Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEB4F94E24411EFB2A4597A762E951A.roa
File: DBEB4F94E24411EFB2A4597A762E951A.roa (raw, json)
Hash identifier: MryRxdwtTuJ9vQ1uEj4M17acies93bCv2eFy2BwvXTM=
Subject key identifier: 04:54:12:97:1F:63:13:6D:56:D4:59:B2:76:D1:BF:02:E9:AA:D0:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEB4F94E24411EFB2A4597A762E951A.roa
Signing time: Mon 03 Feb 2025 15:38:05 +0000
ROA not before: Mon 03 Feb 2025 15:38:01 +0000
ROA not after: Wed 30 Apr 2025 15:38:01 +0000
asID: 150008
IP address blocks: 154.206.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86085 (0x15045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:38:01 2025 GMT
Not After : Apr 30 15:38:01 2025 GMT
Subject: CN=67a0e2dd-8990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:c1:6c:6e:1f:39:35:89:e4:27:da:34:68:
19:0a:9c:75:60:32:fb:de:50:64:9b:a7:df:8d:aa:
53:33:64:18:ce:2b:fb:42:41:39:00:52:8d:ab:9d:
6f:ce:0c:bb:aa:63:84:d4:53:2a:a0:68:3d:d5:da:
6e:fa:c4:d0:83:1e:ad:3c:80:5f:77:c2:50:5f:a6:
01:94:8b:7b:f4:20:0e:88:8c:2b:57:bf:e9:a2:fc:
bc:1a:77:ad:60:0c:37:63:e7:c8:e7:e7:1d:4d:7e:
a0:90:de:dd:79:15:e1:53:ed:31:2f:de:67:fa:d9:
eb:8d:8a:c0:2b:7f:ad:42:26:1d:18:e3:85:09:0f:
3f:24:8c:57:06:b3:d8:d0:56:df:e8:0c:73:1a:1d:
9f:7c:34:b4:ea:a6:7e:65:23:99:a9:4a:ba:ac:a4:
f9:73:db:77:6d:ec:f0:c7:5e:99:75:e8:03:8e:08:
91:c6:53:ff:16:d2:5e:b7:43:74:29:9e:d4:21:bc:
13:90:52:7a:16:aa:08:88:2c:98:86:56:0e:67:96:
d6:f7:12:e2:63:1a:98:8a:b1:0b:30:b5:64:b7:d3:
02:27:bf:fb:eb:77:95:dc:41:e7:38:2c:5e:f1:0c:
83:ac:bb:74:f4:13:b1:77:9b:2b:4a:df:22:ea:b7:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:12:97:1F:63:13:6D:56:D4:59:B2:76:D1:BF:02:E9:AA:D0:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEB4F94E24411EFB2A4597A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:86:37:45:9f:e8:c2:28:3f:f8:eb:d3:1c:0f:6e:5e:e2:ec:
5b:2d:f5:ba:3f:c6:bf:e8:71:b8:65:57:f0:17:da:5c:96:82:
7f:fd:fe:3e:1b:30:31:52:13:96:d0:ed:c3:fd:63:9f:60:67:
e4:b7:67:24:6f:ca:7c:a3:7b:0d:59:36:94:72:6c:b4:bc:0a:
78:60:9c:6c:bc:dd:84:fc:05:83:ca:70:9b:79:2e:7a:8f:3b:
c8:80:20:6e:3d:0a:4e:f7:58:78:6f:7b:02:43:80:c5:8d:a5:
e7:15:63:53:6d:86:c7:20:2c:e3:99:12:a8:8c:91:12:04:21:
e0:46:9f:29:2d:fd:98:6e:4c:96:b6:3e:6a:73:9a:3a:6e:96:
07:bf:c0:59:0c:bd:96:b7:ba:4b:14:1c:e7:70:7c:a4:33:40:
7d:54:df:0e:31:ee:b7:d6:4a:49:a7:d6:3c:5e:f8:02:ab:03:
66:2e:45:29:c4:e8:df:ff:a1:fe:8c:bf:58:6d:25:71:94:29:
90:45:09:7c:75:a2:9e:eb:a6:c4:a0:98:96:7c:3d:e0:1b:9b:
f1:20:0c:1c:08:a7:9b:d4:84:bb:10:36:7b:b0:f4:94:62:82:
f3:3a:aa:55:ab:c9:7f:85:7d:12:7b:f1:04:e8:a8:e5:26:5f:
dc:a9:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:56 2025 by rpki-client