Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50F4FF0DA4E11EFB887744C762E951A.roa
File: F50F4FF0DA4E11EFB887744C762E951A.roa (raw, json)
Hash identifier: leeaQjIUhcKcd+n2pxa3GebrPpxxN+efFgqJSt5A5S0=
Subject key identifier: BC:5D:45:8A:85:F9:52:8F:11:B4:EE:AC:7B:EE:D6:69:E3:06:62:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50F4FF0DA4E11EFB887744C762E951A.roa
Signing time: Fri 24 Jan 2025 12:30:13 +0000
ROA not before: Fri 24 Jan 2025 12:30:09 +0000
ROA not after: Sat 01 Mar 2025 12:30:09 +0000
asID: 44559
IP address blocks: 154.205.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83660 (0x146cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:30:09 2025 GMT
Not After : Mar 1 12:30:09 2025 GMT
Subject: CN=679387d4-dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:01:7f:e8:db:a6:bd:1f:3f:f7:00:52:4e:
6d:12:e4:b9:f6:ee:82:c1:49:4e:b1:00:5b:34:ef:
2f:9d:2b:6c:65:48:8c:c2:0a:f0:ad:89:e6:df:94:
00:68:90:e1:40:05:94:bd:1a:a7:7e:ac:8c:31:b8:
8d:c4:23:43:0d:74:9a:ec:5c:08:8e:02:1c:4f:36:
2d:9d:c6:ad:60:dc:2a:44:9e:98:7d:ec:6e:e4:1a:
f4:cf:56:cf:f9:4a:86:42:4f:fb:b3:0f:4c:91:c4:
21:4b:7d:fe:20:02:ab:49:dd:4a:27:d4:33:00:46:
8e:67:d0:80:c8:6c:bb:61:8c:0e:ce:4b:34:b4:8d:
3f:06:fb:de:ff:4d:81:99:ab:92:cc:18:37:12:04:
2d:b0:4f:03:f8:dd:82:7c:74:d7:fd:4f:55:21:68:
6f:ee:1b:34:89:97:0e:07:62:1c:5d:4e:44:82:bd:
d8:3f:b7:a1:e4:0d:ec:a2:3a:40:95:76:19:d9:98:
30:b1:11:f1:81:e0:b9:fa:0b:e6:ff:65:db:81:90:
d5:5a:13:dd:62:23:ee:51:87:b6:81:0a:95:95:5d:
37:c3:74:81:5f:14:8b:96:19:9b:86:f6:89:cf:a3:
23:48:99:7d:65:fb:e2:04:b6:43:a7:bf:8f:5e:ce:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:45:8A:85:F9:52:8F:11:B4:EE:AC:7B:EE:D6:69:E3:06:62:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50F4FF0DA4E11EFB887744C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:62:b7:af:32:ad:01:d5:f7:fe:e8:01:20:21:65:d4:11:cf:
7f:f3:0d:6b:6e:39:ae:d6:1a:a5:12:fd:5b:4e:c5:4a:02:34:
4d:af:0c:7b:76:90:26:92:c3:37:1f:c7:e0:f2:e0:db:3a:07:
a0:52:a2:cd:1d:cf:a2:57:60:76:1a:8b:5b:fc:45:2f:8b:69:
22:ae:80:e8:4d:8b:6b:1a:fe:e8:11:73:18:98:fe:a7:11:65:
a8:81:d0:e1:30:a7:00:6a:3a:66:7f:8c:b4:9d:f2:da:78:8b:
29:f0:ca:db:16:76:56:64:e2:d3:3e:b6:fc:17:94:7a:fc:a7:
77:05:05:91:5a:34:91:80:4f:fd:9b:4c:54:fb:9b:82:e4:63:
d6:5e:01:a1:87:6f:dd:a3:3a:71:d1:3b:1e:2e:f5:d7:61:e6:
78:22:3e:62:9c:46:f2:65:f5:b6:ec:fe:0a:a0:c6:f8:9c:6c:
9d:2e:9d:7e:7a:27:f4:78:ef:23:d9:e8:7f:0c:7d:b5:14:a3:
97:4a:ed:26:43:18:4a:77:20:76:00:09:59:a8:d6:4f:77:f7:
15:70:68:90:4a:18:d9:6b:c8:c9:37:05:8b:01:a4:c0:3e:6d:
fd:b2:53:08:88:14:4a:46:4d:ff:84:e3:76:f5:0e:a8:19:3a:
13:5d:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:23 2025 by rpki-client