Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AF32484E2D011EFBA0BAEAC762E951A.roa
File: 5AF32484E2D011EFBA0BAEAC762E951A.roa (raw, json)
Hash identifier: WaqnOXhgc4lCBQVvk83c5WCBmzM/v1r6bxMw3tHbMsg=
Subject key identifier: A4:BD:E4:38:47:B7:C3:04:69:C7:08:6A:27:B0:5F:BD:19:FD:96:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01509C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AF32484E2D011EFBA0BAEAC762E951A.roa
Signing time: Tue 04 Feb 2025 08:16:38 +0000
ROA not before: Tue 04 Feb 2025 08:16:34 +0000
ROA not after: Wed 30 Apr 2025 08:16:34 +0000
asID: 18229
IP address blocks: 154.210.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86172 (0x1509c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:16:34 2025 GMT
Not After : Apr 30 08:16:34 2025 GMT
Subject: CN=67a1cce6-702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:01:d9:04:db:16:8f:30:4b:41:b7:f0:d6:
98:1a:01:97:35:56:e7:39:16:38:36:99:b0:7c:1a:
e9:26:89:8b:12:76:57:dd:89:0a:3f:55:a3:19:b6:
8b:f5:a1:93:18:e1:5b:4b:55:77:77:35:e8:02:e1:
72:8d:a6:fe:c8:26:99:c0:97:c4:5c:76:fa:34:9d:
4e:5b:02:93:8e:93:85:50:8c:b8:e7:5f:ba:76:f6:
5f:58:9e:a8:70:2d:8d:a1:a1:bf:22:b0:69:59:c5:
59:66:f9:7d:dd:e9:26:15:bb:ce:a4:21:92:eb:06:
92:3b:f6:13:9a:9f:cc:96:d7:13:e6:01:71:ae:6c:
7c:aa:5d:af:cd:8e:d7:e7:e8:59:db:f4:f5:d0:0b:
15:db:5a:dc:62:94:09:39:6b:05:a6:b7:a6:9e:64:
e7:0e:11:b1:02:47:49:e1:dc:bb:df:e7:40:2f:46:
43:0a:5a:2c:73:82:95:81:72:4f:da:59:a0:f1:9d:
ec:17:58:8b:1d:3a:29:62:8c:d4:43:d7:20:68:f4:
c2:30:52:6c:92:00:78:b5:81:b2:bf:7d:cd:eb:c9:
19:a2:1a:be:23:5d:be:c8:0b:92:ad:20:e8:6c:3b:
19:2f:cd:1e:86:40:d5:ff:1c:18:3f:36:5e:85:22:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:E4:38:47:B7:C3:04:69:C7:08:6A:27:B0:5F:BD:19:FD:96:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AF32484E2D011EFBA0BAEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ae:6d:57:64:44:4f:fc:fd:4a:b9:9d:cb:ee:cf:7d:cf:6e:
90:5d:87:0a:e2:0d:7a:77:68:13:99:af:eb:eb:20:4c:38:48:
0a:63:b2:da:16:ff:28:fd:65:b3:74:8f:3a:9d:15:c5:47:8d:
83:58:38:f2:2b:99:cf:8c:2d:05:45:4b:5e:23:04:85:30:55:
34:11:0d:08:78:8a:8d:5f:87:cb:a1:c7:6b:8d:b4:6a:37:a0:
d2:4b:f4:57:13:81:fd:09:b1:32:7b:e3:85:5f:2e:76:d9:ba:
b4:05:4e:f8:98:18:93:a8:0e:76:e8:21:d6:a3:0c:52:66:85:
5e:8f:59:2f:d8:38:4e:3a:0f:37:72:32:f6:15:fd:2b:ef:4a:
55:d8:fc:0e:9c:d4:5a:43:f0:5c:62:94:44:a7:e2:70:60:c3:
bd:0c:39:cc:69:70:30:a2:ab:69:6b:6f:df:bf:d3:02:1b:2c:
9c:1b:8f:d8:e7:a1:21:16:6d:ea:e9:09:5e:1e:a9:8d:f2:17:
7d:89:f6:c0:97:49:33:61:84:2f:4e:8a:40:8f:de:40:14:57:
1c:76:fc:76:89:55:6f:0f:04:8d:84:dc:e6:27:55:6c:55:78:
f9:48:d1:fe:c3:1a:bf:07:96:d9:0d:e9:0f:fb:5b:4d:b2:51:
e0:0b:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:46 2025 by rpki-client