6:44:56:cc:63:60:30:2b:
d8:a9:65:c6:91:9a:5c:81:67:85:a4:fe:0e:18:1b:d0:96:db:
3c:f7:6c:65:64:93:f9:0c:4b:a8:e2:fc:8b:0d:79:78:b1:ba:
c0:1f:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:52 2025 by rpki-client