Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9620190D97511EFA67C8E93762E951A.roa
File: E9620190D97511EFA67C8E93762E951A.roa (raw, json)
Hash identifier: iRjVF6i+vAV2+uZdWvq5/Pr+Uf+iGYQrLbyzgxzvwjM=
Subject key identifier: 86:94:5B:02:E2:44:5C:B3:63:54:77:F3:DA:1E:B1:F9:90:B6:F9:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014135
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9620190D97511EFA67C8E93762E951A.roa
Signing time: Thu 23 Jan 2025 10:36:32 +0000
ROA not before: Thu 23 Jan 2025 10:36:28 +0000
ROA not after: Thu 13 Mar 2025 10:36:28 +0000
asID: 138915
IP address blocks: 154.203.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82229 (0x14135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:36:28 2025 GMT
Not After : Mar 13 10:36:28 2025 GMT
Subject: CN=67921bb0-34ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:dc:24:64:86:7e:7b:e1:f5:b7:2a:0d:5b:
59:27:4d:f7:73:cc:66:93:93:d7:5d:0e:ff:63:cc:
61:e8:55:0e:13:b8:8a:67:6e:bd:ba:3a:87:08:8a:
3f:23:12:ea:28:7c:d0:58:e2:c5:9f:ff:07:21:65:
87:0f:e7:89:29:31:1c:43:a1:a8:08:6c:70:4d:4f:
23:7d:f0:5c:21:0d:5d:ea:1f:29:bf:8f:d5:06:ad:
1c:e2:c0:fd:5c:d6:3a:d3:98:d7:4f:de:f6:cd:9f:
18:5e:5f:57:15:2a:80:7a:ff:d3:43:d0:de:f3:ce:
2f:d2:41:30:82:c0:95:65:0f:a2:da:8d:18:c7:2e:
42:8c:0e:1e:54:89:78:c3:48:59:83:c8:68:95:67:
a0:0b:4c:b1:93:3f:00:ca:04:51:6f:19:b5:5a:c4:
e9:ee:31:f4:4d:f7:5f:9e:d1:f1:f2:1e:84:06:51:
b7:90:34:d5:68:c7:e1:b6:79:17:10:03:05:84:6e:
3c:86:08:1f:11:7c:26:cb:4d:05:f4:b3:5d:83:56:
68:90:c5:b0:a2:02:6a:5d:cd:96:6f:e2:3b:75:18:
d8:26:d9:5c:de:7b:8e:3e:a0:cc:17:51:3e:3a:c0:
be:71:c1:3b:38:7b:c7:df:16:d4:91:e4:a2:7d:98:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:5B:02:E2:44:5C:B3:63:54:77:F3:DA:1E:B1:F9:90:B6:F9:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9620190D97511EFA67C8E93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:30:41:69:74:77:31:c8:16:72:49:65:34:9d:76:bc:6b:3f:
eb:3f:7f:f6:cf:c5:92:51:f2:d8:7b:7a:99:13:4a:f6:5f:b5:
19:21:13:a6:b2:3b:c6:0a:e4:f5:f7:37:18:1b:cf:06:cd:64:
03:9c:84:0a:84:ac:a7:04:a2:5f:de:49:5e:85:4e:e0:55:20:
cb:f8:cd:c7:5d:6c:3b:a7:30:9f:d6:29:7f:bb:a8:55:e8:9a:
59:3e:b7:14:75:db:0f:5a:37:05:0d:7e:83:3e:6f:f9:08:00:
77:2d:47:52:73:b5:e6:d1:f4:f1:38:d8:ab:9c:87:8e:58:43:
01:bc:bd:10:93:56:07:f8:d6:c1:d3:f4:fe:27:67:63:89:af:
63:ca:05:14:43:74:f4:1a:f9:de:6f:66:bd:55:d1:12:9d:04:
66:48:47:bf:9c:70:91:9a:7d:42:e6:bc:70:5f:a8:4b:98:0f:
88:be:20:1f:06:c5:2e:09:55:1c:ba:6b:9c:03:89:22:53:93:
a5:6c:2d:6c:00:f1:07:16:2b:0c:39:3a:e4:42:7d:45:59:1f:
6c:69:bf:71:3c:6c:ed:46:16:bb:07:16:ae:6b:36:dc:9a:64:
69:61:84:f0:bc:bc:86:4e:43:d3:fd:3c:52:31:ff:19:2a:f6:
48:70:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:20 2025 by rpki-client