Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE00632CF56011EFB3AC9C86762E951A.roa
File: CE00632CF56011EFB3AC9C86762E951A.roa (raw, json)
Hash identifier: d5TypNKowOvVbUS48DGlya89mcWjvUAPzAOJ5IuBDTw=
Subject key identifier: 68:47:64:51:F5:E7:0C:7D:C7:57:5F:2B:23:95:D4:10:95:CC:DD:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01699C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE00632CF56011EFB3AC9C86762E951A.roa
Signing time: Thu 27 Feb 2025 23:15:59 +0000
ROA not before: Thu 27 Feb 2025 23:15:55 +0000
ROA not after: Fri 11 Apr 2025 23:15:55 +0000
asID: 63139
IP address blocks: 154.203.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92572 (0x1699c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:15:55 2025 GMT
Not After : Apr 11 23:15:55 2025 GMT
Subject: CN=67c0f22f-e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:36:8e:c2:09:44:5a:c2:14:8f:d4:4a:40:
e4:ae:a8:e2:7f:6a:59:78:e8:c8:cf:6f:f1:aa:14:
c0:29:75:20:6d:be:c6:48:bc:4f:20:b7:b6:fd:0d:
3e:25:af:5a:64:34:7a:62:df:4f:66:fb:5f:05:00:
93:66:07:f9:b5:04:b5:6e:c7:f9:c6:2f:76:b8:9b:
1d:2a:85:ef:fa:8f:87:cc:54:e6:2c:72:db:8b:47:
0a:1c:05:ba:7f:5f:e6:4e:0f:3d:7e:ee:c6:3a:c6:
34:a2:36:4d:32:56:23:c6:45:74:08:b0:46:f5:f3:
4b:46:43:d4:80:8c:69:d2:34:a7:a5:0d:aa:fe:5f:
7c:da:1f:20:80:c2:48:a7:ef:29:e6:ac:ac:eb:d4:
94:4e:33:8e:04:52:e7:1f:b9:62:91:d0:e7:12:3d:
81:aa:1a:fe:a9:b1:68:eb:01:6d:51:37:bc:fb:b7:
2c:42:8e:79:c2:b3:b6:f5:a2:54:e4:7e:70:3a:34:
1c:86:db:8f:b9:25:d4:ef:52:78:98:99:6d:b0:43:
de:1f:61:96:2e:87:10:b8:3c:4c:07:7e:cb:37:cb:
01:3c:52:20:e9:45:9d:15:01:16:c6:6c:b1:95:da:
ae:71:ad:0c:69:b2:32:e8:4a:c8:87:aa:ec:15:80:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:64:51:F5:E7:0C:7D:C7:57:5F:2B:23:95:D4:10:95:CC:DD:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE00632CF56011EFB3AC9C86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:34:0e:c5:92:81:59:5c:cb:53:53:95:d1:10:38:19:e4:2f:
68:ba:7c:da:ce:53:03:c2:7d:7c:ad:d1:1b:bc:d2:b1:b6:8e:
cd:f4:15:40:c8:15:a4:f1:07:f4:ab:44:f7:a7:94:31:d3:97:
1f:fd:50:1e:98:37:49:76:cf:e2:97:9c:aa:62:b1:49:3e:cc:
ee:f0:d2:47:92:f4:de:ac:6b:7f:95:45:e6:6c:90:8d:fb:8e:
8d:a0:8b:38:ad:4d:0f:08:d2:b2:0d:c1:5d:27:6e:57:d4:81:
02:81:b8:8e:51:25:3f:49:f2:31:bc:d9:4f:7e:fe:81:25:78:
0e:5d:33:f6:18:a5:33:30:e8:c2:40:95:83:1d:dd:04:48:8e:
6c:5e:09:1a:2a:0e:e7:33:6a:84:c6:40:de:a6:8c:69:cf:f5:
28:73:b7:38:de:94:ae:12:e4:2a:32:e2:e0:d6:3a:fb:f5:fe:
e8:28:ec:63:b3:03:09:32:31:41:e6:b3:9b:11:83:b1:18:cc:
d8:9c:8c:94:fa:cd:35:60:19:d7:27:ab:45:e9:d1:f2:9e:28:
62:5c:04:05:44:67:7e:85:c0:a0:fd:d3:8f:f0:a8:d1:28:6a:
de:7e:53:38:91:2d:79:79:ae:e4:74:8f:0d:a7:7f:5b:2e:3f:
82:e5:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:32 2025 by rpki-client