Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F257C3F4F61A11EF8DAA5589762E951A.roa
File: F257C3F4F61A11EF8DAA5589762E951A.roa (raw, json)
Hash identifier: 6Nz2Kj7AKV3RP6VYyf0to3EhRQffNFf18hw6NLyxfXc=
Subject key identifier: 23:49:92:6C:EB:42:17:24:B0:10:CE:A8:F9:70:C2:73:0D:89:B8:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F257C3F4F61A11EF8DAA5589762E951A.roa
Signing time: Fri 28 Feb 2025 21:28:27 +0000
ROA not before: Fri 28 Feb 2025 21:28:23 +0000
ROA not after: Sun 13 Apr 2025 21:28:23 +0000
asID: 138915
IP address blocks: 154.206.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93251 (0x16c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:28:23 2025 GMT
Not After : Apr 13 21:28:23 2025 GMT
Subject: CN=67c22a7b-39c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:6d:20:b0:55:e6:20:9f:8f:cf:b2:95:d9:
c1:70:21:52:d7:66:b3:c5:f9:da:6c:e5:84:a5:68:
a0:6a:8a:63:3c:71:1d:91:b7:bb:ab:e0:c2:64:c3:
59:1a:00:b5:c7:3d:1d:27:45:2d:91:8d:9d:a6:f9:
8c:68:e6:11:1d:3f:41:07:fd:45:bd:81:76:7b:2d:
a2:15:1d:77:c2:80:d3:0a:95:43:58:a8:ee:ae:6e:
27:21:76:9a:ec:bd:3b:54:cc:ed:83:57:57:82:f2:
fb:fe:58:1b:93:38:54:fa:0e:64:f5:1d:16:36:bf:
b0:0a:f8:1f:56:19:70:9f:61:d6:77:c5:3e:82:55:
66:7f:8c:8e:50:90:9e:b5:b9:96:bd:4e:45:bd:d9:
f2:ce:4e:06:b6:ca:d5:cd:c2:58:82:a7:ee:df:0a:
c9:27:b2:4a:bc:cf:e7:c6:2a:a3:13:b4:a2:dc:c1:
32:b6:ff:55:f9:8f:d5:24:10:31:bb:00:8a:e7:fc:
2a:92:71:29:ad:0f:d6:db:33:0d:99:4b:5a:46:b5:
72:b4:c2:42:94:fe:0e:ac:ed:3c:65:72:0f:99:53:
c9:74:c2:64:a8:03:a8:a4:89:ad:85:04:ae:0a:8f:
27:be:92:a2:7c:2e:01:40:82:fa:ba:77:62:00:f9:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:92:6C:EB:42:17:24:B0:10:CE:A8:F9:70:C2:73:0D:89:B8:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F257C3F4F61A11EF8DAA5589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.60.0/23
Signature Algorithm: sha256WithRSAEncryption
31:5b:f0:b3:09:c4:05:bc:69:a7:13:e8:d2:7e:9a:42:16:83:
8b:61:0b:b5:65:3c:89:65:58:eb:af:e2:89:02:94:cb:a1:d9:
65:83:50:cc:86:c5:00:f0:37:7c:7d:dc:ad:b7:48:da:ef:1a:
a8:dc:ab:83:bd:0f:7a:c5:bf:aa:85:4a:36:d4:2f:95:51:4d:
34:ce:6d:aa:12:57:48:59:a4:f2:38:0c:44:e1:25:66:90:89:
05:74:1b:69:27:09:39:48:06:3b:c0:39:46:05:37:8a:c2:fa:
47:09:6b:d1:fc:53:27:06:cf:63:52:46:19:df:a3:e7:28:ce:
03:8d:6f:53:c0:99:a2:32:0c:50:23:95:d0:b0:27:86:d0:4f:
be:59:eb:a6:2c:d8:45:2f:ef:02:4b:dc:f1:11:1d:f0:47:ac:
75:f0:8d:f9:e8:92:24:56:aa:74:eb:35:a8:1b:9e:17:57:61:
86:51:b7:0b:d4:d4:97:b5:ae:bd:0e:8c:71:1c:00:0f:ca:2b:
cd:71:df:bd:07:36:4f:0c:c3:8e:1f:42:24:dc:25:0e:32:ff:
2c:3a:4d:09:96:43:a1:56:45:a9:b1:58:22:85:a2:a5:a4:a6:
f7:85:54:cb:ec:2b:84:f4:21:69:d0:d3:d1:ec:d1:3d:ff:34:
be:1f:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:55 2025 by rpki-client