Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098059B0D98311EF9C97DD6B762E951A.roa
File: 098059B0D98311EF9C97DD6B762E951A.roa (raw, json)
Hash identifier: +hu1/4TVmkZcz6lS0i9WzEiMs5r+P4h59xksmpptKHA=
Subject key identifier: D4:42:2E:A2:FB:C0:84:94:6E:47:5B:CE:80:72:A9:F7:96:AC:8E:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098059B0D98311EF9C97DD6B762E951A.roa
Signing time: Thu 23 Jan 2025 12:10:29 +0000
ROA not before: Thu 23 Jan 2025 12:10:26 +0000
ROA not after: Fri 28 Feb 2025 12:10:26 +0000
asID: 62240
IP address blocks: 154.195.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82422 (0x141f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:10:26 2025 GMT
Not After : Feb 28 12:10:26 2025 GMT
Subject: CN=679231b5-e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:4d:29:e8:74:02:19:38:3a:bf:24:53:c2:
a2:8a:4d:64:63:f3:98:a3:d8:85:34:c5:64:48:cb:
43:54:f9:c4:51:ed:15:b5:f6:a7:63:9b:e9:6d:af:
c1:ff:4a:c0:de:48:43:d5:a3:f2:5b:b2:1d:38:e7:
47:4b:0e:63:8a:40:57:17:78:fb:fa:f9:a7:83:3a:
f0:aa:7a:db:59:30:cc:f6:4c:75:03:e7:33:2d:b0:
7b:87:79:d5:eb:94:d4:65:f0:e7:0d:99:90:d6:c0:
c7:70:eb:69:0b:f5:4e:a7:b0:a3:a9:41:64:97:b5:
68:de:45:f7:d7:0e:7a:98:ff:69:16:a0:1f:a2:53:
84:04:a8:71:2f:aa:6d:1a:27:1e:ab:6f:ea:ea:9d:
68:2c:18:e4:e0:57:81:bd:fc:90:8d:25:42:0e:85:
4e:75:06:6d:01:68:3a:ca:5a:22:e8:80:21:15:41:
40:9d:88:ba:90:4f:c5:4d:d0:7b:42:5f:30:fd:e0:
71:1f:af:82:37:70:33:61:91:1f:e9:f1:70:43:e6:
c7:bb:a5:c7:ed:77:27:5d:8f:f4:9d:fc:a2:86:4e:
ce:27:c1:a9:ce:49:7a:8b:49:23:5d:ef:a4:5d:27:
b6:e3:d7:39:40:47:58:80:22:11:27:37:97:e0:c5:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:2E:A2:FB:C0:84:94:6E:47:5B:CE:80:72:A9:F7:96:AC:8E:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/098059B0D98311EF9C97DD6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6a:eb:7a:b8:d2:0e:1a:1e:18:45:31:ff:2f:25:a8:9b:d7:
41:e2:3e:d6:43:d0:83:44:0b:73:4b:20:f8:f2:79:9c:ba:99:
11:bf:ed:5f:31:06:84:44:46:6a:30:32:a9:31:c3:23:24:c4:
26:0a:70:2c:a4:b8:3f:b2:52:46:8e:6c:1d:16:b6:c1:51:40:
18:2b:49:fb:99:33:f3:b7:91:19:57:4f:c2:3e:4d:ae:4e:cb:
d4:7b:1c:80:c2:1f:61:8b:c3:e9:46:9e:3b:5a:e5:64:79:fc:
6b:c9:b2:e4:d6:a5:c4:da:6f:cf:8a:b5:90:29:8a:18:73:06:
50:35:30:6f:e6:18:9f:fd:97:b3:a7:08:3d:99:95:a1:8d:c5:
4e:d4:9d:41:45:ca:27:d1:09:5a:af:77:65:06:ed:9a:85:51:
22:8e:1c:dc:a6:3a:82:50:60:29:2f:e5:8b:d7:9d:07:3f:ff:
fd:c9:6b:57:97:71:21:51:b9:04:76:75:34:06:69:c5:4a:b3:
77:da:c6:68:a0:f9:2a:a1:7a:5e:7f:1a:2a:1c:05:fd:a3:f7:
ed:e1:19:30:89:b3:5a:36:48:6c:8a:df:09:55:40:9a:66:9f:
03:fc:ca:f3:12:52:83:69:23:fe:2b:65:f0:d4:9e:28:7b:68:
f0:07:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:51 2025 by rpki-client