Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B682FAD50411EF8AB9F94B762E951A.roa
File: F1B682FAD50411EF8AB9F94B762E951A.roa (raw, json)
Hash identifier: N7kGjeuXICE9cnTPOA4RJ4HmQ22riU/HgfA96MM6/H4=
Subject key identifier: F2:AB:38:CE:5B:A8:7A:FB:9B:CE:44:36:F1:E0:33:E9:9E:AB:4C:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B682FAD50411EF8AB9F94B762E951A.roa
Signing time: Fri 17 Jan 2025 18:57:48 +0000
ROA not before: Fri 17 Jan 2025 18:57:45 +0000
ROA not after: Sat 01 Feb 2025 18:57:45 +0000
asID: 54801
IP address blocks: 154.216.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81187 (0x13d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 18:57:45 2025 GMT
Not After : Feb 1 18:57:45 2025 GMT
Subject: CN=678aa82c-94ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:17:b5:5e:e6:4b:bd:c8:14:2e:8d:5c:3f:
79:33:10:11:85:4b:2a:dc:ee:a0:26:4f:ad:bf:94:
d0:00:db:fe:3c:3f:91:a3:01:c8:9b:33:fa:ff:b7:
62:be:71:39:4c:1d:d6:68:3f:1c:b0:7c:5d:4b:35:
5a:f5:9a:a6:ec:c6:23:1f:d6:a3:d5:5c:f3:0b:0b:
67:63:47:75:86:61:5b:1e:9b:3a:bf:dd:e2:32:4e:
76:23:bb:bf:34:0f:fe:cd:d9:af:9d:46:d6:6f:7d:
37:6a:1d:68:66:66:01:d3:45:7c:1e:e1:8e:29:61:
76:31:bd:07:ef:ec:76:94:9f:d3:38:78:1c:cf:e8:
d1:05:2c:10:03:a7:87:e0:f9:15:4e:b9:ba:d6:d6:
42:4a:95:0c:97:35:97:a0:da:de:66:82:2b:6f:85:
ce:48:24:a0:a6:f0:62:69:63:3b:f6:99:7e:17:af:
0c:0c:6d:5b:22:49:e8:5c:cd:9c:d3:e6:74:e5:9b:
63:ff:17:5c:ad:eb:39:5d:c9:40:e4:c9:55:e4:76:
59:01:66:62:b3:47:26:46:b0:b7:91:ba:fe:4c:e5:
38:85:fb:3a:0e:a3:13:7b:3c:a8:95:38:0b:50:35:
95:d7:a2:02:58:b7:34:b7:52:47:fe:15:ea:c6:ee:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:38:CE:5B:A8:7A:FB:9B:CE:44:36:F1:E0:33:E9:9E:AB:4C:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B682FAD50411EF8AB9F94B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:1c:ca:f5:43:e0:05:64:c6:cd:94:6d:02:e4:bd:90:94:6f:
ea:ed:f5:49:00:68:09:d9:88:5a:0c:da:93:02:0d:bb:a5:22:
15:c0:3a:39:5d:89:b7:73:d3:da:58:05:e7:58:ea:23:f2:d6:
6f:c0:d6:09:04:a5:eb:8d:8a:1b:9b:6a:1d:97:4b:e8:34:ff:
99:f8:84:ea:9f:2d:73:04:91:83:e4:f2:c9:8a:0c:73:5a:1d:
cd:a4:96:57:95:88:c7:1e:aa:86:4b:a4:e7:6b:9d:76:94:a7:
23:0e:e2:c9:c3:3d:e1:e8:fb:94:c2:3f:7d:38:5a:d5:b9:dd:
c3:71:af:32:2d:74:23:35:dd:03:bb:34:3a:e5:7c:d8:98:5f:
f7:67:7c:3d:08:6a:90:fc:dd:30:13:fa:56:a1:b0:2f:ea:b1:
83:ac:9f:c1:90:f0:dc:a9:bd:38:f2:cb:a2:98:80:2b:2d:0b:
a6:19:d7:7b:f0:cd:3c:bf:9f:06:01:eb:db:ba:37:61:5f:7d:
90:02:2a:7d:51:61:62:2b:bb:c5:73:02:fa:4f:4f:a7:c7:9d:
d6:aa:40:44:a9:31:e9:58:91:47:99:5e:23:0e:26:ec:40:e1:
21:68:6f:ad:a6:dc:24:44:cb:91:25:63:e3:83:fd:9f:77:4e:
c8:01:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:03 2025 by rpki-client