Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBDA7C8D96011EF92582087762E951A.roa
File: FBBDA7C8D96011EF92582087762E951A.roa (raw, json)
Hash identifier: 2Z5q3CXNxMQUQiQ0SbLLezDxGH0lev8KVqkaJQYG99s=
Subject key identifier: E9:F1:75:A8:7E:3A:97:89:79:64:3A:72:63:30:02:42:7D:9F:74:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBDA7C8D96011EF92582087762E951A.roa
Signing time: Thu 23 Jan 2025 08:06:44 +0000
ROA not before: Thu 23 Jan 2025 08:06:40 +0000
ROA not after: Sat 08 Feb 2025 08:06:40 +0000
asID: 18229
IP address blocks: 154.210.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82025 (0x14069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:06:40 2025 GMT
Not After : Feb 8 08:06:40 2025 GMT
Subject: CN=6791f894-a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:78:94:32:3a:db:e9:79:b8:75:0a:3e:76:
7b:52:fb:b8:7d:aa:75:c7:6a:a8:72:69:36:84:3b:
6d:c0:ce:98:fc:1e:a1:20:f8:bf:a8:10:c7:8d:8d:
49:68:a7:97:4e:7c:70:fd:ff:8b:5b:05:3d:bd:b8:
2b:4b:29:00:75:29:66:20:2b:13:71:ee:b0:5a:83:
86:ae:f6:72:58:f2:f2:97:1c:62:52:2a:2a:60:77:
5b:2d:81:da:a4:dd:12:4a:af:2d:96:05:4c:a5:af:
4f:52:6d:cd:27:c7:04:f8:34:ac:f0:3b:7f:80:39:
f7:c5:54:53:0e:d1:2d:23:eb:55:b9:2a:1a:3f:f8:
a2:f5:85:fe:b4:0b:91:c5:fe:23:24:26:b7:af:d6:
f2:73:eb:e6:37:e0:11:6d:12:db:d7:db:35:81:5b:
63:14:ce:43:89:21:b6:97:05:db:e5:79:31:dc:43:
e8:85:42:7b:fa:6b:60:a3:05:26:8c:45:ce:b5:bd:
22:ae:18:dd:4d:8a:c4:43:b3:7d:06:2d:b2:d7:47:
94:90:88:70:e3:ff:b6:50:ac:89:84:d0:95:84:7c:
c9:9d:2b:1a:4a:b8:c9:fd:13:1c:02:5c:7a:81:e8:
ee:b7:cc:a1:ef:92:b6:86:01:e9:57:16:00:42:31:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:75:A8:7E:3A:97:89:79:64:3A:72:63:30:02:42:7D:9F:74:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBBDA7C8D96011EF92582087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8c:bd:65:2f:7f:ec:d4:db:1b:d3:c2:7d:ef:94:71:31:a7:
81:e5:b1:30:27:36:9a:58:82:0f:73:f3:41:61:d6:9e:d1:f1:
30:0f:27:e7:81:32:88:4a:19:87:e8:d5:60:8c:b9:ae:79:40:
86:d3:91:87:de:94:5b:7c:b9:18:96:10:2c:5e:a6:24:c1:6f:
96:b9:9a:42:1c:a0:06:8d:a5:72:a9:97:71:62:cc:99:a5:25:
86:2a:13:01:a4:61:a9:21:e7:d1:50:3d:ca:02:f8:ae:06:ff:
7c:0d:20:a6:73:fc:ed:a8:dc:ff:37:8e:fa:3c:c6:32:ce:99:
00:ab:3f:68:df:46:77:71:5f:05:6d:ff:42:ca:26:b6:ef:39:
72:22:81:5c:d0:9c:ac:79:84:97:33:b6:c1:99:16:d5:ef:b8:
6a:fb:e3:51:b8:d7:9d:92:b0:35:09:11:0e:05:6c:5a:66:ff:
ce:6e:61:5c:52:4d:8b:b5:70:4c:28:7d:82:7e:8e:87:9b:8d:
93:18:1c:f7:01:59:3e:92:15:e9:fe:56:2d:1e:9a:1e:fd:7d:
5a:22:54:bc:a0:21:02:77:cd:06:9d:17:e1:8c:e2:13:b0:77:
c4:d1:b4:6d:e8:cf:83:6f:c4:dd:ad:23:e9:11:51:c4:1b:0f:
49:cb:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:33 2025 by rpki-client