Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02303BF6D96711EFA16F06AE762E951A.roa
File: 02303BF6D96711EFA16F06AE762E951A.roa (raw, json)
Hash identifier: L75JocJX2yN++qPy4CnTrqI+Q/81Aa5Cvwp29QW4k/w=
Subject key identifier: E8:CE:5C:21:BF:4A:F8:C3:6F:1D:4B:94:F3:C8:C3:19:62:62:D9:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02303BF6D96711EFA16F06AE762E951A.roa
Signing time: Thu 23 Jan 2025 08:49:51 +0000
ROA not before: Thu 23 Jan 2025 08:49:48 +0000
ROA not after: Fri 28 Feb 2025 08:49:48 +0000
asID: 62240
IP address blocks: 154.194.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82084 (0x140a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:49:48 2025 GMT
Not After : Feb 28 08:49:48 2025 GMT
Subject: CN=679202af-8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:0a:de:8c:75:41:cc:cb:23:bb:98:ca:3c:
c0:d8:94:4a:a9:3b:3e:46:46:da:de:0e:bc:a4:5e:
52:b1:8b:23:f5:ca:ab:ef:e6:5e:4f:dd:86:40:bf:
d8:8a:b4:95:80:40:fd:ac:81:17:d1:ef:22:b9:f2:
ed:01:a7:06:45:55:06:6b:04:c6:d3:ce:63:27:2a:
98:15:7f:9b:d0:29:ba:43:12:c1:e8:51:5c:81:86:
de:3f:06:eb:c7:bf:ea:ed:7b:a5:8b:c8:81:16:0d:
99:07:ac:ae:3d:15:1e:c2:c3:25:f0:6f:d2:83:c2:
7f:07:ac:4c:ff:38:5a:01:1c:b9:51:ca:67:ac:29:
bf:0b:a7:d3:ca:cd:f9:6e:e0:5a:55:f9:60:44:f5:
7b:9f:9c:a0:81:4b:a8:ce:95:1f:f0:2b:e5:de:90:
40:38:58:2a:77:78:50:2d:9e:72:04:1b:b0:ae:e8:
9a:fd:b8:a7:84:94:47:dd:1d:eb:55:07:1e:7e:4c:
20:83:2d:9d:e3:f8:11:00:45:6a:da:bb:50:ed:7b:
61:7e:6c:82:52:13:d1:5e:35:1a:e9:94:15:27:6d:
51:1a:3b:ab:b6:5b:09:1a:78:c9:5a:83:36:9f:7a:
49:68:f5:0e:8d:dd:75:55:3d:e0:40:31:0d:15:8c:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:5C:21:BF:4A:F8:C3:6F:1D:4B:94:F3:C8:C3:19:62:62:D9:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02303BF6D96711EFA16F06AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e1:f9:ca:d1:ee:7a:4d:fc:98:1b:2b:b4:7c:f3:fe:56:df:
b4:60:67:32:4a:5a:a3:43:ec:85:0a:81:11:22:3a:45:24:29:
ea:bc:b6:4c:57:b4:01:87:9b:99:00:f9:66:0e:bb:7f:51:e8:
83:da:9d:90:18:a9:e9:fa:38:8b:68:08:e5:f2:c8:a7:3f:1e:
60:07:29:73:51:10:56:f7:c2:1b:be:4a:55:40:7f:a6:f1:b9:
8d:fc:74:1e:63:2d:64:d0:df:d5:0e:47:41:f3:41:93:ca:cf:
71:70:07:45:42:58:4d:ae:39:a9:7b:72:88:6e:15:87:aa:18:
26:9e:59:7e:0c:e5:89:34:8d:3c:23:aa:fa:16:b3:74:ac:f8:
d4:b5:2e:e4:a8:9d:94:02:5e:10:79:4b:e1:ca:ab:85:cd:38:
b6:ab:60:34:d5:2c:1a:94:8a:f4:bc:86:e0:a3:b2:16:c1:9b:
a6:e2:b5:0e:9f:1a:d8:ec:1f:ea:5d:6b:e8:30:13:5a:44:2e:
a0:46:e7:2a:91:eb:25:a0:ee:b0:f4:87:d9:82:0c:83:25:24:
58:35:ea:59:a2:5f:4d:71:1f:4b:63:48:7f:4a:eb:95:e8:04:
ce:18:88:eb:7d:a5:7c:bc:bd:89:b7:21:1a:d6:ad:2d:01:e9:
9b:d5:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:13 2025 by rpki-client