Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/097F7F12CCD711EFBF9494A6762E951A.roa
File: 097F7F12CCD711EFBF9494A6762E951A.roa (raw, json)
Hash identifier: Zu0tTeAwEMCiwWozp3xxYENo0mI5BJsxuIb1Fg7XOYE=
Subject key identifier: 36:2C:69:37:3C:7F:DC:B6:B3:D7:7C:82:AD:F6:78:51:63:BD:05:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01367D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/097F7F12CCD711EFBF9494A6762E951A.roa
Signing time: Tue 07 Jan 2025 09:09:02 +0000
ROA not before: Tue 07 Jan 2025 09:08:58 +0000
ROA not after: Tue 11 Feb 2025 09:08:58 +0000
asID: 395793
IP address blocks: 154.202.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79485 (0x1367d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 09:08:58 2025 GMT
Not After : Feb 11 09:08:58 2025 GMT
Subject: CN=677cef2e-efe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:74:f2:98:4f:33:00:cb:1f:d8:3b:07:ce:
8d:03:5c:4e:4b:2c:28:62:77:73:c2:a8:49:cb:93:
f5:ed:7d:02:ad:cd:3f:20:b5:db:db:7a:90:90:2b:
e9:30:c0:28:43:d6:a0:ca:c4:53:e3:fa:72:12:b1:
20:a0:b4:3e:06:4a:26:2a:de:a9:e8:00:59:58:5b:
ce:f2:69:e9:4a:3a:f2:1f:9d:ae:fb:39:1d:98:3d:
dc:e8:a0:ef:a7:fd:12:7f:03:66:b6:75:08:b8:00:
3b:a0:3d:16:08:84:6f:c9:e6:9f:29:1e:28:f0:b2:
94:df:d3:fa:1f:9a:0a:89:c0:80:1c:16:33:64:79:
f5:94:57:69:83:62:6f:d7:52:fd:56:d5:b8:47:1e:
35:39:f5:a0:e2:65:c7:42:1d:51:67:dc:11:0f:7e:
bd:7c:c4:0b:b9:9f:38:96:11:7c:61:41:2a:6e:af:
8b:63:de:ca:7c:6d:af:9c:6d:e9:1d:76:fc:5e:8b:
55:80:4a:c2:db:85:1b:a7:09:94:95:09:1e:f0:29:
48:7a:08:7b:08:0b:2f:da:70:7a:0e:69:52:ba:67:
a0:8a:c4:3b:be:68:18:48:47:18:90:ef:cc:1b:9a:
92:50:ba:50:ec:3f:df:1c:69:f7:84:4d:44:4d:53:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:69:37:3C:7F:DC:B6:B3:D7:7C:82:AD:F6:78:51:63:BD:05:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/097F7F12CCD711EFBF9494A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.112.0/22
Signature Algorithm: sha256WithRSAEncryption
84:2a:66:c4:13:0b:92:f7:61:75:79:a2:3c:75:eb:09:e6:0b:
67:e5:de:11:3c:33:05:21:49:a4:16:95:40:6c:e1:71:09:9b:
39:54:eb:16:71:74:8b:ff:6b:fe:07:2e:f8:b9:e7:df:32:20:
32:47:89:ea:00:53:48:a6:3d:d7:55:25:b0:4c:eb:31:90:dd:
f4:bf:b4:72:3d:ed:ff:b7:c2:d3:ea:f3:1c:f8:3c:99:bc:7b:
bc:28:21:85:5d:24:5a:40:23:fb:08:6b:10:c5:47:b9:2e:5a:
c7:13:74:50:12:06:3b:4e:58:e9:8c:e6:8e:17:03:6f:0a:b5:
7f:de:88:f6:4e:ae:1b:39:2b:c5:67:6b:97:e0:68:d5:84:97:
38:6c:ab:c6:4d:09:d9:68:e3:4e:12:a6:4d:20:2a:14:ad:75:
08:28:9f:f5:9e:1e:61:ea:16:c2:0d:e1:ad:0c:20:c8:32:e4:
fe:14:51:39:45:35:79:06:14:43:eb:dd:3e:ca:61:e1:68:a2:
70:83:0d:ef:5c:5c:19:d1:b3:ef:fa:fe:16:97:e0:c4:42:b7:
af:2b:33:23:ff:84:54:06:cd:ed:06:87:d8:14:b9:8e:9e:0b:
f0:b0:28:ca:dd:b1:f4:48:65:e3:44:6b:9e:4e:85:99:7f:e9:
99:60:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:00 2025 by rpki-client