Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0290E7F8D99411EFB4B2205D762E951A.roa
File: 0290E7F8D99411EFB4B2205D762E951A.roa (raw, json)
Hash identifier: isOdEDEsWv1idZzwSyXkN61yTNoFEQ2k1kzJZONY2Tk=
Subject key identifier: 56:AB:4B:D2:E8:B6:1D:F0:07:2A:92:F5:9F:54:DE:92:D0:33:AA:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01429E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0290E7F8D99411EFB4B2205D762E951A.roa
Signing time: Thu 23 Jan 2025 14:11:59 +0000
ROA not before: Thu 23 Jan 2025 14:11:55 +0000
ROA not after: Fri 28 Feb 2025 14:11:55 +0000
asID: 62240
IP address blocks: 154.196.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82590 (0x1429e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 14:11:55 2025 GMT
Not After : Feb 28 14:11:55 2025 GMT
Subject: CN=67924e2f-6f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:b5:da:30:a4:df:10:ce:f5:4c:72:c6:08:
18:25:b8:3f:56:a4:5e:24:f3:5f:40:4c:a4:a2:f4:
c5:57:c8:82:c8:21:63:ca:95:ea:30:b5:12:1d:25:
c2:90:bd:96:c0:7d:fb:a4:bc:8e:16:c3:68:65:9f:
a7:b6:18:0f:4c:80:05:33:27:d7:cd:2c:61:ea:23:
70:89:ce:78:68:4b:59:5a:fe:cd:f1:1b:7e:5f:31:
11:c3:77:94:af:b4:45:e0:ff:da:6c:14:64:c8:59:
38:ce:c1:36:24:ac:d6:a9:c5:27:f4:b3:91:27:f9:
53:d7:9f:b8:c9:dd:ef:38:35:d0:36:e8:1d:e5:d6:
17:a4:a2:42:a8:26:a1:f5:ea:c7:16:d2:80:d6:0b:
08:2a:14:f7:e6:a0:50:63:e6:bd:df:3c:c3:18:6b:
58:dd:2c:19:a9:64:9b:30:2e:d6:b9:2b:f0:b5:af:
6d:db:91:d3:21:c3:57:19:b3:5a:34:32:2e:ab:98:
17:33:1a:0e:91:4c:27:be:d1:4f:57:90:cf:89:51:
0d:e1:eb:19:98:9a:07:97:5c:c1:f5:20:20:86:62:
f1:68:b7:8b:e5:1c:67:bc:fe:05:c6:87:b3:ab:be:
d4:18:af:3b:fe:1a:03:e9:c8:34:57:4f:28:98:2d:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:4B:D2:E8:B6:1D:F0:07:2A:92:F5:9F:54:DE:92:D0:33:AA:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0290E7F8D99411EFB4B2205D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:bb:0c:db:33:95:e2:ab:e9:17:52:4f:d2:9f:bc:bd:78:11:
8b:c9:8a:f3:c9:35:bb:e9:6b:8f:7d:47:14:7b:22:9b:be:eb:
9b:7c:6e:f0:13:be:a1:d7:9a:55:a5:70:75:3d:33:9c:4b:7e:
fb:d5:11:d5:13:e6:d4:ee:84:a1:bd:39:fc:ce:93:fc:38:15:
ad:d3:8f:50:cc:25:a9:70:a6:5f:4f:6b:8d:48:95:55:fe:24:
be:c5:8c:03:d8:9d:e7:f7:a8:a6:1d:ea:fb:86:06:34:99:f8:
eb:d9:50:56:ac:10:e0:f9:a3:c3:86:c4:8a:45:33:b5:01:a7:
1c:7d:1d:54:4e:0c:0b:ee:10:46:96:b7:4e:f1:8c:5a:97:bf:
9b:d2:c1:fe:71:3b:00:25:1c:9e:dc:bb:85:9a:c5:c3:78:ba:
07:32:51:84:05:00:f2:e1:be:b0:20:13:df:db:5c:47:3d:9e:
f6:99:ba:19:18:7d:f2:37:8b:82:61:69:d9:9a:d4:8e:29:c7:
97:78:81:62:28:e7:fd:fb:1c:a8:5c:80:0d:5a:0a:1b:9a:b5:
b3:79:2d:d0:83:da:4c:2a:45:c1:17:67:de:17:fd:27:5c:6c:
09:46:20:24:69:82:17:e2:c5:b9:20:e6:f7:a2:e3:1c:7a:70:
5c:5f:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:31 2025 by rpki-client