Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBBF9D4CDA4911EFB34B88A9762E951A.roa
File: EBBF9D4CDA4911EFB34B88A9762E951A.roa (raw, json)
Hash identifier: C7a1NRAXKkUX1Gca2bIGtQPFSYmfqT0gKe4htAP1Df0=
Subject key identifier: 0D:85:F7:90:CA:D0:DE:4D:69:38:4E:CB:FC:88:18:14:3B:BA:0D:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014657
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBBF9D4CDA4911EFB34B88A9762E951A.roa
Signing time: Fri 24 Jan 2025 11:54:09 +0000
ROA not before: Fri 24 Jan 2025 11:53:56 +0000
ROA not after: Wed 05 Mar 2025 11:53:56 +0000
asID: 202656
IP address blocks: 154.222.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83543 (0x14657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:53:56 2025 GMT
Not After : Mar 5 11:53:56 2025 GMT
Subject: CN=67937f61-b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:da:2b:02:8d:d7:42:38:1f:11:dd:da:91:
8d:1c:74:9a:c4:e4:85:46:79:03:5f:c3:2a:56:1c:
e7:de:82:8b:d7:e4:b9:05:bf:82:22:7e:db:50:b1:
c6:05:03:5e:aa:56:d2:12:17:90:fd:28:94:5a:de:
d9:6b:d1:45:33:b9:95:d3:40:e2:de:f9:88:a8:a1:
2a:fd:81:ef:a7:71:b1:1b:32:d3:44:8f:ff:23:09:
eb:b1:48:de:47:ee:e6:99:66:1b:d5:36:bc:0a:81:
1b:38:00:be:53:2b:cb:6d:0a:ec:39:bb:e7:4d:5b:
cd:2d:14:07:df:e2:7e:e0:8e:29:d0:e4:fe:8c:03:
ed:75:47:5c:9b:66:3a:fb:0a:c3:0d:51:f6:4b:53:
17:ce:29:a9:a3:4e:58:24:ba:58:56:d2:cf:03:7e:
39:57:92:4c:3b:c7:4b:17:84:0d:ce:57:e9:d1:11:
d6:ed:a2:cd:fa:23:cb:b0:f6:97:43:88:19:5d:32:
8c:00:cc:1e:0c:c8:a1:65:42:84:eb:db:0c:4a:64:
f7:73:38:6d:75:ed:65:11:ee:4d:be:d0:3c:6f:15:
b7:2c:d6:b2:9f:ea:05:e5:eb:7d:44:2f:30:46:c4:
79:88:11:b0:3c:39:88:e9:7a:11:64:92:87:52:82:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:F7:90:CA:D0:DE:4D:69:38:4E:CB:FC:88:18:14:3B:BA:0D:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBBF9D4CDA4911EFB34B88A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.203.0/24
Signature Algorithm: sha256WithRSAEncryption
43:77:78:34:ad:7c:7f:5b:43:fd:de:44:55:c4:2f:49:fc:18:
a5:27:ae:32:72:94:9d:74:c8:90:65:61:1f:c2:1c:0c:a1:c7:
94:97:d8:4d:bc:34:4a:e9:b1:a2:78:c1:9c:05:6c:ec:50:a4:
24:82:19:70:bf:65:e7:05:31:02:ec:23:fb:ed:8e:33:f7:cd:
1d:cb:c3:44:44:e4:40:76:6d:6c:ad:6b:cc:c3:04:04:b9:5a:
6d:9e:74:22:e3:99:07:fc:84:9f:27:4c:58:2c:9a:c3:d7:07:
ba:fa:d2:c0:de:80:47:14:1b:c6:62:d9:56:ae:dd:8f:5a:70:
d2:e0:03:3e:5e:17:5f:a3:18:d0:f2:03:14:8b:7a:3d:9c:5b:
e0:16:39:76:68:ef:0a:d4:2a:dc:c5:d4:52:f5:ca:05:7e:6e:
43:28:48:56:a0:ad:49:57:31:ab:3c:9b:93:4e:ac:b5:6b:15:
f9:64:80:29:c4:84:dd:3d:be:63:91:d4:61:ad:43:93:2a:8a:
78:0a:fe:77:d8:c5:b7:31:cc:6a:8c:db:3a:b2:e5:a7:e3:a6:
b5:a8:ca:59:bd:c3:c8:bc:23:72:18:37:7a:bc:c4:8f:78:fd:
93:d6:0d:32:d2:73:60:a8:23:ff:17:c6:16:5b:1f:c8:7c:35:
a7:82:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:52 2025 by rpki-client