Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A9A0ECDA6011EFB267C747762E951A.roa
File: E7A9A0ECDA6011EFB267C747762E951A.roa (raw, json)
Hash identifier: Nk3dmkWJDutsdMRchizkFsrP6eKQ+9a6HlPXysnvp2M=
Subject key identifier: E9:3F:48:DE:2E:36:8A:61:59:82:D4:5D:09:FF:92:5D:EA:E5:C7:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01484A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A9A0ECDA6011EFB267C747762E951A.roa
Signing time: Fri 24 Jan 2025 14:38:41 +0000
ROA not before: Fri 24 Jan 2025 14:38:37 +0000
ROA not after: Sat 01 Mar 2025 14:38:37 +0000
asID: 44559
IP address blocks: 154.203.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84042 (0x1484a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:38:37 2025 GMT
Not After : Mar 1 14:38:37 2025 GMT
Subject: CN=6793a5f1-474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:87:53:dd:6a:c8:20:4e:8c:60:9f:3a:88:
89:73:13:63:13:5c:9e:e7:66:af:b2:3a:6a:b7:ae:
32:3c:5d:26:ea:4a:73:49:3a:4b:c5:fa:43:e8:3f:
42:b5:3c:eb:bd:a7:84:81:4e:ea:7e:2f:13:b8:66:
d3:de:ee:73:39:ef:2e:7f:bf:d4:ad:e8:3e:c6:e5:
54:79:02:74:d6:39:78:39:72:5b:1e:b6:bc:ad:a9:
b3:98:93:74:ab:1f:dc:d4:b2:3e:f2:31:60:e8:ec:
20:b3:f1:b9:2b:86:ae:4c:69:86:06:2a:ba:40:8a:
09:c1:5c:1e:b3:2c:c8:34:57:73:30:0a:76:1d:c0:
21:0b:59:90:b0:8a:19:11:65:a4:fa:bd:b1:8e:92:
c7:b1:80:09:94:9d:48:58:b1:63:d8:0c:35:fd:d2:
6c:8e:d5:c0:2a:e6:48:ce:c4:82:0a:0e:98:b4:94:
db:f6:8d:75:2c:98:25:ed:c5:55:bf:a4:65:ad:62:
02:b7:8c:a1:37:f2:46:17:9b:9d:bd:94:2b:57:70:
a1:fb:6d:3c:39:dd:e2:f5:29:75:8c:29:c4:24:45:
39:dd:bc:8a:2f:2d:9e:5f:27:4d:4e:4c:bc:5d:93:
97:4f:02:f7:c7:cf:14:d9:85:f8:b2:d9:f6:a4:8d:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3F:48:DE:2E:36:8A:61:59:82:D4:5D:09:FF:92:5D:EA:E5:C7:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A9A0ECDA6011EFB267C747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.228.0/24
Signature Algorithm: sha256WithRSAEncryption
22:51:4b:3d:03:d5:30:ea:86:c5:58:95:ee:61:55:ac:c6:ba:
ab:9f:86:7a:2e:98:2f:1b:81:ae:35:7a:4b:56:47:44:90:75:
db:c5:f3:2a:cb:b7:60:9c:8e:36:9c:4a:97:52:4c:78:a4:0c:
3e:05:18:b4:0b:ed:36:d3:2e:9b:28:b2:2f:f9:7e:54:23:2c:
f3:93:04:f1:c7:a1:dd:e8:da:31:87:02:ce:f4:2c:4f:08:38:
bf:02:9a:bc:6b:51:4f:7c:b8:3e:14:17:c6:ff:dd:71:29:2b:
22:4d:36:2c:7c:4f:ec:da:fb:05:6d:64:de:da:d8:33:65:32:
98:c8:e6:00:32:aa:dc:eb:f1:c9:e2:64:ee:ff:a6:b0:31:04:
56:e1:1f:b3:a0:ca:1b:2c:73:39:b2:f4:03:22:9e:c9:fa:94:
ba:36:ed:e5:be:1f:8d:1a:9c:82:27:f8:09:53:b5:3f:09:4d:
ee:26:b2:be:0c:c6:a0:90:69:ec:6a:63:3d:e5:53:04:6a:d5:
e2:b3:05:4f:06:1f:60:a0:f0:bc:80:31:8a:db:c7:ee:5b:a1:
bc:8c:e8:22:e9:ff:42:25:58:9e:fb:c2:ac:e2:ee:d9:0a:26:
06:de:46:cd:ff:9d:e7:af:ba:98:63:74:79:e3:22:fd:92:c8:
6e:74:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:08:10 2025 by rpki-client