Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69B3866DB2011EF80C2345B762E951A.roa
File: F69B3866DB2011EF80C2345B762E951A.roa (raw, json)
Hash identifier: rui+creRc9i4kytLb8PF70uazH6QRDBNmSo7jwBGeXQ=
Subject key identifier: 55:CA:AB:E8:1A:00:0C:09:95:C4:68:4B:9F:E7:BB:28:C8:07:47:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01498F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69B3866DB2011EF80C2345B762E951A.roa
Signing time: Sat 25 Jan 2025 13:33:29 +0000
ROA not before: Sat 25 Jan 2025 13:33:26 +0000
ROA not after: Mon 03 Mar 2025 13:33:26 +0000
asID: 48031
IP address blocks: 154.222.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84367 (0x1498f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:33:26 2025 GMT
Not After : Mar 3 13:33:26 2025 GMT
Subject: CN=6794e829-ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:67:a9:59:c9:8b:a0:a0:4d:3d:96:dd:12:
44:59:6f:35:8c:27:6b:87:7b:39:9b:71:21:59:08:
57:02:88:de:34:cd:f1:9c:2b:98:80:75:27:f6:8e:
aa:03:05:65:b5:2c:a9:e6:87:19:46:1a:06:f3:92:
db:8a:a9:c2:44:2a:21:37:86:4c:a5:5a:99:ff:49:
ef:6c:7f:86:b3:9d:07:9b:4a:01:a9:e2:2b:03:94:
af:d1:0d:91:47:c9:8d:7e:af:87:73:19:e4:34:d1:
fe:1c:9e:c7:e8:f6:38:cd:75:e7:91:47:99:46:a1:
fe:c3:5e:b2:ae:72:40:de:b2:af:8d:26:2e:b5:35:
f6:30:08:b5:f2:ec:3d:4e:08:03:b8:e3:df:e6:dc:
23:e7:43:25:5f:2f:8a:d7:c6:b5:4c:4a:0b:66:80:
12:88:9f:a6:65:23:db:86:64:49:e5:1c:77:ca:0c:
a2:cd:a4:8c:c8:90:96:1f:a3:17:ef:e2:7a:4c:88:
8d:24:39:ec:5f:07:e2:69:ed:ea:38:f4:23:82:3d:
68:08:86:59:a2:bf:e7:f9:18:b2:f5:20:12:bf:9b:
4d:a1:ba:3e:72:89:8a:ee:99:8c:03:c1:e0:fd:d6:
a0:c8:4f:1a:7a:9d:4b:c0:75:c9:a9:24:7d:09:7b:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:AB:E8:1A:00:0C:09:95:C4:68:4B:9F:E7:BB:28:C8:07:47:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69B3866DB2011EF80C2345B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ac:79:c3:2f:7f:3d:9c:a5:32:84:49:41:71:67:6c:f7:a2:
85:8f:7e:d5:b6:56:a8:14:6c:b0:5c:be:28:d9:59:1f:f0:77:
85:17:83:3b:d3:91:11:3d:c2:57:3e:da:32:74:3f:d2:3d:02:
b2:0b:79:95:a0:0b:fd:0f:0d:23:ed:30:5b:1d:d3:29:b8:b1:
45:82:b9:17:32:83:1b:bd:9d:62:9d:ef:3a:4c:27:fe:d3:ca:
6f:30:fd:5b:fa:46:7b:0d:9e:d4:bc:e1:85:58:86:98:e3:87:
64:14:f5:44:e1:44:f0:07:c6:e6:fa:95:f3:d3:42:59:74:22:
c4:22:e1:4b:76:a7:db:d5:2c:e7:cb:cb:75:09:fb:7b:c4:20:
43:b7:f8:04:72:ec:c1:ee:fb:f0:35:93:3e:51:97:4e:92:56:
b9:14:98:84:ef:de:fd:be:32:7b:be:99:aa:6b:38:78:1f:da:
25:b9:fe:d4:09:ab:93:40:4e:2c:b9:37:78:ee:40:d9:d5:3c:
d9:14:9b:6f:c7:e2:0b:e0:ff:22:2c:29:fe:e1:a9:d2:13:18:
f5:62:58:67:41:66:fc:e5:ef:fa:8d:0d:10:52:60:2f:2c:7e:
2d:fd:76:7c:74:08:da:7a:aa:bc:62:cb:27:ea:f1:5f:16:48:
b0:a6:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:24 2025 by rpki-client