Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F95B7038DA5E11EFBE833BB8762E951A.roa
File: F95B7038DA5E11EFBE833BB8762E951A.roa (raw, json)
Hash identifier: NezzmsBT7iiNj7cRQ3qQUBB6jhSNI4p7mQWFHRxh1fc=
Subject key identifier: 35:00:AE:BA:7E:09:A0:82:29:47:82:31:75:E2:A3:38:E4:FA:C4:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01481C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F95B7038DA5E11EFBE833BB8762E951A.roa
Signing time: Fri 24 Jan 2025 14:24:52 +0000
ROA not before: Fri 24 Jan 2025 14:24:48 +0000
ROA not after: Wed 05 Mar 2025 14:24:48 +0000
asID: 48031
IP address blocks: 154.222.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83996 (0x1481c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:24:48 2025 GMT
Not After : Mar 5 14:24:48 2025 GMT
Subject: CN=6793a2b4-a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ea:49:5a:e5:58:a0:e7:63:29:ac:88:67:92:
aa:9a:93:8a:54:ba:41:0f:e7:b7:57:f3:c2:8e:c7:
d8:b0:5c:3b:c9:bf:d9:80:25:4c:06:f4:87:c7:bb:
bd:90:2e:a5:65:0a:c2:88:ec:ca:c0:59:71:64:a6:
a5:0e:8b:99:01:fe:66:97:0c:64:2c:04:87:2c:86:
34:0d:f1:5c:ee:7b:bf:c3:b3:64:fa:d6:ea:54:79:
d1:a0:f3:2a:09:47:1b:61:ec:d2:b9:54:5a:4e:1a:
72:28:a6:c4:3f:d1:b7:c9:86:20:9e:18:d8:80:bd:
11:8f:38:af:75:1a:f3:36:51:bc:48:aa:86:d4:6f:
75:70:37:29:bc:6d:98:0d:69:1f:e9:c0:68:68:74:
c2:76:cb:e7:2d:e1:b0:84:ca:0f:fd:70:5c:a3:2b:
f8:d6:66:27:2b:58:6f:34:f1:90:8d:f4:be:a9:49:
ad:e3:6f:4d:97:a6:01:b9:f9:1e:ae:0e:89:7a:8c:
a5:65:4d:eb:61:d5:64:08:87:b7:2e:7b:82:50:02:
d8:39:af:4e:36:4d:0c:6c:af:50:9c:a9:71:47:d4:
71:b4:0f:3a:bc:fd:6b:03:b5:f0:21:2f:e3:f6:f8:
29:bc:4a:e6:32:e0:93:62:f2:a2:21:55:1a:e4:28:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:AE:BA:7E:09:A0:82:29:47:82:31:75:E2:A3:38:E4:FA:C4:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F95B7038DA5E11EFBE833BB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.250.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:81:43:8e:7a:95:e7:0a:24:6b:c1:ca:ef:32:37:23:cf:bd:
85:b2:78:48:3b:fd:eb:6f:65:ba:db:d0:ab:4e:16:e8:a7:5f:
08:cd:b4:db:f3:dc:07:61:bf:68:ee:6d:66:eb:91:13:2c:4e:
c7:bc:f6:9d:19:0e:73:02:cb:1a:fb:d1:ba:ae:3d:55:03:ff:
30:e2:ff:6d:09:b2:f2:63:a0:9c:fd:7e:22:8c:1d:32:47:5e:
b2:cb:75:75:cc:ea:51:d6:f1:fb:87:8f:dd:eb:90:cc:ed:05:
5e:2a:41:3c:21:1f:2c:90:73:c1:1e:4a:14:89:11:c4:b7:bc:
c5:a6:2b:b1:ef:e7:8c:1a:0b:55:20:66:60:25:d9:2e:75:56:
6d:9c:7c:35:21:3f:70:51:d9:1f:aa:70:3b:f0:29:1f:62:96:
c2:ec:31:77:87:6b:02:df:2d:f0:3c:fb:de:e0:60:56:3b:cc:
32:ba:11:6a:20:f9:02:0d:26:50:73:48:61:c6:0d:8a:07:4f:
35:96:74:f8:70:47:f9:53:a8:c4:5d:1a:0b:68:44:77:a9:62:
80:c3:4a:25:3d:e6:a4:7b:9b:59:60:a7:9d:f3:57:01:93:38:
ed:38:85:cf:ac:30:26:cb:ef:32:41:c3:a5:04:72:58:87:63:
88:c6:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:12 2025 by rpki-client