Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E1B38C93911EFA190EFA3762E951A.roa
File: 221E1B38C93911EFA190EFA3762E951A.roa (raw, json)
Hash identifier: T3GARI67bnD+F+0vwPMC8uDBr/DGVId1JMS5S0/ZQZA=
Subject key identifier: EC:9D:25:9A:D5:51:78:0C:62:21:AA:A1:8C:91:AB:71:76:E4:73:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E1B38C93911EFA190EFA3762E951A.roa
Signing time: Thu 02 Jan 2025 18:41:09 +0000
ROA not before: Thu 02 Jan 2025 18:41:06 +0000
ROA not after: Mon 13 Dec 2027 18:41:06 +0000
asID: 17561
IP address blocks: 154.223.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78827 (0x133eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:41:06 2025 GMT
Not After : Dec 13 18:41:06 2027 GMT
Subject: CN=6776ddc5-46fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:df:b4:b6:4f:d2:65:6b:b5:7c:ef:66:89:
de:f5:e0:ab:35:ac:e7:fe:5c:30:2f:d3:f5:47:09:
65:0e:b5:54:a3:8a:67:6f:3b:77:73:7c:66:7a:64:
cf:48:a4:10:f9:2a:72:7c:4a:2e:07:06:a8:33:c5:
ed:c0:12:47:cb:9a:69:7f:ea:01:40:ed:bc:e9:f8:
be:a5:1d:42:cc:b9:3b:e4:f4:61:27:86:aa:eb:fa:
10:63:26:fc:7c:89:ef:9a:7a:c7:5b:6d:a0:4a:9f:
1f:a2:ca:b3:3c:dc:4e:4b:c0:c5:1e:a5:25:7d:25:
fe:f5:56:46:ce:e1:cb:0d:8d:43:c7:61:e5:8c:2a:
42:36:6f:f7:3a:df:ec:bc:ab:a5:2c:43:8d:dd:8b:
56:d7:ce:32:8c:83:3c:f1:90:57:63:6d:da:08:5c:
a4:91:e2:05:f2:8b:c4:01:6f:73:da:a8:3a:e6:07:
dd:09:96:a8:82:7c:29:ca:51:2b:fb:69:e0:1c:f0:
6a:19:68:05:46:55:9a:bc:d2:cf:30:0f:62:f2:5e:
11:56:73:f8:d5:13:d8:0d:2b:6d:80:46:28:4a:7d:
0e:85:00:3e:c7:9b:e8:00:31:e0:95:16:ba:f7:43:
84:8f:6a:48:f6:2e:6c:d4:bd:a7:cf:71:f1:2c:66:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:25:9A:D5:51:78:0C:62:21:AA:A1:8C:91:AB:71:76:E4:73:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E1B38C93911EFA190EFA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d3:13:e1:7d:dc:89:27:34:1f:af:17:16:94:13:f9:2c:de:
d1:c5:73:02:b2:15:5b:28:4d:5f:3f:ad:7c:f5:17:83:07:36:
d4:2a:af:d7:43:0b:5e:22:f4:01:c0:62:36:d3:f4:b2:56:fb:
cc:47:90:cf:e7:ff:da:f3:3c:ef:66:6c:45:a4:e9:5b:4c:80:
16:db:02:e8:ac:38:e1:65:57:45:39:07:08:73:70:3f:44:75:
69:c6:6f:78:91:2e:1d:df:df:02:78:1a:24:2b:bf:79:43:ca:
f1:f6:42:06:dc:67:3c:1f:17:7b:34:38:e8:27:64:0d:56:6e:
ea:69:ee:98:1a:eb:1e:36:56:70:38:da:c4:b6:08:43:19:48:
84:41:9c:66:e9:2e:da:e8:f7:9d:37:ec:0b:bc:fc:c2:c3:a2:
3b:f8:9f:bc:48:13:6a:e0:c5:1d:33:af:b7:2f:c3:13:86:7f:
9a:44:39:e5:97:05:6f:28:bb:3d:09:c1:55:1f:cd:76:ac:2a:
4e:eb:97:e0:c5:af:68:30:45:19:00:d7:21:76:f9:f3:9c:61:
11:ce:cd:b4:b6:a0:7f:1d:b2:a6:69:5d:38:40:7d:5e:2c:5b:
78:70:1b:05:a5:da:4b:b8:3a:4d:c3:c1:ed:a8:52:3e:15:58:
06:b0:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:53 2025 by rpki-client