Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1843BDEF2BB11EFA00EF865762E951A.roa
File: C1843BDEF2BB11EFA00EF865762E951A.roa (raw, json)
Hash identifier: X2q+a8bVV6AmVPpt2Ywyt6HTMuPt3dsxQefvCKGzJOc=
Subject key identifier: 48:F3:5A:21:5A:AB:AE:9F:69:B5:1D:E1:AC:44:AB:81:5B:34:5C:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1843BDEF2BB11EFA00EF865762E951A.roa
Signing time: Mon 24 Feb 2025 14:29:29 +0000
ROA not before: Mon 24 Feb 2025 14:29:26 +0000
ROA not after: Sat 29 Mar 2025 14:29:26 +0000
asID: 203020
IP address blocks: 154.223.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89132 (0x15c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:29:26 2025 GMT
Not After : Mar 29 14:29:26 2025 GMT
Subject: CN=67bc8249-1728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:0c:23:8f:7c:e7:44:a4:66:8f:be:70:ca:
a3:d3:88:e6:8d:0c:be:53:fa:6e:f1:e0:78:f3:4a:
fd:e2:8f:18:f4:e0:d6:30:fe:6b:69:1b:b4:1b:80:
c2:0c:97:16:a6:5d:29:00:1a:11:bf:c7:a6:b3:40:
8b:46:51:11:c5:ea:8a:32:43:c5:1d:69:34:6c:be:
8f:a0:b0:40:c0:e0:10:d5:bf:5e:b2:1d:40:5a:6c:
b5:04:d2:2a:4a:39:ef:33:2b:c7:72:a6:a4:f1:dd:
d1:04:3d:52:ad:5f:03:88:c4:56:8c:a5:97:89:3e:
49:2e:6a:9b:65:b5:f0:85:f8:13:d4:1f:ff:7e:88:
2b:8c:3a:03:cd:bf:e0:4f:ee:ac:24:b5:70:8f:3d:
c6:40:dc:1e:b6:ae:25:6c:9e:87:7d:72:9a:81:d1:
7b:6a:07:14:60:a5:45:92:6f:24:47:48:69:b0:ff:
c7:6c:2d:2c:22:59:dc:73:2c:b6:51:0b:bc:cf:a6:
dc:33:57:1e:ec:5c:3d:ca:4e:19:a5:26:05:76:fe:
33:a4:e7:2c:5f:68:3c:a8:58:8a:c0:03:ab:db:eb:
89:e5:58:b1:9d:a6:53:f8:db:2d:4d:23:c1:b0:ac:
7f:8d:2e:2d:1d:24:28:59:19:68:70:f8:30:9b:04:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:5A:21:5A:AB:AE:9F:69:B5:1D:E1:AC:44:AB:81:5B:34:5C:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1843BDEF2BB11EFA00EF865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.142.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:60:12:7e:71:94:bf:39:17:7c:18:1d:45:fd:99:00:7d:
89:73:b2:a3:34:dc:4a:2b:ff:8f:ee:99:93:95:03:80:f8:75:
d7:e0:db:58:3f:73:53:a3:5e:12:9e:dd:ca:f5:7b:40:51:2c:
81:08:7f:0e:36:3e:92:ce:4c:ba:c8:91:d1:a3:a6:4e:77:24:
6e:34:fb:be:d5:bb:87:6c:b1:1e:f6:68:22:59:88:7f:7b:61:
52:41:e1:4a:34:f0:ff:2b:1c:ed:6f:7f:0d:de:77:b0:ab:00:
52:21:67:9c:3f:3b:d0:e8:8f:07:d7:27:64:9d:4d:ab:6c:fa:
98:b4:d0:4c:d2:dd:5f:64:7e:17:38:97:c5:b1:2b:03:d5:7c:
78:50:b4:23:64:e0:41:6b:00:43:c5:7d:59:6b:14:ff:bc:42:
9f:64:15:37:6f:70:5a:db:be:8a:91:a6:c4:1a:bf:f5:d4:51:
7b:4f:bc:1c:3d:38:cc:24:14:6b:fc:48:3f:8b:44:ee:d6:9a:
b4:71:0e:16:53:3f:c7:37:2f:b6:46:58:d2:cf:fa:8d:0c:85:
50:9a:5a:80:0e:20:28:ed:85:91:f3:f1:26:5e:47:60:ff:e4:
5b:8e:6a:30:f5:40:5f:59:b8:b9:1e:9b:0e:49:14:0a:55:a8:
30:80:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:43 2025 by rpki-client