Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE73DA06C8A711EFA8573483762E951A.roa
File: AE73DA06C8A711EFA8573483762E951A.roa (raw, json)
Hash identifier: OjErEklLeSbtnUqqCaXXo1W+6tJ/8WUS7DUY4bHXcKc=
Subject key identifier: 38:13:D8:22:24:CC:BA:9A:90:84:C1:7D:DB:CB:24:83:B6:13:57:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013158
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE73DA06C8A711EFA8573483762E951A.roa
Signing time: Thu 02 Jan 2025 01:19:58 +0000
ROA not before: Thu 02 Jan 2025 01:19:55 +0000
ROA not after: Sun 12 Dec 2027 01:19:55 +0000
asID: 17561
IP address blocks: 154.220.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78168 (0x13158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:19:55 2025 GMT
Not After : Dec 12 01:19:55 2027 GMT
Subject: CN=6775e9be-fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:f6:ec:aa:e4:f2:34:f5:1c:a1:1c:6e:98:
8a:05:f2:f4:c1:5c:a4:85:92:41:50:49:f6:f7:ba:
de:f1:b1:3f:56:10:49:d9:68:65:ec:3c:1f:7c:5a:
73:ad:93:64:63:56:c6:74:c7:b3:e3:3d:d6:27:c6:
66:c5:99:d7:24:a6:05:3e:9d:8a:3e:61:e0:01:f4:
6a:02:69:a2:06:1c:cc:25:6c:22:97:22:d8:e0:80:
5e:d9:3c:8a:34:58:12:95:dc:af:97:b7:d8:56:e8:
fc:86:7f:59:34:a4:82:ca:ae:8b:68:a8:f3:83:22:
3c:61:c6:ae:e4:37:50:c8:e8:cf:52:36:08:29:78:
9c:8e:f0:eb:37:da:f4:65:4d:0c:65:9e:97:a7:91:
aa:21:a5:33:5a:19:a9:52:e1:df:99:78:e6:03:8a:
d8:57:31:c6:e5:7c:56:dd:a9:44:40:54:1b:90:f0:
12:0e:b6:65:49:ae:67:aa:9c:ee:e0:9f:4e:39:d4:
94:eb:d1:6d:cd:94:40:40:10:41:4f:8f:dc:47:fc:
3e:fb:8d:4b:0f:ee:21:63:f7:0c:ef:06:b0:fb:23:
ad:94:93:8c:8f:13:64:01:de:2f:b6:17:4d:a2:e3:
9e:e6:0f:30:d3:60:5d:ba:cb:20:92:d7:c0:83:0c:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:D8:22:24:CC:BA:9A:90:84:C1:7D:DB:CB:24:83:B6:13:57:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE73DA06C8A711EFA8573483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.135.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5f:e8:5f:1d:47:e9:ec:03:bd:3d:5a:28:82:7a:47:10:b2:
67:63:67:b7:de:02:14:d4:f7:26:b7:d3:88:3f:7e:74:47:65:
89:53:fe:95:d7:4c:25:4f:3c:f2:4f:71:d9:4c:eb:09:a8:a5:
30:65:6e:d4:e6:fb:4b:a6:aa:ea:d7:15:cc:fa:c5:9d:55:ab:
61:22:ef:a3:30:07:71:fb:58:fa:8e:ea:73:44:52:35:43:92:
53:a4:41:53:e8:74:db:6b:2b:dd:a6:c0:ff:cf:68:3a:4c:81:
c2:39:f2:5b:4f:00:5c:55:a8:b9:5f:7b:3f:f4:d5:89:89:c3:
2f:3e:b2:d3:b2:17:45:6c:2d:50:6a:54:b1:91:b9:f6:1f:8e:
aa:cf:26:cc:8f:ab:7b:34:44:32:42:d3:3c:38:30:9b:64:5e:
50:f9:6c:4d:b9:d1:0a:79:a1:82:53:01:7b:15:31:0b:9a:d0:
49:be:4d:2a:a7:1f:17:9a:1c:22:86:19:68:9c:20:51:7c:ae:
6d:7b:62:59:11:57:66:e3:fe:fa:95:37:d4:dd:0a:c6:89:6c:
a7:91:7f:e1:95:43:ca:c3:9b:ec:2e:fc:38:eb:d1:9f:4d:ca:
ce:06:d8:dc:ec:c9:f7:cf:30:ff:69:89:ea:65:90:2e:8a:d8:
ac:83:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:35 2025 by rpki-client