Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D22070EDA2011EF906F8793762E951A.roa
File: 7D22070EDA2011EF906F8793762E951A.roa (raw, json)
Hash identifier: ZqotvenUj7Ru0hcAduOwWOirwRxUcG6VqrM4lP8e9gg=
Subject key identifier: 80:79:25:05:34:C7:D5:80:90:25:26:48:C7:B4:D6:C4:55:67:51:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014400
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D22070EDA2011EF906F8793762E951A.roa
Signing time: Fri 24 Jan 2025 06:57:34 +0000
ROA not before: Fri 24 Jan 2025 06:57:31 +0000
ROA not after: Tue 13 May 2025 06:57:31 +0000
asID: 138915
IP address blocks: 154.205.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82944 (0x14400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 06:57:31 2025 GMT
Not After : May 13 06:57:31 2025 GMT
Subject: CN=679339de-62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:5d:0c:77:be:4a:c7:25:b2:30:8a:68:e4:
5e:3e:e9:b8:63:f5:02:fe:de:e3:ee:89:57:d8:4b:
17:a6:70:d8:86:00:2d:56:e7:e4:b8:9f:d6:14:d9:
bf:20:9d:c3:7b:c4:46:69:d1:d8:e6:ce:fa:6d:3f:
a6:23:7d:ef:27:8b:f7:bc:ef:df:57:e9:8f:d6:aa:
d9:40:ae:3e:b0:72:6e:ea:cd:88:ec:8f:2a:6f:2e:
bf:54:ee:6a:24:1d:84:2e:9a:73:fa:3e:a9:bc:ac:
a1:e5:3a:ac:b9:f2:6b:ea:7c:04:ef:78:19:d8:db:
4d:b6:6a:e9:6b:05:0f:be:d4:04:d6:4c:77:6d:cd:
a0:c6:62:a6:16:06:23:3d:d8:fd:e1:69:cd:d9:16:
d6:23:e2:06:10:3e:e6:f3:a2:8e:33:84:47:89:89:
f1:2b:bc:b2:1e:e2:16:d0:d9:74:0a:22:fa:44:87:
a9:a0:9f:41:41:9c:cd:33:6e:32:85:e1:20:a5:a6:
56:2d:e2:df:dc:ec:50:71:d5:6e:32:f8:d0:1f:de:
21:16:ce:8f:63:ea:3d:4b:de:0f:a1:9c:ae:65:59:
23:23:d6:4f:a2:4f:af:88:28:18:fe:94:44:47:66:
da:8d:13:5a:1d:c9:8a:21:ab:a6:2a:c1:c6:6a:f0:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:25:05:34:C7:D5:80:90:25:26:48:C7:B4:D6:C4:55:67:51:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D22070EDA2011EF906F8793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.131.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e0:41:47:77:79:b9:47:54:db:a9:e8:47:31:fc:e9:28:fa:
f5:7e:a5:76:a2:b6:8e:1f:c7:73:d9:7c:c1:82:a2:b9:84:7f:
ba:c4:dd:2d:9c:2a:9b:8e:82:1f:46:42:c1:f8:b8:33:f4:e9:
5f:35:ba:ac:60:26:5a:cc:27:3d:24:e1:90:fc:ec:09:bb:6e:
b2:e5:a6:68:8d:ea:59:d8:e6:39:76:bc:dd:58:51:11:87:8f:
63:c3:c6:ed:7e:90:d9:c5:79:80:d3:5d:11:70:2c:2a:1f:09:
fb:6a:da:be:cc:33:ab:cf:1c:f7:64:e2:4f:5a:b8:b4:dd:4e:
68:f4:dd:78:6c:e5:21:4b:6e:6d:b9:9d:0b:6e:cd:77:8c:f9:
71:2f:0f:29:96:a9:17:95:73:f5:bf:8e:3c:ba:ad:20:21:50:
d2:fa:7b:ce:1d:6e:79:c6:75:08:e7:17:9b:a6:c3:7e:0d:79:
04:69:c1:bd:75:4c:4f:2e:23:8f:95:78:c6:51:c4:d6:59:3c:
74:79:99:cc:da:c0:b2:d5:5c:ce:b5:c4:19:11:21:06:45:0a:
14:4a:e1:71:97:fe:e9:2e:11:a2:10:d5:9d:10:8d:a7:45:64:
9a:74:07:f5:8a:98:ce:e0:c8:21:93:ab:dd:b8:5e:e6:81:75:
b3:72:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:40 2025 by rpki-client