Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D58AA4E23A11EF87B737B5762E951A.roa
File: D3D58AA4E23A11EF87B737B5762E951A.roa (raw, json)
Hash identifier: 5/mOF91K0nuhQWtoloVEbHfLjF824D6OtJ0CpO3zf98=
Subject key identifier: 2F:2D:8C:36:FE:4C:C8:3E:39:DC:35:E2:C7:10:77:B9:DD:A9:41:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015006
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D58AA4E23A11EF87B737B5762E951A.roa
Signing time: Mon 03 Feb 2025 14:26:16 +0000
ROA not before: Mon 03 Feb 2025 14:26:12 +0000
ROA not after: Wed 30 Apr 2025 14:26:12 +0000
asID: 18229
IP address blocks: 154.210.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86022 (0x15006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:26:12 2025 GMT
Not After : Apr 30 14:26:12 2025 GMT
Subject: CN=67a0d208-e3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:bb:f3:17:9b:d5:e7:25:a6:32:96:ba:30:
77:1f:2f:f0:4c:7b:36:54:ca:64:62:dc:4b:c4:02:
cd:00:6c:d9:e0:fb:7b:14:d0:e2:4b:d3:35:b8:2b:
55:64:0a:3a:c4:5a:1b:25:a3:b6:27:e9:cf:72:c5:
0a:79:0d:ac:8e:9a:8c:3a:17:76:e6:2f:a1:b9:87:
72:42:6b:bb:97:ef:65:35:46:95:91:ac:e2:ba:da:
0c:e4:87:27:c0:26:6a:dd:50:8f:19:b4:6b:8f:01:
88:3d:23:5f:dd:2f:20:52:e1:6f:ee:8b:c9:3b:d3:
af:f2:9f:c6:8d:8c:84:3b:b2:0f:29:ae:35:f0:39:
99:f8:0c:78:e2:9e:0c:c2:22:f3:4a:fc:b9:32:5d:
13:2e:b3:17:91:fc:ff:35:86:8a:61:f0:85:66:38:
dc:7d:ba:44:3f:45:b2:b2:b3:9e:02:8f:81:fa:8f:
35:55:38:93:76:27:03:f8:cd:8c:8d:77:5b:86:47:
27:a2:a1:cf:48:24:11:d7:dc:e7:08:3e:f2:75:52:
cd:18:0d:5b:9d:63:8b:18:1f:bc:49:83:8f:94:ce:
47:a4:d8:22:88:26:7e:49:9c:2f:e8:71:09:ac:7b:
c8:84:6f:7e:29:03:2d:71:75:c6:e3:a0:e5:83:5f:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:8C:36:FE:4C:C8:3E:39:DC:35:E2:C7:10:77:B9:DD:A9:41:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D58AA4E23A11EF87B737B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.150.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:2d:be:df:ee:e2:c5:76:3c:43:49:64:38:09:58:0a:3a:9c:
22:6d:b8:6c:aa:56:26:5d:9f:ac:3e:3d:e0:49:b0:49:c8:cf:
33:15:ff:6d:c4:36:fe:7b:dc:33:30:d2:5e:c4:02:05:2b:b7:
97:c6:13:f6:bb:1a:dc:91:f9:e4:ed:eb:7d:31:02:d4:10:18:
65:c7:7e:a4:f6:b8:d7:d5:73:d3:9b:d6:05:52:df:c9:10:cb:
ff:b6:b4:d9:56:d2:96:4c:3e:cc:47:fd:cf:d5:86:b7:62:42:
0d:f8:de:c2:79:69:79:df:5c:aa:12:cb:76:a8:d8:de:91:d6:
a5:24:f5:3d:fd:4e:ec:4a:81:5e:47:d8:e9:bc:8b:21:4f:1a:
b9:52:ac:e3:e3:5c:a9:8c:8a:1a:1f:51:12:58:36:a5:32:89:
4f:ce:01:46:22:ef:0a:2a:69:f4:46:ec:cd:d4:05:f0:c4:ee:
a0:9a:96:e1:8b:21:69:da:48:34:77:41:7b:e5:77:e1:31:3a:
60:ed:1b:00:e4:6f:d7:56:2b:44:b1:8d:88:1a:5f:48:06:50:
24:2b:54:ff:ab:6a:1b:73:6a:bc:61:75:b0:75:91:8d:52:e1:
7c:7a:eb:48:42:0f:df:52:46:a3:12:23:9c:d1:6e:71:87:5a:
7e:b2:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:06 2025 by rpki-client