Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C79E10E2D311EF82531443762E951A.roa
File: B9C79E10E2D311EF82531443762E951A.roa (raw, json)
Hash identifier: l031yh8VWL5E6JyGR92oqbjYssbD2f+CTOU+GRFYTyE=
Subject key identifier: CE:55:3A:9E:49:8A:3D:13:C8:88:C2:AC:40:9C:84:AD:F5:67:8F:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C79E10E2D311EF82531443762E951A.roa
Signing time: Tue 04 Feb 2025 08:40:45 +0000
ROA not before: Tue 04 Feb 2025 08:40:42 +0000
ROA not after: Wed 30 Apr 2025 08:40:42 +0000
asID: 18229
IP address blocks: 154.210.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86192 (0x150b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:40:42 2025 GMT
Not After : Apr 30 08:40:42 2025 GMT
Subject: CN=67a1d28d-f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:bf:aa:5c:a4:a7:2d:af:1f:04:25:44:63:
31:a4:3c:7c:c5:fc:98:f6:78:bd:69:4b:9f:b5:6e:
89:e7:de:79:e9:63:af:9f:5b:e4:b4:74:db:4f:fa:
f8:25:27:3d:78:b7:cf:7b:8d:6c:31:bd:7e:38:63:
de:cd:b3:23:a3:e6:02:4e:9e:bc:ae:8e:21:d4:84:
08:b6:94:b6:bd:4f:93:27:b4:b5:e4:8a:42:b3:05:
3b:55:a4:e4:6d:d6:34:ef:a4:c7:f3:a1:b4:51:c1:
7e:22:3f:22:4f:81:f2:d5:08:2d:35:3e:60:5d:b6:
83:3e:f6:51:7d:1c:10:f0:84:be:8a:3c:58:90:cd:
68:99:c9:fa:ae:c2:91:62:19:3f:d5:ce:48:b4:35:
ab:d4:2c:28:5d:2d:a6:5f:89:a6:d3:36:fe:4c:0b:
b1:4e:9c:d4:fe:d7:3a:75:d4:3b:08:1f:f0:94:d6:
b8:b7:d0:8a:68:1f:b9:fb:aa:4f:84:27:57:a5:56:
00:54:01:6c:de:65:d5:d5:77:19:58:de:60:aa:62:
37:6c:31:ff:e8:25:02:04:5f:c4:24:91:5d:f3:b0:
fe:9c:96:3d:d5:44:63:04:01:82:db:21:7a:02:05:
47:0b:f5:25:97:8b:d5:18:e1:96:44:26:bc:30:0e:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:55:3A:9E:49:8A:3D:13:C8:88:C2:AC:40:9C:84:AD:F5:67:8F:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B9C79E10E2D311EF82531443762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:82:64:03:5a:b8:bb:26:5e:15:f4:10:21:39:d5:90:bd:1c:
a6:43:6e:e9:e8:da:87:da:e5:da:2f:c6:5d:61:5c:13:a7:42:
fb:fa:ab:90:2a:18:62:77:cd:92:63:99:ad:61:7b:c0:ec:1c:
a0:12:cb:18:b5:ad:6b:c1:3b:f3:74:4c:a8:8c:fd:8b:1a:13:
17:29:f2:03:20:e3:d4:7e:85:6e:0e:7c:89:c8:45:8b:91:5d:
e5:bc:ca:95:67:a2:a4:51:41:cb:c9:76:5f:e0:9b:9f:a9:20:
83:83:40:5f:d0:5a:e4:3c:b0:cf:f2:9e:31:42:f8:cc:2a:06:
04:52:3c:e5:ab:31:82:f9:85:73:31:27:60:93:1f:16:ec:0b:
62:2e:50:5b:89:4a:aa:90:5a:56:d9:a5:57:b9:b0:1b:df:bc:
f8:44:71:71:76:41:9c:01:42:7a:a2:e7:23:f8:55:d3:af:2a:
a0:34:e1:04:91:db:3f:60:d4:7f:e1:d5:09:07:62:c5:79:1f:
4f:bb:96:b5:8e:f3:25:f0:2b:77:d4:5f:16:fa:60:2c:9e:39:
ef:68:6b:04:53:d4:40:39:d4:5e:4a:ac:23:cb:cf:66:12:82:
c9:61:39:6b:7c:cf:71:7c:7b:b5:f2:3f:83:b8:7d:d6:1a:b8:
d1:0f:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:44 2025 by rpki-client