Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139BE0C0E2DB11EF96199E74762E951A.roa
File: 139BE0C0E2DB11EF96199E74762E951A.roa (raw, json)
Hash identifier: tga0RW0kWiWwO62ia6i5xUWFWP2LtSbxKl6S/d1s084=
Subject key identifier: EA:0B:71:F9:D1:1B:A9:96:13:A9:4F:3C:F8:3E:15:E2:08:4F:3E:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139BE0C0E2DB11EF96199E74762E951A.roa
Signing time: Tue 04 Feb 2025 09:33:23 +0000
ROA not before: Tue 04 Feb 2025 09:33:19 +0000
ROA not after: Wed 30 Apr 2025 09:33:19 +0000
asID: 18229
IP address blocks: 154.210.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86249 (0x150e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:33:19 2025 GMT
Not After : Apr 30 09:33:19 2025 GMT
Subject: CN=67a1dee3-daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:9b:02:01:f8:1e:f0:57:b7:ca:fd:c6:03:
0e:44:3e:5d:25:3a:ad:5a:7a:75:57:8d:42:e1:e0:
66:8f:8b:27:78:ef:6d:ff:7e:a9:8c:f8:4c:94:48:
9f:96:15:c5:e2:d2:b3:53:ef:57:01:9d:52:ff:a9:
ee:86:a1:00:7c:5d:da:9d:ea:4a:dc:d0:f5:f0:a6:
b5:0d:54:07:f4:d7:20:5f:3d:33:6a:6f:9f:1f:23:
15:ac:43:09:68:ee:4b:da:b3:bd:17:5f:25:d8:d2:
ff:26:08:62:b3:11:ff:b0:8d:5d:ca:19:1b:f0:89:
7a:e2:5a:1a:3f:d1:9c:70:a7:c7:6c:76:34:9b:dc:
78:6c:6c:92:31:96:44:73:a7:1c:36:4e:5b:6a:03:
6e:59:26:6b:0e:e1:4c:4b:85:b8:6a:f7:52:30:65:
b8:90:17:e8:67:6d:91:cb:20:dc:74:50:3b:2e:80:
78:64:cc:1c:7e:3f:1c:3d:ee:68:d7:65:04:fe:bf:
a5:c5:25:c5:e6:ab:dd:ec:88:1d:df:d4:2c:6a:33:
b9:5b:81:7f:b6:bf:95:55:9d:d1:6a:05:46:9a:46:
a7:b3:3b:c2:9c:c4:60:35:37:fb:7d:ec:68:20:5c:
da:d1:b6:97:62:16:45:4b:66:35:d1:09:94:ce:dc:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:71:F9:D1:1B:A9:96:13:A9:4F:3C:F8:3E:15:E2:08:4F:3E:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139BE0C0E2DB11EF96199E74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:91:28:95:3b:82:c0:83:40:75:71:83:93:ee:d3:71:b8:3f:
9b:f9:e9:56:fa:ce:cb:fb:22:f6:f6:59:00:ed:99:cb:db:45:
aa:e0:b7:92:71:88:93:a7:5f:e8:12:52:2b:fd:d0:0c:91:71:
64:73:d8:f0:6c:96:42:8f:28:56:ae:b1:08:bc:7d:57:79:0d:
06:8f:76:e9:4b:e6:81:ea:b1:26:17:80:6a:63:d4:62:a5:12:
95:fa:e2:d3:71:0f:d9:ce:a0:ad:a4:8d:26:51:d8:85:56:6f:
cd:32:a8:4f:8e:67:0a:d9:63:0e:87:7c:f5:45:4b:ba:d5:bc:
77:b8:f5:38:00:57:4c:0a:8a:4b:82:3f:6e:bd:d8:a4:52:fd:
8a:01:ae:46:a9:4e:90:94:90:3f:3f:65:79:fe:e2:f6:f1:e3:
00:18:a4:f4:ec:0e:e6:2c:ee:3b:c3:44:60:29:21:eb:79:bb:
ea:cc:a0:88:20:95:ca:d4:12:34:3b:f3:f8:8c:06:9d:2b:ad:
43:51:bc:18:84:5e:05:da:15:be:d1:f0:81:24:d4:fe:84:6a:
cc:13:54:3c:d1:b3:2b:9b:8b:6d:51:51:43:07:b0:e7:49:69:
43:8f:8d:ef:48:2a:fa:75:c7:d5:61:d6:2e:90:c0:52:43:a0:
d4:5b:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:04 2025 by rpki-client