Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADFED28DB1F11EFAFCC7354762E951A.roa
File: FADFED28DB1F11EFAFCC7354762E951A.roa (raw, json)
Hash identifier: AZKzi+EWGs0mOzirswp+Be+b2P1VGBjdhNsofwzVbro=
Subject key identifier: B7:5D:7A:55:44:D0:29:D9:C5:97:39:FC:78:1F:40:96:A1:14:75:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014982
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADFED28DB1F11EFAFCC7354762E951A.roa
Signing time: Sat 25 Jan 2025 13:26:27 +0000
ROA not before: Sat 25 Jan 2025 13:26:23 +0000
ROA not after: Mon 03 Mar 2025 13:26:23 +0000
asID: 48031
IP address blocks: 154.218.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84354 (0x14982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:26:23 2025 GMT
Not After : Mar 3 13:26:23 2025 GMT
Subject: CN=6794e683-41eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:66:f4:10:94:dc:d1:61:11:ff:c9:8a:31:
41:d4:78:dc:52:f6:ed:f1:fe:24:51:e7:a5:31:c7:
3c:61:78:ea:1d:07:08:0a:57:90:5e:af:e9:d1:ac:
bb:93:c9:ec:a6:4c:66:7b:29:89:4d:19:f1:4a:49:
f7:37:3e:5d:04:96:79:9c:0a:02:cd:65:ed:75:58:
d2:35:79:4e:96:2c:07:d8:eb:d0:e8:9c:4d:8d:d3:
9a:7e:7a:36:56:8c:fd:82:6e:17:38:5e:a7:85:4c:
54:80:56:7f:bd:0d:06:24:7e:9a:c2:3e:44:b3:39:
88:13:55:13:13:4f:bf:4d:03:30:16:7e:97:4c:8b:
27:03:ac:c5:2f:e6:10:fd:47:3c:81:52:52:81:18:
d5:d7:c8:fd:a2:e5:54:8f:73:3e:8c:79:f7:f3:2f:
4f:69:5c:a6:b6:b9:03:57:3e:2e:14:e4:e3:70:9b:
2c:8a:9d:20:92:f9:6f:41:cc:85:e7:21:a4:7e:03:
19:e8:90:ab:e2:52:5a:79:28:a0:56:bf:78:bc:6c:
16:c3:b0:29:9a:15:37:cf:35:c6:9e:d9:f0:c1:32:
5f:eb:08:81:0b:87:bd:88:3f:8b:85:a3:e0:ec:8c:
cc:6d:5a:02:aa:db:ff:98:a6:37:46:8d:dd:eb:f6:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:7A:55:44:D0:29:D9:C5:97:39:FC:78:1F:40:96:A1:14:75:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADFED28DB1F11EFAFCC7354762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.22.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b6:81:1f:bc:47:9b:08:da:1c:e6:52:03:3a:ed:ba:02:89:
c4:29:1a:0a:a6:74:43:3f:04:1f:12:27:a9:1c:48:72:47:74:
fc:fe:2e:a8:0c:1d:3f:d3:bc:a0:63:96:97:dc:3c:fb:ce:dc:
73:96:f3:82:28:1c:4f:5e:05:62:5c:dc:0d:7b:57:b5:c5:f9:
60:8d:7c:a5:a4:a7:e8:69:4f:11:e3:1d:54:1a:d3:8b:6f:f6:
68:b6:96:9c:90:8f:d9:4c:15:e0:a5:81:21:32:87:c3:af:e3:
d1:1f:0c:40:f1:46:0a:5d:1f:f8:f5:3a:56:28:e3:89:4f:fd:
6b:19:b0:0d:47:38:d0:ac:01:a6:a3:16:72:ae:3b:f5:1e:ab:
4a:4a:66:a3:d2:29:b8:c8:fe:a5:40:36:6e:fe:ee:6a:3e:3d:
a0:a9:f0:4c:31:55:81:0b:38:eb:58:73:79:ee:54:2a:2a:6b:
a9:aa:95:0a:ee:11:09:df:66:58:6c:ef:34:2a:a2:28:85:c3:
02:cd:d7:3f:fb:d2:7b:9b:6e:ed:7c:5d:1c:2a:87:74:5c:1c:
5c:36:74:da:58:15:83:3e:65:3f:06:a2:fc:ec:5d:d2:01:fc:
43:7f:1c:89:ff:c8:36:44:4e:af:b5:3a:76:8b:79:aa:6b:c0:
f6:14:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:12 2025 by rpki-client