Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E818F12EC9C911EFA00C584B762E951A.roa
File: E818F12EC9C911EFA00C584B762E951A.roa (raw, json)
Hash identifier: rz5riFniS8GArn9Sv21HO0tlzM4BSiLMEgkW9kyVhc8=
Subject key identifier: 39:B5:9C:E5:C4:3E:7B:DE:80:4F:0B:92:47:BD:F3:A9:08:11:C5:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E818F12EC9C911EFA00C584B762E951A.roa
Signing time: Fri 03 Jan 2025 11:57:29 +0000
ROA not before: Fri 03 Jan 2025 11:57:25 +0000
ROA not after: Tue 04 Feb 2025 11:57:25 +0000
asID: 203020
IP address blocks: 154.207.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79042 (0x134c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:57:25 2025 GMT
Not After : Feb 4 11:57:25 2025 GMT
Subject: CN=6777d0a9-ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:d5:63:49:6a:17:a7:b5:82:61:3f:42:80:
02:73:b0:a1:4a:43:fa:5a:f1:30:03:61:d2:a9:cd:
c2:17:23:4b:28:94:40:2e:62:65:8c:ec:1d:da:98:
bb:06:f3:11:61:f0:14:06:5e:78:25:b0:6a:84:b6:
73:4f:97:e0:02:49:4c:87:3a:c5:da:2a:a1:58:d1:
16:6c:88:7c:ab:d5:14:62:e2:e3:20:d1:20:c9:9a:
bb:2a:a3:96:0d:a7:89:f0:9d:86:a2:e9:b0:e3:e8:
2d:bb:9f:9c:c3:a8:7e:5b:5c:d8:83:cc:cd:58:15:
2f:36:09:f0:cd:e5:33:99:f2:43:02:66:4f:6b:74:
20:9b:ff:d7:8a:ff:a0:e7:0a:77:21:9f:ca:0f:83:
da:78:c5:61:44:be:53:39:c4:24:b4:81:59:d5:cb:
e7:46:0e:23:34:86:f7:69:7d:2d:22:c4:9e:b7:a0:
d9:0f:d8:8d:ec:d3:99:1e:36:36:a2:d0:da:9b:c7:
90:38:8e:4d:c1:37:32:67:b4:b7:61:16:91:13:0f:
ff:ba:90:b6:7e:5e:41:53:a3:00:d8:75:a7:6d:a1:
b6:6b:13:c8:e7:c8:48:58:d6:93:7f:50:ab:ba:ab:
ed:08:f5:8c:9b:1c:71:f7:e0:ab:7b:fd:66:3f:41:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:9C:E5:C4:3E:7B:DE:80:4F:0B:92:47:BD:F3:A9:08:11:C5:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E818F12EC9C911EFA00C584B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:05:ab:f4:80:7b:70:ce:5c:7b:fc:11:5e:65:63:59:7c:87:
c7:82:c2:ea:83:53:21:f7:bc:68:5a:75:d3:19:c3:3f:be:fd:
48:00:4c:84:b3:9d:3c:7c:31:0e:d1:59:49:10:09:ad:e1:d6:
e9:4b:8b:5e:df:92:95:80:1c:87:fe:93:73:99:14:0f:f1:e9:
77:f2:1b:c3:bc:0d:30:4b:8e:66:3a:16:62:72:e6:b2:12:04:
33:c9:2f:87:cf:07:d8:ab:21:3f:1b:a9:98:53:de:91:36:82:
e4:4d:14:be:65:b1:1c:b9:2c:3b:c8:fa:80:4e:5a:74:a8:d4:
39:a1:c1:b5:0d:89:51:82:af:75:df:ee:f1:74:fd:bb:8b:e7:
05:4d:bc:c5:75:d8:17:fb:8e:9a:9e:ff:12:e0:d0:26:8c:36:
89:c4:4d:8b:34:14:48:8d:c7:b8:30:e7:e2:87:f8:2b:d2:37:
ec:5e:b1:04:e6:f6:74:46:30:79:e4:ab:d3:22:0f:ac:65:f9:
fb:a4:38:6f:91:1e:14:80:98:2c:96:fe:2a:03:f3:fb:92:99:
f2:e2:b3:81:5e:93:f2:b6:ce:c9:c6:36:bb:39:e6:e9:14:25:
95:01:53:8e:f3:9c:cc:66:44:ff:4b:da:d1:5b:2d:26:83:64:
f3:f2:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:59 2025 by rpki-client