Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/404E8EA0F35811EF9AEEEC91762E951A.roa
File: 404E8EA0F35811EF9AEEEC91762E951A.roa (raw, json)
Hash identifier: Po+vrvp332MPJRm6iix7s6A1JQYxnfj5oI6FsKGoVdA=
Subject key identifier: C9:EA:CB:14:6B:A9:33:02:A4:0E:E8:FD:AE:40:60:2B:E9:B2:79:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/404E8EA0F35811EF9AEEEC91762E951A.roa
Signing time: Tue 25 Feb 2025 09:09:43 +0000
ROA not before: Tue 25 Feb 2025 09:09:40 +0000
ROA not after: Mon 07 Apr 2025 09:09:40 +0000
asID: 138915
IP address blocks: 154.223.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89570 (0x15de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:09:40 2025 GMT
Not After : Apr 7 09:09:40 2025 GMT
Subject: CN=67bd88d7-7a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:10:4b:f9:ab:22:dc:f1:4f:29:bc:57:8d:
93:2f:8a:e0:d9:ca:88:7e:93:ce:d3:29:80:67:cc:
25:a2:f2:70:33:b9:fa:3f:2a:8e:d3:c3:b4:a5:c6:
76:21:19:11:52:ef:6a:63:a4:54:6e:e8:25:3c:dd:
4a:0f:c1:35:bf:cc:47:72:14:e0:40:b5:bc:e5:f1:
42:10:e5:1f:77:e7:7f:66:31:f1:30:c3:83:84:9a:
9e:21:ee:99:63:9e:4a:4d:bd:c4:d7:4e:28:84:ce:
cf:59:cf:44:e4:f9:28:64:27:84:6b:64:40:d6:a9:
c3:38:b7:f6:05:31:16:c7:8b:24:bc:c1:96:53:d5:
c0:e1:42:95:8f:10:db:43:02:73:a4:53:74:3a:58:
4f:00:2a:5b:67:3c:be:b8:0c:1f:d4:11:c7:c1:c1:
f3:94:5c:c1:71:3c:a7:4e:71:2c:71:ab:2d:71:5e:
d4:ff:f3:9a:65:b2:25:73:70:e0:2c:e3:3c:70:0a:
3e:91:68:b5:cc:6e:ef:c9:b2:86:25:6c:66:cf:2d:
96:5a:12:b3:fb:bd:19:e6:77:1d:b2:96:44:49:8e:
f5:af:6e:3b:8f:eb:ba:8f:73:5f:c4:30:ab:42:e5:
7b:97:8b:0f:27:4b:ff:65:66:50:25:5d:22:63:01:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:CB:14:6B:A9:33:02:A4:0E:E8:FD:AE:40:60:2B:E9:B2:79:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/404E8EA0F35811EF9AEEEC91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f9:01:81:84:39:0e:fc:46:8a:44:42:ec:43:58:42:99:b1:
9c:b1:78:d4:d8:38:6c:8b:e5:ca:7c:f0:d4:2d:c5:75:c1:f1:
8a:60:34:e8:c5:fc:05:a1:f8:dc:6b:e8:cf:8f:4d:5f:5c:d5:
44:53:8f:78:62:d0:f3:fa:e6:41:49:6b:df:b2:b6:48:6d:a2:
8e:3e:5c:50:ac:4d:5a:f3:77:d1:47:2e:73:c1:34:1a:4f:b7:
96:1d:0d:b3:48:c7:0b:42:af:0b:e0:6f:b5:be:3f:65:e9:ab:
4e:bc:f1:d7:f4:02:41:68:b1:32:b1:c1:d2:79:92:91:a7:15:
c2:b9:ba:99:59:bf:3f:cd:08:24:03:1b:38:da:c7:56:8e:4b:
1d:43:e6:6c:29:7f:cb:70:b8:c5:5d:02:7b:fc:27:f7:bf:ae:
f2:7b:8b:1f:00:9c:7c:31:c2:cb:d2:0e:34:e3:a7:b0:fe:81:
5b:f1:6e:47:1d:a8:d8:fb:7d:db:63:ac:12:56:05:f9:af:4a:
83:0d:29:5b:c1:55:49:ae:1e:76:6d:94:23:50:f6:87:d1:6d:
8d:05:aa:78:2b:e4:f1:0c:61:84:e9:03:c5:2c:43:fd:cf:c1:
ee:6c:62:4b:79:e9:1c:8f:a6:bf:37:72:2a:83:e6:5e:fb:31:
fb:77:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client