Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01A0E5E0E24111EF8DD21760762E951A.roa
File: 01A0E5E0E24111EF8DD21760762E951A.roa (raw, json)
Hash identifier: n/cIvr+1lWm45xJw1Pun/SDLZQ2u+rwhndR3Qz5APNk=
Subject key identifier: EF:03:BD:D8:B7:76:C5:12:C7:89:A6:BD:66:34:42:40:B3:74:9D:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01502F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01A0E5E0E24111EF8DD21760762E951A.roa
Signing time: Mon 03 Feb 2025 15:10:30 +0000
ROA not before: Mon 03 Feb 2025 15:10:26 +0000
ROA not after: Wed 30 Apr 2025 15:10:26 +0000
asID: 150008
IP address blocks: 154.210.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86063 (0x1502f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:10:26 2025 GMT
Not After : Apr 30 15:10:26 2025 GMT
Subject: CN=67a0dc66-d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:66:b6:45:8d:4c:73:16:2d:8e:3b:4f:a5:
8e:26:73:b9:69:38:f4:68:25:d8:ab:78:3c:9a:f5:
0e:e4:cd:a6:cb:0b:10:6d:d8:31:3c:8a:d8:ce:63:
7b:c2:6d:fb:bf:26:7c:08:5b:2f:9c:a0:2e:e0:87:
80:2b:49:df:92:5b:af:56:74:35:9a:f8:26:16:2d:
f2:ec:fd:bb:29:57:77:6f:1e:72:ee:5b:fc:67:7b:
f4:44:de:ee:0d:f0:33:9f:56:80:ce:5b:48:84:f5:
8b:ee:9c:f5:e3:a0:76:30:73:cc:11:bc:d8:fa:22:
8e:9b:73:2b:9f:98:f7:48:8e:6b:e3:3b:fb:6c:ec:
d1:c9:51:c8:76:0a:fe:d7:61:a8:72:96:75:df:89:
a6:db:2c:20:d3:30:ef:77:4d:4f:16:0c:ca:a4:a9:
b3:cb:80:4b:37:9d:54:06:e7:60:64:39:4b:52:28:
4a:8d:d5:dc:b6:f4:27:bd:f6:2d:33:1a:2f:f7:07:
ec:f4:72:70:74:79:dd:f6:03:de:ca:51:11:d3:d6:
b6:d0:c4:7e:6f:0e:ef:47:dd:93:7d:05:b0:1c:95:
10:9d:01:71:70:d4:1f:42:91:0b:31:49:31:bf:ad:
ce:1f:4f:a3:b2:5c:2b:b2:16:83:72:bb:a1:68:72:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:BD:D8:B7:76:C5:12:C7:89:A6:BD:66:34:42:40:B3:74:9D:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01A0E5E0E24111EF8DD21760762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:fc:53:df:ad:96:d7:f9:50:8f:1e:0d:45:12:b8:86:49:e6:
a0:81:54:a9:24:fb:cf:ab:be:28:f9:50:5e:b8:52:a7:23:fc:
d4:a6:be:b2:34:fb:cf:3d:64:18:fc:79:85:0c:24:0a:f9:0b:
1d:5a:2c:80:21:47:05:8c:4c:bb:70:3d:8f:9e:c2:0c:51:19:
6b:a0:7d:49:7b:fa:4a:0a:7b:88:24:d7:fd:35:92:af:05:0c:
86:42:93:1a:7a:64:28:ca:32:c9:77:90:6f:94:49:14:c0:4e:
22:99:5f:48:aa:85:a4:5a:58:8c:2a:8d:90:03:dc:db:4a:b1:
f3:17:c8:16:e6:91:5d:04:0e:f1:58:d4:53:53:2c:92:44:0f:
81:80:d7:c8:ec:d6:b3:db:81:e7:41:a5:d4:cb:4c:e2:ba:57:
c0:d7:7d:3b:17:41:6d:2d:78:17:9b:4d:fb:72:83:9f:1e:cf:
15:80:f2:52:dc:43:19:9b:ef:cc:be:b3:55:bf:0b:cb:82:f0:
ac:02:e9:82:9e:54:0e:b6:3a:93:c9:b0:96:5c:4f:ec:13:fc:
f0:d7:b0:52:2e:93:09:3a:5b:50:18:a6:f3:53:fc:94:30:70:
cc:6f:dc:21:1e:92:63:55:b6:0f:5b:2c:d5:61:9a:a2:c8:2e:
3c:f9:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:08 2025 by rpki-client