Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CC53CC29D11EF98104AAA762E951A.roa
File: 078CC53CC29D11EF98104AAA762E951A.roa (raw, json)
Hash identifier: lVkafye+qaLiVnWzcX1faKiu7y2LX8dIZWxXIpvlTvs=
Subject key identifier: 34:C8:D6:20:BB:DC:64:48:66:2B:3D:94:44:71:6F:30:BE:3B:7B:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012510
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CC53CC29D11EF98104AAA762E951A.roa
Signing time: Wed 25 Dec 2024 08:48:36 +0000
ROA not before: Wed 25 Dec 2024 08:48:33 +0000
ROA not after: Sun 09 Feb 2025 08:48:33 +0000
asID: 138915
IP address blocks: 154.223.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75024 (0x12510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:48:33 2024 GMT
Not After : Feb 9 08:48:33 2025 GMT
Subject: CN=676bc6e4-c898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:3f:24:7a:09:fa:eb:61:d6:72:ea:5a:2a:
af:b1:e3:e0:f9:7c:6c:8c:04:0e:b9:c1:5e:23:fd:
9d:a7:40:4c:91:9d:ca:db:7b:d8:3b:b4:37:a8:9f:
c8:aa:75:a1:c0:c4:16:a5:ab:47:ae:b8:7b:5a:12:
3c:54:14:a2:04:ab:4f:64:4f:ef:81:0d:48:e9:34:
a3:88:04:b0:2d:16:6b:ce:98:6e:29:eb:c6:d8:01:
02:a7:47:66:2d:3a:4a:e4:64:e9:a6:d2:e2:6e:b3:
71:ce:df:61:8e:fb:2f:e3:37:49:3d:72:28:79:53:
d9:74:2a:97:6c:2c:0b:e7:5d:b4:d0:a8:2c:38:8b:
71:e4:a8:66:00:7f:97:98:aa:f2:52:83:66:e3:e3:
e1:e6:7b:e5:46:5c:18:f9:8f:73:4e:e9:da:7f:fa:
69:43:2c:3f:ee:65:7e:af:7d:95:47:68:1e:6e:64:
32:d7:ee:f4:fe:79:3d:07:7c:3c:8b:0a:89:4f:2c:
0e:81:f8:f7:36:e0:71:2f:23:34:cc:2a:a1:41:af:
1f:10:67:45:7d:a8:e4:e6:a7:d7:37:ef:85:12:8f:
bf:8d:fb:fd:5f:f3:75:42:f0:b4:65:7e:59:c3:dc:
9c:92:27:c2:b6:a3:75:ee:18:9a:8d:0b:d0:c3:12:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:D6:20:BB:DC:64:48:66:2B:3D:94:44:71:6F:30:BE:3B:7B:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/078CC53CC29D11EF98104AAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.48.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:4a:bc:ba:b0:9f:a9:78:68:1b:0c:62:58:7e:22:c6:93:40:
87:c9:88:05:bd:ee:42:06:11:0b:8d:32:6d:66:fd:98:b8:95:
0c:85:2e:07:f8:60:f5:66:e5:6e:bd:58:b9:ac:91:42:66:a1:
c8:2f:55:cc:2a:8b:6c:6d:a2:32:ea:13:3d:61:d0:e6:39:3d:
5c:9c:37:a7:74:44:83:24:79:ab:97:47:25:5f:38:c0:38:93:
0e:fe:07:49:41:4c:f7:ce:69:3c:69:a8:4b:2d:76:1b:ec:0b:
d4:bd:a9:19:9b:15:97:d7:26:06:cf:31:f2:94:ff:e5:bf:ad:
c7:79:8f:f5:94:73:41:d2:cc:0c:92:73:a3:5f:9f:50:0c:dd:
76:e7:79:05:60:ca:c8:c6:d9:32:95:02:9c:39:fc:88:f1:90:
17:c7:28:17:c9:6b:ca:58:c9:f3:05:5b:5d:a8:75:f9:84:7a:
6b:52:f2:bc:74:25:fc:83:06:f5:53:d0:62:68:15:ed:e9:9e:
6f:22:17:5d:5c:6f:12:ef:ab:14:47:5a:b9:f7:71:33:1f:22:
9f:be:f1:02:97:6d:5f:af:52:49:88:7c:de:0b:ab:ab:4f:b8:
ab:30:a4:43:dc:55:f4:fa:42:dd:fb:a5:71:26:e3:62:90:2c:
c2:2a:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:35 2025 by rpki-client