Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A96D586D30C11EFBBD7FC95762E951A.roa
File: 0A96D586D30C11EFBBD7FC95762E951A.roa (raw, json)
Hash identifier: eGXOM3EmHeXoyQoHhgeJsTsn4dG/u/Sv2YJhJ+WtJeQ=
Subject key identifier: E5:F8:C9:27:D3:6D:D2:37:B0:9B:AD:74:D5:64:34:B6:1E:B6:F9:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A96D586D30C11EFBBD7FC95762E951A.roa
Signing time: Wed 15 Jan 2025 06:43:34 +0000
ROA not before: Wed 15 Jan 2025 06:43:30 +0000
ROA not after: Sun 16 Feb 2025 06:43:30 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80813 (0x13bad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 06:43:30 2025 GMT
Not After : Feb 16 06:43:30 2025 GMT
Subject: CN=67875916-4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:73:f1:3e:36:64:71:b3:93:64:a9:20:35:
2a:0a:55:7d:52:77:40:b4:73:e9:b7:85:a1:38:f0:
69:5c:25:d0:a8:ae:0e:ce:19:66:26:d7:7b:d8:b9:
37:d9:fd:0f:31:0a:bc:a7:6c:18:5d:94:0e:34:8d:
ec:11:64:95:e8:86:d7:fb:b5:8d:69:42:65:9c:d5:
33:ca:e1:e4:d4:dd:74:6e:66:48:5b:58:4c:fc:bc:
fa:e0:dc:44:44:21:29:55:0a:40:de:78:b1:b1:24:
c2:c9:9a:06:02:f1:9d:5f:9b:dc:da:ef:8f:d4:6f:
a0:9c:19:83:5c:b4:a6:53:63:4e:bd:33:db:68:a5:
a7:e8:87:cb:21:c0:b9:65:13:66:0d:d9:1e:9f:e1:
15:31:87:da:72:13:78:bc:78:3f:15:8d:6c:d1:d0:
cb:0f:49:3d:86:1c:b3:86:36:2c:84:c0:4f:1d:26:
cc:bc:12:79:3c:c9:8c:b3:41:18:2f:1b:37:3d:f4:
44:1f:13:93:bb:e2:c9:67:57:71:d0:32:15:b1:9c:
ae:63:7e:76:e6:33:f2:0e:61:57:62:c0:6d:bb:2f:
67:41:c6:c7:25:2f:00:1c:89:55:20:73:a7:69:8e:
45:d3:c0:b4:ca:73:7d:28:90:78:f8:1a:4a:8a:3f:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:C9:27:D3:6D:D2:37:B0:9B:AD:74:D5:64:34:B6:1E:B6:F9:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A96D586D30C11EFBBD7FC95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fc:65:f5:73:e4:5f:f6:8d:e5:9a:a9:76:c1:8f:f3:16:48:
67:5c:53:1a:ae:49:98:88:33:75:18:70:93:31:76:2f:c8:47:
ba:67:9b:60:6e:9c:c4:d5:5e:96:e5:26:92:58:f2:0a:44:6d:
82:a4:ec:61:8f:ad:c8:92:3d:d5:62:42:d2:69:80:5f:36:f9:
00:f9:08:e9:a1:89:9c:20:22:55:9d:65:5b:0e:2f:54:03:98:
07:86:a8:f8:41:b1:bb:09:ec:60:72:28:66:26:24:38:9e:db:
e0:26:04:6f:93:a1:19:b2:ae:f4:ed:0d:01:5c:48:b4:00:33:
66:ff:af:a1:9e:6c:7f:dd:2c:a3:a9:d0:46:d4:c9:da:8d:c2:
54:dd:ca:8c:5b:5e:f7:d0:38:ec:34:f3:bd:58:44:90:71:ac:
8a:6b:77:ab:b9:7c:cf:ef:32:73:ef:63:c8:fe:c9:ad:07:36:
06:45:df:4a:ff:44:b8:e5:d4:70:b5:e8:08:a5:5a:35:b7:10:
e0:8d:9c:ae:b2:44:12:a8:26:22:a9:76:1c:81:69:16:f6:c8:
b7:f5:09:7f:39:d3:7b:0b:4c:47:a5:20:9f:c6:2e:69:9c:ab:
a3:6f:8e:90:6f:03:bb:e4:fc:35:cb:73:5d:75:d4:d2:e4:ce:
47:c5:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:16:21 2025 by rpki-client