Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBA189AE24311EFABC8CC71762E951A.roa
File: BCBA189AE24311EFABC8CC71762E951A.roa (raw, json)
Hash identifier: rgDP1K0IeCY3pX2NZddGI8VoGssHQLpXxWJphYzLiNI=
Subject key identifier: AF:5D:87:B7:5E:DD:C8:FF:A4:CA:8A:82:59:95:63:BC:3B:47:3A:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01503F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBA189AE24311EFABC8CC71762E951A.roa
Signing time: Mon 03 Feb 2025 15:30:03 +0000
ROA not before: Mon 03 Feb 2025 15:29:59 +0000
ROA not after: Wed 30 Apr 2025 15:29:59 +0000
asID: 150008
IP address blocks: 154.206.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86079 (0x1503f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:29:59 2025 GMT
Not After : Apr 30 15:29:59 2025 GMT
Subject: CN=67a0e0fb-3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:7f:16:49:58:e6:ef:3d:1e:a2:4c:6a:31:cd:
0d:81:d9:f7:7d:47:12:9d:46:b2:16:db:5a:3e:de:
0e:13:4b:ee:73:09:f1:2d:e9:7c:32:9f:99:02:b5:
80:e1:d4:08:af:4b:e8:5b:05:fa:80:23:50:e0:5a:
2e:b3:30:f1:c5:27:bf:65:03:f0:2b:27:84:12:5e:
dd:c5:67:35:00:c1:f1:07:f7:f0:a8:39:d5:64:f3:
b4:56:bc:62:63:97:90:91:f7:f9:91:91:08:db:ac:
42:27:7f:0d:f8:a3:01:2e:9b:96:36:74:26:cd:c3:
e6:79:a8:a4:54:0f:01:7b:22:af:9d:d9:8f:50:f0:
0d:0c:18:5a:30:df:25:1c:87:bf:2a:a2:93:c3:41:
25:d2:d5:45:d7:27:5a:93:3a:4e:dd:3c:10:f8:3c:
3f:77:64:10:11:d6:b1:6d:5e:89:e7:1b:b5:8c:e1:
14:39:9c:fb:e0:20:f7:f5:e8:91:76:d4:e8:b1:09:
60:82:f5:93:ce:6f:8a:8b:3a:ab:c5:02:00:7c:69:
0f:55:a6:d8:97:1a:ea:73:35:18:46:de:3a:3c:32:
00:c2:f5:df:e3:a7:64:8c:c3:0d:df:37:b9:24:a1:
02:a2:d4:47:8d:47:a8:93:c8:3b:3c:72:30:24:df:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:87:B7:5E:DD:C8:FF:A4:CA:8A:82:59:95:63:BC:3B:47:3A:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBA189AE24311EFABC8CC71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.24.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ce:10:e4:c3:da:e2:63:0b:76:fb:25:8e:c6:77:e5:78:bc:
17:28:e2:8a:95:cf:6f:f0:14:02:91:09:43:16:29:38:fa:e1:
7b:bb:d5:3a:80:c1:ae:06:43:42:a5:7b:28:3a:b2:ad:7c:79:
cc:ac:bf:b5:19:5f:06:c0:e5:60:a4:f8:8d:aa:27:2f:ed:c8:
cd:2d:81:34:5b:52:8c:6d:9c:03:e7:6a:a3:99:72:5f:de:62:
ca:bb:11:17:5e:e5:36:7d:df:0b:7d:a0:8f:5b:ee:b4:47:3c:
40:9f:11:9e:3d:27:d4:e1:83:01:6e:de:77:be:05:3b:9e:be:
33:6f:ec:55:d1:d1:1f:d3:e1:7c:5e:74:a7:a7:dd:e0:52:91:
66:4c:14:73:68:d2:13:eb:cb:fe:7e:d0:6f:99:75:83:77:38:
5d:d3:b8:17:e8:ca:f6:99:2f:4d:b3:53:c3:32:f9:fc:71:0f:
0f:70:d4:44:b6:35:d6:b5:7c:14:6f:7f:76:86:0d:1b:3a:ec:
cd:15:4f:d7:d4:5c:b2:b8:b5:c9:52:7d:bf:76:a7:e2:d3:33:
6c:fd:89:c3:50:7d:a2:59:6e:99:a7:9a:56:e6:ba:b2:02:91:
91:ce:23:cd:fb:56:de:2e:5c:a7:30:b4:3a:a0:2c:b4:05:04:
83:57:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:10 2025 by rpki-client