Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFDB960DA0411EF86AE695C762E951A.roa
File: EFFDB960DA0411EF86AE695C762E951A.roa (raw, json)
Hash identifier: Bd8vLLI+s+o0/oBciiuFrL8QbPEashxb074Nv8TVzM8=
Subject key identifier: 6E:8B:CB:3B:0F:AA:C9:17:BC:02:9E:BE:F8:3F:E2:5D:E7:83:4C:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01439A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFDB960DA0411EF86AE695C762E951A.roa
Signing time: Fri 24 Jan 2025 03:40:21 +0000
ROA not before: Fri 24 Jan 2025 03:40:17 +0000
ROA not after: Sat 01 Mar 2025 03:40:17 +0000
asID: 44559
IP address blocks: 154.203.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82842 (0x1439a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:40:17 2025 GMT
Not After : Mar 1 03:40:17 2025 GMT
Subject: CN=67930ba5-c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:c4:8c:d3:b0:c7:e1:67:57:cf:33:de:56:
fb:b5:9a:b3:8b:12:4d:64:8c:85:e6:df:5d:0d:8c:
0d:d2:b4:d8:5c:2b:a3:ea:d8:23:fb:65:73:96:76:
72:16:aa:68:af:e6:7f:b1:0b:0f:05:9c:09:b8:0e:
ce:dc:8c:07:43:9a:da:e2:6b:9a:9d:01:c1:d9:66:
b0:65:81:a0:85:98:e2:d6:61:b4:ee:79:5e:be:94:
42:98:9a:26:61:83:4c:5e:81:53:7a:3a:92:ac:68:
3a:60:27:28:94:0f:99:dd:4b:3d:f2:cb:c3:47:3f:
b6:e6:ae:ae:5b:2b:1f:23:1a:64:83:bd:6a:56:ab:
d8:f1:01:ee:91:d0:c4:5a:d7:30:a5:d8:f4:d9:a6:
dd:79:fa:d4:0d:7f:76:75:37:f6:6a:31:88:b6:ea:
46:53:45:9d:ab:26:d3:7c:47:e1:1e:1d:c9:a3:60:
64:41:6f:5f:90:fa:da:f9:46:df:a1:6a:34:9b:80:
b3:79:c6:cf:d5:d4:03:55:3e:d3:e4:c2:32:fa:44:
6c:a5:ec:62:13:11:61:34:d7:83:63:95:80:a9:67:
d1:eb:b3:98:22:42:30:6a:a5:ad:7a:19:07:44:a4:
b4:88:17:8c:3b:ca:d3:77:65:ab:1d:94:4d:6f:35:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:CB:3B:0F:AA:C9:17:BC:02:9E:BE:F8:3F:E2:5D:E7:83:4C:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFDB960DA0411EF86AE695C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:44:2b:e1:ba:38:45:e7:15:70:35:48:2b:94:31:bd:36:81:
26:9d:95:13:c1:f9:31:31:bd:ab:22:e5:0d:2c:5f:47:e3:c2:
85:02:4d:5d:10:d6:ae:02:1d:ad:3d:52:5b:d1:35:e7:4e:db:
ab:ed:95:65:4c:6d:ee:bd:b3:68:17:d4:de:bf:4c:e5:4d:00:
4a:bf:df:0b:07:76:cb:52:3b:ec:ec:a0:da:97:47:2e:b5:37:
12:86:c1:24:a3:6c:aa:04:19:96:ec:51:c5:2b:b4:41:dd:e6:
aa:16:0d:ee:79:98:f0:15:cc:8c:09:89:2e:9f:c3:a6:a1:3e:
42:b7:02:6d:3a:b0:79:66:e3:e2:7a:54:67:82:77:67:59:5c:
93:4d:5e:8b:d1:ea:98:8e:f2:bf:dc:d2:60:c7:3b:92:0e:24:
1d:e2:aa:22:84:56:a1:2e:f6:4d:ab:cb:1c:a3:25:62:38:8e:
f2:96:f3:7e:49:75:49:95:09:12:6e:04:7f:db:f8:89:cd:d2:
f5:1c:3c:83:1a:f8:5e:7d:2a:c3:22:1c:ae:cc:6d:31:fc:22:
01:09:a5:3b:a2:fc:7b:6a:b4:0b:ef:1b:af:04:66:f2:bd:12:
16:d5:e6:36:9f:61:29:18:7b:2a:da:72:d5:cf:00:e6:95:9e:
4e:d9:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:23 2025 by rpki-client