Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08DDB14DB1A11EF8FB57CB0762E951A.roa
File: F08DDB14DB1A11EF8FB57CB0762E951A.roa (raw, json)
Hash identifier: k7zmDxycpCWxYFEkdxBh6dEZVpMDHRmZK7O91fhDVi4=
Subject key identifier: F4:EA:AA:C6:82:83:AF:8B:B9:63:07:F3:A0:9A:E2:FC:46:F9:59:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014958
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08DDB14DB1A11EF8FB57CB0762E951A.roa
Signing time: Sat 25 Jan 2025 12:50:22 +0000
ROA not before: Sat 25 Jan 2025 12:50:18 +0000
ROA not after: Mon 03 Mar 2025 12:50:18 +0000
asID: 202656
IP address blocks: 154.219.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84312 (0x14958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:50:18 2025 GMT
Not After : Mar 3 12:50:18 2025 GMT
Subject: CN=6794de0e-5cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:7d:57:f3:4a:5e:eb:b3:c5:6c:ac:14:9b:
5b:62:25:62:3b:59:27:8c:13:22:1d:b5:c0:7c:0e:
27:ac:24:e6:9d:9f:75:be:cb:6e:ec:c6:97:42:ef:
79:e3:4c:d8:4d:dc:19:f6:cc:58:e6:b6:b8:03:90:
e9:a6:c6:fb:a2:cd:a0:22:4e:2b:85:62:f8:23:84:
c9:23:c6:df:eb:80:0c:b3:5e:42:fb:cf:41:06:90:
3b:64:36:8f:33:6a:f5:5e:a4:79:98:69:5b:6e:90:
a6:6b:ec:31:0b:88:78:c3:d9:88:d3:8f:cf:c1:6b:
6d:99:44:01:e4:d1:d5:42:cc:97:1d:a5:bb:84:56:
0f:f0:86:f2:3b:ae:6e:a6:12:9b:98:dc:9c:ed:c8:
b1:25:6d:a7:22:08:60:47:e7:1c:13:f9:f6:ab:f9:
24:50:24:40:98:b4:3f:4f:70:d7:b5:2d:14:af:22:
61:1d:5f:47:2f:4b:dd:fd:27:5f:8b:ea:15:a4:68:
0a:4b:18:30:cd:31:be:73:85:ba:99:fc:2a:bd:0b:
16:a4:57:36:ee:38:81:32:2f:bb:62:58:bf:3e:ae:
72:6c:15:5b:08:6d:b1:22:ae:cf:36:8b:19:46:2a:
bb:96:33:43:62:0c:96:01:4c:13:4d:bf:ce:e4:5f:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:AA:C6:82:83:AF:8B:B9:63:07:F3:A0:9A:E2:FC:46:F9:59:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08DDB14DB1A11EF8FB57CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.249.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0e:48:66:26:2d:7c:1d:ed:b9:11:5e:84:2f:df:47:94:66:
b6:e8:53:0e:9e:52:71:b2:1a:c0:03:ee:f7:fe:43:ec:73:c4:
1d:07:f0:2c:bd:34:bc:56:16:79:ca:de:32:ac:4e:b8:88:af:
91:10:ed:af:34:3b:3b:8a:a3:53:a4:59:52:8f:89:ab:fd:ea:
04:a3:c1:73:18:b6:af:a5:4d:3b:cb:2b:a3:8d:86:07:e9:c1:
f8:d6:64:b7:00:b9:3d:fa:de:58:86:2e:7d:42:7f:0e:03:38:
c4:4c:47:64:18:1c:22:44:63:da:fe:21:7d:0f:80:c3:8f:ab:
33:28:75:fd:97:90:01:01:61:0f:1d:8f:cb:d2:a2:28:d5:13:
2b:d1:71:ec:db:f8:92:5d:d5:87:67:c2:30:13:fc:e4:62:41:
cc:bf:36:63:f1:ef:bd:ad:f7:39:3b:4c:a9:ef:6b:00:61:a8:
67:0c:c7:23:e1:3c:65:aa:af:6c:70:1c:6e:8c:95:17:12:4e:
61:66:64:15:8a:ac:e4:67:b5:86:e2:74:d0:a6:3f:82:6f:94:
d2:18:d1:a5:7b:a1:88:8a:c0:71:f0:c7:1c:88:a3:c1:74:f2:
18:6f:1c:fc:56:fc:fe:56:f1:68:7d:e8:0d:27:93:18:8f:68:
ad:26:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:31 2025 by rpki-client