Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3BA9F6DA1411EF96A0BB46762E951A.roa
File: FD3BA9F6DA1411EF96A0BB46762E951A.roa (raw, json)
Hash identifier: vStaA0yX9WdX6t8n0LCKDmnSBlPunc5GQYzKV0b2ops=
Subject key identifier: C4:10:30:93:9C:E7:B9:8D:53:98:F8:C6:EA:64:6F:9C:D5:A5:82:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3BA9F6DA1411EF96A0BB46762E951A.roa
Signing time: Fri 24 Jan 2025 05:35:15 +0000
ROA not before: Fri 24 Jan 2025 05:35:12 +0000
ROA not after: Sat 01 Mar 2025 05:35:12 +0000
asID: 44559
IP address blocks: 154.203.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82910 (0x143de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:35:12 2025 GMT
Not After : Mar 1 05:35:12 2025 GMT
Subject: CN=67932693-0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:59:a5:53:3c:88:6d:7d:61:3e:ef:f1:64:
a6:cb:77:e4:52:b8:f7:c0:3a:66:86:d5:78:58:83:
e6:f6:4f:72:13:44:6d:ef:10:20:e1:3e:6d:c1:0b:
a0:71:7e:23:59:ff:36:88:4e:1f:1e:85:aa:4a:4f:
00:7a:ae:d8:d6:87:c2:d0:eb:07:70:84:0b:8d:93:
6e:95:97:cb:6a:cc:7d:e6:59:23:e8:91:d7:77:c3:
a1:e2:3d:29:92:9b:38:2b:40:03:8c:2d:17:e1:5a:
8c:49:2f:86:0e:b4:25:02:f7:64:71:ed:77:2d:e2:
7d:10:95:6b:88:16:32:f9:ed:b1:5c:d5:ef:92:8f:
d8:e3:d2:d7:10:1f:a7:41:5e:11:0e:a5:b0:b5:ee:
4d:ea:98:13:b6:4f:43:a3:d3:87:5c:fb:05:6a:80:
f8:24:d1:83:7d:30:21:17:a9:6c:6a:98:bd:39:d3:
78:66:83:07:c4:70:74:9b:90:01:17:a1:31:7f:c5:
67:a2:e1:c9:e4:13:a9:b8:65:67:69:21:63:61:81:
51:1b:a7:65:d9:4b:db:6c:14:68:62:da:6b:67:5c:
1c:f2:66:13:df:21:28:4e:57:db:d1:34:17:05:ff:
c3:c9:7e:f0:da:dd:7c:b2:7b:b0:7c:a0:08:fa:d7:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:30:93:9C:E7:B9:8D:53:98:F8:C6:EA:64:6F:9C:D5:A5:82:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD3BA9F6DA1411EF96A0BB46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8a:99:6f:f5:1d:2e:f9:e8:09:0c:06:90:17:e3:00:7c:4f:
49:60:e4:68:85:99:96:fe:fb:a9:99:c1:bf:09:80:f1:70:14:
c9:6d:63:cb:ca:b3:5e:db:c8:40:b8:49:85:b2:16:21:6b:23:
1c:ef:d5:db:b9:67:10:6f:57:ac:6a:02:63:54:d6:57:3f:d2:
b3:13:43:96:37:f4:7b:82:ab:6b:46:e7:34:81:49:1b:e9:ea:
71:a5:87:d3:14:8a:84:98:75:c8:06:19:e0:0a:0b:80:23:98:
84:f0:3a:ac:2d:58:cf:96:66:ea:9c:22:e1:d0:be:8b:b3:4d:
3e:15:b7:a3:c8:5a:4d:19:cb:11:2a:7c:5d:ca:20:8a:d3:1a:
69:63:9c:9f:38:41:e9:c2:fd:2e:21:e7:46:ed:3a:f8:76:c9:
dd:ca:e1:e4:fe:6b:51:8c:ef:4e:35:f3:cc:6b:4a:fe:d3:40:
36:7e:e0:b6:73:97:64:f4:72:73:a6:9a:14:5a:29:a2:8a:ad:
36:c4:9d:bb:0b:f7:f4:9a:64:2f:7a:c4:e8:dc:a3:81:f2:a8:
c9:ce:35:09:14:14:a0:ad:2a:92:90:11:e2:41:52:fe:4c:b0:
41:ae:41:ad:e6:07:d1:d6:e4:06:98:d5:57:95:b6:fe:ac:2a:
07:97:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:28 2025 by rpki-client