Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FBFC2DAD9CD11EF9B079D53762E951A.roa
File: 0FBFC2DAD9CD11EF9B079D53762E951A.roa (raw, json)
Hash identifier: /tlhvdGd31D1LYMU1pt8l62ocKsoJTrXqOXmU32Dyow=
Subject key identifier: 66:D6:41:5F:98:6D:91:50:50:FA:BD:E4:A7:C1:44:10:85:54:0C:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FBFC2DAD9CD11EF9B079D53762E951A.roa
Signing time: Thu 23 Jan 2025 21:00:23 +0000
ROA not before: Fri 24 Jan 2025 21:00:19 +0000
ROA not after: Fri 28 Feb 2025 21:00:19 +0000
asID: 62240
IP address blocks: 154.196.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82674 (0x142f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:00:19 2025 GMT
Not After : Feb 28 21:00:19 2025 GMT
Subject: CN=6792ade7-50f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:e5:59:64:ff:26:56:f4:ef:ee:de:01:43:
a7:0f:ab:89:93:ac:ea:0d:2d:89:78:bb:23:1b:93:
c3:16:2b:5e:3b:99:d4:20:65:a8:ae:38:f6:14:72:
c9:0f:9a:04:fc:36:21:2a:54:53:ca:99:7e:ae:96:
35:df:63:6c:e3:23:3c:fc:8b:7c:52:46:f5:b5:2f:
a1:ab:27:6c:01:67:1e:47:32:57:9f:f2:35:ec:bd:
e4:15:86:3f:72:5d:c7:9f:2a:26:be:48:12:0f:30:
31:7b:93:fe:f4:d3:f9:fa:e7:b9:e0:73:85:92:9f:
ff:a9:a7:49:b9:04:19:36:e7:48:74:a1:85:3c:81:
a8:1c:8d:f7:85:92:ba:68:b5:bd:4c:1f:c5:5a:6e:
9e:e9:e2:b8:a6:49:ce:e4:1d:40:03:24:f2:87:b5:
55:88:0b:a8:7a:50:e9:64:e1:56:d3:50:a4:b9:f8:
e8:88:8b:c7:f6:d1:03:91:64:1c:6f:72:b8:a5:75:
7b:c9:24:37:d5:14:81:69:65:c1:f6:4b:83:64:14:
4e:3d:cb:ec:96:ca:74:46:9c:de:fd:30:9f:d5:46:
dd:44:25:72:9b:24:02:68:6b:33:fd:9b:e0:c2:52:
20:f2:17:e7:19:2e:36:c3:e5:93:dc:14:8f:55:56:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:41:5F:98:6D:91:50:50:FA:BD:E4:A7:C1:44:10:85:54:0C:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FBFC2DAD9CD11EF9B079D53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:ad:11:a3:67:c9:58:f2:23:5c:82:d7:5a:f0:da:ee:29:7f:
1a:33:b6:82:0f:34:3a:60:31:60:08:bd:c1:0a:90:9e:23:6a:
2c:02:cf:61:50:cf:5e:60:04:c1:44:1a:2e:e6:30:21:26:10:
e4:6d:40:ae:cf:46:9d:36:4b:6b:22:ff:a0:d6:8a:e2:7a:a1:
85:9f:fc:5e:69:33:bd:fb:80:f1:5a:8c:ac:ad:f6:a0:0b:e0:
ed:53:53:e4:37:54:b9:24:80:76:13:89:ae:65:21:37:9c:11:
61:d7:ea:97:45:c0:28:a0:43:82:83:09:9f:90:b8:49:94:ed:
19:75:92:8b:8c:1e:c4:fb:1d:5c:66:01:36:8e:f6:43:a2:c8:
8a:59:2b:19:95:9e:eb:4f:1a:47:7f:94:5a:69:bb:35:6c:42:
d9:35:2c:9f:a3:d9:45:9b:83:5b:19:b1:ef:4d:34:e7:46:10:
35:08:80:5d:a3:99:f2:43:2d:92:cf:e7:7d:51:9a:6f:e4:60:
18:cf:a9:e8:89:35:a5:03:39:39:61:6e:0d:46:c5:b8:76:cc:
b5:9c:90:5d:2c:62:bc:48:1b:06:05:0a:15:48:f5:bc:d8:a8:
1a:44:01:87:1c:9b:0f:d0:54:99:de:07:0f:75:c1:53:af:46:
3e:11:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:07 2025 by rpki-client