Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606F716CE24211EFAAB82469762E951A.roa
File: 606F716CE24211EFAAB82469762E951A.roa (raw, json)
Hash identifier: SxIYHhsyQ9VhXhz9UTGXllqRuJkPJFYij6+467hAZMQ=
Subject key identifier: C0:EA:7C:83:1F:4C:27:95:34:5E:FE:AA:36:08:6F:73:12:1C:D0:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606F716CE24211EFAAB82469762E951A.roa
Signing time: Mon 03 Feb 2025 15:20:19 +0000
ROA not before: Mon 03 Feb 2025 15:20:15 +0000
ROA not after: Wed 30 Apr 2025 15:20:15 +0000
asID: 150008
IP address blocks: 154.210.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86071 (0x15037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:20:15 2025 GMT
Not After : Apr 30 15:20:15 2025 GMT
Subject: CN=67a0deb2-7d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:f1:61:2e:ed:70:df:eb:f4:70:28:d1:b4:
49:68:24:da:4a:c8:ee:eb:f5:25:f0:de:ca:5f:24:
76:cf:fa:57:e4:d8:86:00:10:b0:48:03:bb:b3:bb:
16:a4:6e:e4:e4:1c:b6:84:a3:da:9f:f3:0d:18:13:
cf:a9:39:60:8d:05:38:fd:ab:6b:51:31:b5:a2:4d:
9d:bc:91:37:dd:9d:f0:7c:f6:21:ec:72:58:fd:1f:
1e:99:65:d3:24:2c:d9:45:14:22:c5:59:f7:54:d4:
c1:39:06:6c:dd:96:ed:68:30:1b:41:f7:0a:9b:77:
5e:80:2b:90:c9:d1:5a:bf:71:f1:07:ba:5d:41:6e:
8e:3f:fd:2f:c2:50:77:92:99:1a:b5:10:da:5a:d3:
70:eb:1f:f1:74:82:54:4f:06:e6:8a:70:9d:a0:8c:
6c:e1:46:44:84:78:71:58:bd:5f:00:68:d1:06:48:
ad:45:e8:9d:1b:f4:8b:c5:9b:04:77:4b:e8:9d:c2:
71:3f:f9:f6:a3:f9:86:6b:c9:54:68:e8:55:7e:fd:
3b:75:58:b1:d8:ee:88:b0:21:46:9a:b8:ab:40:c8:
c3:02:5d:b1:c9:c8:a9:20:44:fa:52:5c:9e:eb:f0:
fe:2b:bf:d5:ae:4d:2e:4f:87:92:7b:e9:7a:d1:be:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:7C:83:1F:4C:27:95:34:5E:FE:AA:36:08:6F:73:12:1C:D0:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606F716CE24211EFAAB82469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.228.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2c:a8:5f:3b:7c:f1:fd:5d:b8:23:dd:75:8e:48:0f:ea:5e:
e8:f5:33:f5:48:41:70:5d:40:9a:8e:e7:ee:d2:e5:b7:09:f8:
eb:de:10:52:bb:d7:b5:31:5a:7d:26:a8:11:4c:c6:86:cc:f1:
7d:b8:17:cb:c9:8b:53:58:20:33:55:41:aa:cb:6f:5c:d8:b4:
58:c2:4d:32:d2:41:bf:ee:45:e4:a9:cc:07:99:6a:67:a5:c1:
6c:b4:a8:c4:90:34:ef:7d:f9:4f:a5:ee:7c:92:4b:d2:34:d7:
78:c4:57:11:25:f6:b7:0a:ef:94:a8:99:70:10:f1:1b:8e:bd:
7e:dc:49:8d:d9:6f:f5:fc:8a:8c:14:ea:f0:60:8c:d1:79:5e:
06:27:ba:18:96:eb:12:d4:83:de:ff:4e:dd:9f:c3:ea:ed:1d:
c7:a2:5a:ba:27:f6:4d:5f:3f:27:4b:42:93:4d:6d:21:6e:f6:
6f:33:81:13:a0:9d:1c:12:1e:a8:ca:0c:54:dc:97:60:8a:ca:
83:05:94:db:7e:f6:55:3f:f0:d8:f4:69:e3:6b:68:ff:04:48:
28:c8:0e:74:7b:1f:14:06:ed:bf:38:57:d0:07:70:7a:cc:71:
86:43:d4:28:95:24:59:48:67:4f:4c:9b:1e:14:f5:eb:e2:f4:
05:aa:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:29:49 2025 by rpki-client