Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C5F9976E23B11EFBFE11DB9762E951A.roa
File: 2C5F9976E23B11EFBFE11DB9762E951A.roa (raw, json)
Hash identifier: nMRbWRVqguWzF8a6IatVEWElkiKemmWZ71wj64kPQ8I=
Subject key identifier: 65:83:21:E2:DC:E6:CB:58:62:EF:88:CB:A3:34:AB:4F:DA:97:C3:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C5F9976E23B11EFBFE11DB9762E951A.roa
Signing time: Mon 03 Feb 2025 14:28:45 +0000
ROA not before: Mon 03 Feb 2025 14:28:41 +0000
ROA not after: Wed 30 Apr 2025 14:28:41 +0000
asID: 18229
IP address blocks: 154.210.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86024 (0x15008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:28:41 2025 GMT
Not After : Apr 30 14:28:41 2025 GMT
Subject: CN=67a0d29d-54ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:ce:9e:0c:67:97:14:a5:1e:d6:ff:03:45:
3e:0b:50:19:ab:93:62:c3:36:b6:30:37:a3:43:79:
bc:50:12:d8:60:ff:a2:8a:c4:84:49:31:77:ca:91:
8c:4f:a5:7f:87:b2:55:23:ae:95:5b:7e:0b:33:9c:
7e:43:b6:8c:d4:f5:0e:0d:ba:ff:0e:4b:cd:8d:2b:
f9:1b:1a:3a:2f:52:8c:61:72:37:c8:a4:63:95:82:
62:53:80:aa:88:3a:8b:17:73:96:f8:fb:08:6e:96:
cc:7f:9f:00:fc:df:97:e9:96:30:99:d5:e0:71:fe:
ba:97:08:2a:6e:03:ef:c4:ec:dc:fe:26:44:a2:c8:
4b:6c:21:63:c8:6b:bf:d7:a1:2e:7b:8c:b3:ad:c0:
9a:b5:e1:ba:36:2b:2d:51:30:98:57:a8:91:10:e9:
e9:35:ab:7a:85:4e:e9:d7:86:5d:2c:a1:2a:c2:52:
0a:0b:71:3a:91:49:39:a6:9f:4a:08:b4:3c:9d:8e:
00:ae:3a:4d:7b:b7:b8:be:8e:55:13:b5:21:69:71:
6f:90:79:e1:5c:da:33:08:13:67:e9:84:14:51:41:
cd:0a:67:61:2c:8a:e7:6a:4d:7b:8a:61:4f:a4:c3:
4f:65:aa:59:74:63:be:fa:de:dc:8e:44:88:56:fa:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:21:E2:DC:E6:CB:58:62:EF:88:CB:A3:34:AB:4F:DA:97:C3:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C5F9976E23B11EFBFE11DB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.186.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8e:0d:c8:07:fc:80:0b:14:01:5b:74:fb:ea:aa:e4:6e:1c:
b4:6e:32:44:a2:65:85:70:38:d0:fb:00:9d:37:49:f2:9a:48:
3f:16:af:2c:85:0f:8a:94:a4:3a:ea:3b:7e:92:5c:d5:5e:23:
5b:e8:4d:1d:13:37:8c:17:b7:1d:13:85:b2:0f:80:bf:c1:7d:
af:e6:bd:e8:19:f8:bb:bd:56:3e:f0:55:73:33:df:02:1d:58:
a7:14:5c:8d:57:dd:d2:47:33:65:22:17:54:fe:8d:c0:01:6b:
35:d6:b8:cd:f7:c2:ba:25:98:23:29:7d:23:9b:ba:7d:b9:52:
93:8e:5b:7a:5b:2a:52:95:c5:0f:96:9e:3a:b8:52:fa:ea:ed:
4a:4b:65:25:c1:8a:ec:54:a0:b4:c7:49:c6:ce:48:52:ec:61:
76:16:11:cc:4b:aa:b5:18:a5:65:a0:5b:ff:32:44:a0:59:23:
2f:29:95:ba:fc:2d:d4:de:e3:dd:af:6c:ae:96:40:c6:e6:b2:
ac:9f:91:b8:78:2b:c8:0d:2b:59:db:9d:ad:24:c2:06:c5:96:
ec:b0:dc:d3:a6:4b:a1:de:bb:5c:11:7b:43:a8:15:b5:ee:2b:
60:b9:28:ca:b5:f4:48:e2:21:da:29:d7:fb:ce:72:33:9c:7b:
8e:cd:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client