Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852AE650E23B11EF9740C0B9762E951A.roa
File: 852AE650E23B11EF9740C0B9762E951A.roa (raw, json)
Hash identifier: /Y4a9H6S9C/4wWN80OOljwOkHdIBLqiKPyGRCdwx3l0=
Subject key identifier: 43:A5:95:6A:85:6E:5A:38:CA:DF:63:19:D7:E0:1A:92:A2:A7:61:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01500A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852AE650E23B11EF9740C0B9762E951A.roa
Signing time: Mon 03 Feb 2025 14:31:14 +0000
ROA not before: Mon 03 Feb 2025 14:31:10 +0000
ROA not after: Wed 30 Apr 2025 14:31:10 +0000
asID: 18229
IP address blocks: 154.210.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86026 (0x1500a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:31:10 2025 GMT
Not After : Apr 30 14:31:10 2025 GMT
Subject: CN=67a0d332-cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:b7:b9:6d:2f:3a:c2:e3:0c:bb:87:36:cd:
da:20:5e:25:07:43:80:cf:e7:d5:c3:c2:c6:29:2c:
55:62:01:ed:7c:f6:a7:06:ee:47:99:10:41:6b:7b:
ab:ce:68:00:0a:6e:59:8a:c2:e3:37:a1:0f:69:b5:
04:a4:ec:61:ba:49:69:fb:28:48:2e:51:b2:e9:44:
d9:a4:e7:15:bd:11:30:60:e0:ce:13:3b:82:84:dd:
9f:68:5e:cc:aa:0e:c6:77:b5:5c:96:06:c9:7d:42:
e7:12:fb:05:42:b7:e2:2b:36:79:d2:a4:49:2f:1d:
a7:2a:dc:28:56:93:fa:bd:26:e3:3d:e8:22:05:28:
50:bb:bd:08:d7:8f:b0:c0:dd:02:57:58:e6:7b:7c:
27:45:5e:b7:0b:65:2d:90:ae:2c:21:6f:b8:84:84:
73:b5:eb:cf:ed:74:35:bd:53:d7:e3:41:53:d2:a2:
b8:15:59:4f:8d:2e:93:68:f8:f9:67:9c:37:7c:11:
1a:0a:d9:48:2b:03:0b:6a:97:49:6b:c6:b0:a4:eb:
6c:e0:ef:99:53:4c:b0:68:49:c7:2e:62:62:43:a1:
e0:8a:74:f6:f4:1d:45:24:a2:40:00:29:6a:49:1f:
f1:b5:ac:d8:c8:64:41:32:2f:31:c6:d8:80:06:be:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:95:6A:85:6E:5A:38:CA:DF:63:19:D7:E0:1A:92:A2:A7:61:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/852AE650E23B11EF9740C0B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.187.0/24
Signature Algorithm: sha256WithRSAEncryption
91:94:9f:5c:a4:31:eb:94:5b:27:f5:04:46:cf:91:5b:f8:15:
0f:8d:21:24:0e:97:6d:43:8a:44:47:ad:0c:aa:e9:ea:60:92:
45:97:99:7b:ee:de:c7:64:e5:f8:38:fd:99:35:70:3d:e5:f6:
2c:b9:1d:ec:28:7e:4d:34:d3:54:83:dd:86:5b:6c:9d:79:63:
08:f5:74:23:a2:84:b4:b0:7f:95:b5:d7:53:1d:46:49:22:bc:
90:b3:5e:76:65:9e:56:3b:23:4f:18:d9:8a:42:b6:6b:32:3b:
fa:1b:88:41:db:9a:77:a2:f7:f1:a7:f9:54:fb:95:85:dd:a7:
b1:dc:9a:e7:49:ce:df:7f:6b:bf:71:b0:bd:a1:cf:e8:91:0d:
66:a9:17:2b:c9:df:f1:f5:c6:f4:2f:95:9f:c5:2d:11:6e:83:
a3:8d:50:6b:1f:12:de:98:9a:46:42:27:a4:d9:0c:94:35:ec:
bd:b4:b2:71:51:dd:20:34:31:05:00:77:41:02:75:5b:6a:7e:
61:22:4a:67:f3:98:a0:64:d1:b9:55:35:8e:4a:70:d4:eb:5e:
80:66:b1:cc:b4:fb:28:81:53:ed:57:f0:3e:82:c0:d0:b5:eb:
c6:e1:20:52:4b:16:57:da:f7:6d:cc:aa:2d:81:97:4e:00:00:
36:43:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:59:14 2025 by rpki-client