Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6842458AE24311EF9F7B4371762E951A.roa
File: 6842458AE24311EF9F7B4371762E951A.roa (raw, json)
Hash identifier: H1b9cf0vBj1YWRPgClZt4+O3hqgJt7l06HBegmNoGRI=
Subject key identifier: C2:2F:F8:D8:D0:07:E3:30:1F:C9:59:F7:EC:D3:35:E7:28:AA:5D:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01503D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6842458AE24311EF9F7B4371762E951A.roa
Signing time: Mon 03 Feb 2025 15:27:41 +0000
ROA not before: Mon 03 Feb 2025 15:27:38 +0000
ROA not after: Wed 30 Apr 2025 15:27:38 +0000
asID: 150008
IP address blocks: 154.210.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86077 (0x1503d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:27:38 2025 GMT
Not After : Apr 30 15:27:38 2025 GMT
Subject: CN=67a0e06d-9ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:20:cc:43:f1:44:8e:cb:8b:34:4d:f1:ff:
af:72:23:41:af:1a:e6:6a:1c:db:1e:b7:ea:33:05:
53:f8:c1:4d:9c:6a:3b:ce:cd:bb:18:a3:f8:b0:eb:
e6:06:65:10:68:b1:8a:03:52:bf:ee:37:b3:dd:65:
58:e6:c3:93:3b:97:a6:cf:16:57:4f:45:58:31:19:
d6:b3:04:e1:5a:9f:0d:bf:9f:35:4e:94:a2:2d:d1:
7c:bb:2c:ec:e7:ff:09:9a:c4:34:56:97:d1:86:3b:
eb:4d:b2:c2:12:82:31:5b:92:d5:fa:14:33:60:2f:
3c:9f:47:b8:0c:4b:4f:c0:b4:f0:c6:38:2f:59:93:
9f:8d:27:e3:45:50:c8:30:54:52:32:4d:71:e3:76:
37:2d:b5:5a:75:a5:3d:43:90:58:1e:81:8d:1f:6d:
c8:6e:7c:52:2c:8b:42:9b:55:b1:a3:54:60:e9:46:
ed:4c:bb:c6:9b:64:6e:ea:43:4e:38:ac:ab:45:fb:
c2:e9:3f:fb:80:5f:fd:2c:19:19:10:3a:3c:51:e7:
14:ff:b8:65:aa:04:d3:e4:b5:c0:40:18:21:ec:80:
4b:16:41:3c:6b:1e:64:fc:70:eb:a2:62:e1:e1:18:
5e:12:8d:25:fc:6b:be:4e:51:64:d5:c4:34:8a:eb:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:F8:D8:D0:07:E3:30:1F:C9:59:F7:EC:D3:35:E7:28:AA:5D:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6842458AE24311EF9F7B4371762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e9:be:bc:f0:d2:29:71:c0:45:4c:35:89:59:29:0b:71:19:
28:65:cc:64:f2:02:2c:cb:9b:a1:b1:bc:6c:90:52:65:f0:c0:
47:84:b2:9f:8e:f5:89:ea:12:42:13:5f:f3:5f:cc:b2:4a:1d:
5d:da:d4:01:8e:85:cd:50:95:35:db:69:dc:9b:44:97:4b:f0:
ef:4f:64:3d:d1:fa:bb:a6:a8:a5:d5:e1:d7:04:8a:71:05:87:
49:68:03:b0:9e:dc:2f:17:75:5b:45:cf:d6:7a:f8:d7:b8:dd:
87:13:5c:1b:f5:a1:23:2e:0c:ee:be:1f:28:52:a6:76:42:e0:
3c:12:3e:b3:dd:c8:06:8a:26:cc:13:28:a5:2c:5b:03:8e:94:
b6:43:7c:0a:61:18:1a:65:4f:5f:28:b0:dd:b6:54:0f:47:bb:
9d:7d:1e:db:da:8d:7f:20:d9:a5:16:1a:df:60:38:b3:37:a6:
6f:0f:ff:17:a0:da:7e:55:e1:dd:3e:ff:4c:e5:dc:76:e1:4f:
81:c5:a5:7a:b9:d8:a0:76:9f:7c:77:d4:5c:6d:91:71:45:ec:
96:d5:02:50:f3:33:ef:8b:bb:b2:a8:63:4b:ea:70:cf:ec:5b:
38:d3:8b:19:85:9b:a1:c9:f5:4c:23:af:1c:7e:0d:7e:d8:c1:
33:c5:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client