Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C37483AEE2D511EF8D1F0B51762E951A.roa
File: C37483AEE2D511EF8D1F0B51762E951A.roa (raw, json)
Hash identifier: m69rOXbvQ4TGc9U+Oe91I3CADParvb8XUdFItn4duOk=
Subject key identifier: EE:F5:3B:DE:29:61:5D:BC:D6:41:EE:93:48:CD:5F:BF:40:FE:97:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C37483AEE2D511EF8D1F0B51762E951A.roa
Signing time: Tue 04 Feb 2025 08:55:21 +0000
ROA not before: Tue 04 Feb 2025 08:55:17 +0000
ROA not after: Wed 30 Apr 2025 08:55:17 +0000
asID: 18229
IP address blocks: 154.210.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86204 (0x150bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:55:17 2025 GMT
Not After : Apr 30 08:55:17 2025 GMT
Subject: CN=67a1d5f9-084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:ac:8d:ae:33:2f:a5:8d:81:36:fc:cc:b5:
b9:35:e9:30:e6:75:d0:a0:e1:6e:6c:c4:f2:0a:d3:
6f:5b:e2:41:e0:70:88:c0:5c:c9:28:c0:a5:24:40:
b8:9b:37:37:82:89:be:8a:11:37:9f:2d:a0:bd:28:
27:fb:d0:d7:14:d8:79:9d:c8:c6:7d:cb:bf:bf:e9:
cc:d3:57:b1:e9:0d:38:66:5b:69:06:14:c0:19:9e:
f9:09:1d:b5:ed:44:ad:8c:77:b0:bb:d7:4a:ca:54:
87:83:32:75:34:85:02:ce:ee:65:bd:74:8b:45:0a:
0f:df:e1:b9:30:96:ec:5d:c0:20:7c:c2:75:3a:bc:
0c:59:5e:97:c4:da:c9:d0:6c:b5:9b:27:29:3f:ae:
7f:3c:33:44:35:c8:4f:63:d1:6f:2d:64:ec:77:a8:
a6:bc:f5:e7:42:53:79:6d:b4:d7:b6:2a:4d:6e:37:
6f:ba:e9:c3:10:69:7d:42:86:0f:15:47:5c:8b:a8:
54:9a:59:60:fd:11:5a:2d:a1:25:7a:52:f2:1e:78:
45:9e:b2:43:d2:42:81:0c:7f:4c:61:52:4b:68:50:
1f:44:62:d3:7e:49:4e:d6:b0:79:37:4c:78:a9:99:
aa:fd:08:71:68:aa:d9:f1:55:b1:40:72:7e:8e:1b:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:3B:DE:29:61:5D:BC:D6:41:EE:93:48:CD:5F:BF:40:FE:97:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C37483AEE2D511EF8D1F0B51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:28:27:c0:22:3b:27:0e:b6:24:7f:cb:b0:9b:4c:8e:4a:c8:
f2:e5:a2:c6:d1:db:0f:31:1b:1b:24:b3:8d:48:43:f6:41:4a:
6b:60:d5:c3:90:29:a9:dd:a0:16:ad:0f:55:6c:52:ee:94:a9:
86:f1:4a:b7:cc:1d:ee:a0:e3:ae:f9:fe:b7:92:e4:00:7f:3f:
66:7c:9a:6f:0e:1e:fa:2b:4e:a5:1e:4e:0b:9c:2f:a4:86:88:
49:0f:03:bf:e5:8c:66:8d:39:fa:fa:f7:1e:98:12:10:e1:99:
6d:52:f9:bb:dd:4b:83:7f:d2:89:c7:95:29:51:a8:dc:b9:e9:
16:4c:6a:8d:0b:f6:8f:1d:de:6e:f5:ff:01:ea:7f:58:3c:ec:
cd:9b:9d:04:87:6a:26:98:94:cd:ff:fe:a1:4a:cb:62:67:e4:
23:35:70:f8:6b:ab:47:0c:65:4a:ac:4c:a8:3c:36:a0:a1:f9:
9e:0a:b4:f7:6c:07:b4:6d:2e:16:cb:3b:1d:76:d5:29:f7:a1:
de:38:f9:e6:96:f6:20:c9:40:1f:97:a8:5e:70:69:28:3a:70:
18:aa:a8:e9:cb:f4:b8:6a:6d:cb:52:99:29:15:83:52:06:f2:
f0:75:87:e5:9a:07:b0:df:5b:d9:8a:35:15:39:1a:61:54:93:
26:aa:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:44 2025 by rpki-client