Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EFB2A86DB1E11EF95545748762E951A.roa
File: 0EFB2A86DB1E11EF95545748762E951A.roa (raw, json)
Hash identifier: OIeSg0LbZW+Siy54HWA8j3IUMpd2SSumzQHbA7N5cH8=
Subject key identifier: 54:65:F3:74:0A:86:84:B0:B7:7F:28:68:E0:C6:C5:38:06:D9:31:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01496C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EFB2A86DB1E11EF95545748762E951A.roa
Signing time: Sat 25 Jan 2025 13:12:42 +0000
ROA not before: Sat 25 Jan 2025 13:12:38 +0000
ROA not after: Mon 03 Mar 2025 13:12:38 +0000
asID: 44559
IP address blocks: 154.209.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84332 (0x1496c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:12:38 2025 GMT
Not After : Mar 3 13:12:38 2025 GMT
Subject: CN=6794e34a-db0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:12:0e:12:78:c3:37:9a:f1:52:0f:1e:41:
2c:a4:c3:01:1d:74:de:ac:ca:e4:d2:d7:6c:4e:d4:
be:f5:9c:a4:ee:eb:18:0f:fa:66:28:57:18:b6:e3:
f7:22:fc:bc:24:88:cd:03:bd:ef:25:df:00:cb:97:
92:9f:fa:dc:b3:35:cc:d6:38:7a:5b:1e:13:44:7c:
24:88:6f:72:a4:6e:95:d4:52:c3:88:4f:f6:de:56:
ad:84:b7:b8:3c:91:80:61:95:54:ee:c3:74:70:19:
06:3d:d2:a0:b2:6f:fe:38:c8:87:d5:01:8d:f1:9d:
06:51:fc:d1:4c:01:72:f9:ff:f6:12:b2:fd:b6:dc:
3a:b3:49:9e:99:61:76:e0:11:87:1d:da:fe:bc:e0:
58:12:40:c4:c6:34:f8:63:9a:b0:75:62:66:d1:99:
af:ba:05:5e:cb:f3:8b:ee:f0:2d:a4:ac:b7:39:a8:
3e:b6:78:40:4b:96:83:85:5e:b2:80:49:92:5e:05:
12:00:bb:47:7e:c3:46:28:43:20:40:d4:ed:f5:02:
66:24:68:e2:7c:4f:99:70:4e:ed:6c:a8:ee:95:2b:
08:5b:23:fc:27:84:45:e7:6b:15:6c:b3:4f:d4:45:
af:ed:02:32:2b:b0:87:32:ac:8a:36:14:56:f3:43:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:F3:74:0A:86:84:B0:B7:7F:28:68:E0:C6:C5:38:06:D9:31:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EFB2A86DB1E11EF95545748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
51:53:ee:34:0a:08:3d:cf:0c:15:d8:a6:50:cd:93:45:7d:2e:
c7:8f:a5:9d:a9:8f:f1:56:28:58:73:e7:60:92:be:a3:00:e9:
26:54:b3:9c:7c:32:c9:07:99:e2:7f:b2:5f:20:0b:21:8d:c4:
ad:08:47:5b:d9:22:c8:d4:22:ce:56:c1:dc:cf:f3:77:81:50:
e3:cc:c2:2f:94:5f:74:87:56:be:fc:c0:db:c6:2a:d4:71:5d:
25:f4:52:cd:f7:b5:ad:af:95:d2:74:3d:18:f4:87:ab:77:16:
d1:b0:2c:5f:30:36:55:d1:37:0d:03:82:b2:ac:15:5d:71:c6:
9a:6a:a9:2a:3f:8f:ec:f5:9c:af:c7:fc:3f:bc:67:39:c9:73:
f1:36:6c:55:30:02:99:39:ba:dc:16:10:f6:8b:f5:8b:c6:61:
a8:f6:42:64:e7:37:a4:9f:f8:9b:36:ba:ef:b9:64:cb:a1:0a:
4b:4d:8d:0b:f7:f0:b7:5e:65:b6:b1:e8:83:69:fc:39:97:b7:
52:21:23:42:20:e0:78:ee:e6:9b:e9:b6:60:86:2a:3d:eb:1e:
83:06:56:a0:cc:a6:6e:8b:37:c1:93:8a:03:03:6a:a7:7b:41:
e1:9f:ab:ac:2e:74:f2:e4:0b:e3:94:5c:5c:d1:a0:23:b6:82:
95:80:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:44 2025 by rpki-client