Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6928EC94C8AB11EFAF4A039D762E951A.roa
File: 6928EC94C8AB11EFAF4A039D762E951A.roa (raw, json)
Hash identifier: vxqnpk3xVJwohJOO73I1LOTiyH7clhv6Su4jw7lSAns=
Subject key identifier: 62:A3:F3:0C:6E:13:FA:AD:77:3A:B7:82:C3:30:3F:02:09:B0:95:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013178
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6928EC94C8AB11EFAF4A039D762E951A.roa
Signing time: Thu 02 Jan 2025 01:46:40 +0000
ROA not before: Thu 02 Jan 2025 01:46:36 +0000
ROA not after: Mon 13 Dec 2027 01:46:36 +0000
asID: 17561
IP address blocks: 154.220.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78200 (0x13178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:46:36 2025 GMT
Not After : Dec 13 01:46:36 2027 GMT
Subject: CN=6775f000-89fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:f5:2a:06:c3:d0:44:11:16:cb:f6:bd:e0:
4a:03:5c:4f:7d:3b:61:a1:08:4e:b2:47:4f:16:4d:
db:77:87:13:7a:89:fe:5a:fd:9f:8f:6b:b6:a4:92:
67:5d:42:24:f8:3e:66:24:8b:82:ec:10:17:50:12:
54:4c:7e:e8:54:5b:36:5f:06:35:48:c4:0d:2f:b1:
58:ae:ba:dd:cb:ad:91:ba:2f:17:11:d2:b9:18:51:
a2:ef:82:d4:d1:26:ae:7c:e5:1f:72:92:93:c7:e4:
ce:e0:d7:fc:74:54:8a:0a:ed:b3:58:78:bd:e8:57:
56:db:c5:cb:a3:33:82:e8:57:a9:69:c6:a3:7f:1e:
81:a1:8f:6b:58:82:bf:a6:b2:16:54:85:b1:7b:54:
8a:45:30:72:77:ef:ff:54:aa:4b:23:5e:62:22:2a:
c3:b8:8c:b0:b7:a8:57:ce:e4:21:1e:bd:23:7e:50:
d1:3b:16:01:68:23:21:01:a7:0c:b0:fb:ed:c8:46:
fc:3c:80:59:ea:36:91:60:c7:75:92:b5:62:40:2c:
c2:da:68:ec:78:6b:e6:60:2c:a9:48:ce:82:4a:d4:
c3:22:b9:74:53:49:39:75:63:00:cc:0e:fc:b4:ae:
91:86:93:3f:2e:97:70:73:a2:73:c3:6c:c7:ef:15:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:F3:0C:6E:13:FA:AD:77:3A:B7:82:C3:30:3F:02:09:B0:95:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6928EC94C8AB11EFAF4A039D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.151.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b9:a3:35:9e:37:f0:19:25:b6:29:64:8f:1c:3e:30:3a:3d:
83:82:6d:e2:f9:48:40:bc:cb:ce:86:42:12:b4:b3:af:cc:38:
e3:89:d0:66:ab:21:ec:45:45:13:cb:0f:7c:1d:69:88:70:33:
e5:21:10:79:39:4b:63:19:c6:b5:6b:74:89:f2:b2:8f:ce:e3:
81:2e:48:69:db:f4:93:f2:27:27:cf:62:32:79:e3:1f:76:d3:
32:7f:d4:b1:1f:b3:4e:e9:4b:7c:4e:b7:f6:41:5e:fb:7d:b4:
cf:ef:b1:0b:cd:4b:fe:0a:f8:ed:30:d7:2b:82:3d:48:35:e3:
e5:22:7c:dc:01:de:32:c0:64:a3:6d:53:0d:9b:75:59:0d:84:
70:4b:d4:fd:d8:aa:f8:bb:3a:d6:b8:93:0f:bb:7a:6c:c6:43:
60:46:63:1e:0d:4e:21:5c:44:32:f3:db:82:cb:e4:b2:7a:2c:
72:a6:66:0c:2e:5d:6a:e3:4f:56:5f:e3:9c:e9:4b:56:4e:dc:
2a:fd:f0:07:e4:ff:e8:11:53:15:b8:07:a4:47:84:73:5e:f6:
4b:00:11:77:a4:0e:90:e8:83:7c:0c:27:9f:f4:53:f2:b4:03:
ad:19:68:cd:f4:27:98:8b:a3:3c:c4:b6:ea:ba:f9:39:34:7b:
21:13:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:26:18 2025 by rpki-client