Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10A7B9DCDBD011EFAF3E7477762E951A.roa
File: 10A7B9DCDBD011EFAF3E7477762E951A.roa (raw, json)
Hash identifier: m5xEilOpHso3qaxpafaDIBJLCLMXTG6XkE7Z93X3sbM=
Subject key identifier: 03:B8:73:AF:8C:F2:E1:47:C4:A7:5E:2B:35:3A:8F:20:14:19:93:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10A7B9DCDBD011EFAF3E7477762E951A.roa
Signing time: Sun 26 Jan 2025 10:26:55 +0000
ROA not before: Sun 26 Jan 2025 10:26:51 +0000
ROA not after: Sat 22 Feb 2025 10:26:51 +0000
asID: 202736
IP address blocks: 154.88.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84589 (0x14a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 10:26:51 2025 GMT
Not After : Feb 22 10:26:51 2025 GMT
Subject: CN=67960def-5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:02:61:dd:01:ce:f5:35:f3:8f:89:b1:07:
31:18:b8:76:2b:e8:a4:90:05:19:fc:b8:84:0f:cc:
2c:6d:a7:19:1e:90:a3:57:91:01:6e:12:ce:af:e5:
77:11:ad:93:a6:51:bf:5a:08:62:af:97:a3:08:18:
b8:95:36:57:2a:4c:12:94:5e:5f:e3:72:41:bf:be:
50:c6:b7:33:a8:1d:1c:20:72:1a:38:46:86:47:64:
36:26:8d:85:42:03:a4:9d:3e:6f:b6:5a:85:84:a1:
8b:39:d3:9e:85:82:1e:9f:36:db:fd:da:67:55:f4:
ab:3a:c0:1a:ec:e0:eb:d9:1a:6c:e0:be:fa:3d:a8:
8e:eb:27:4a:66:4e:4a:36:a9:de:47:33:f4:70:48:
2f:af:a7:20:4d:d0:fe:8b:99:c2:ce:a6:94:bf:e8:
3b:0e:b6:dc:25:5f:1f:85:3c:93:16:56:46:b2:33:
92:91:e7:65:7c:6a:bd:2c:f2:ad:42:f8:20:7f:d3:
b6:fc:fb:72:e9:80:3a:8f:a5:a2:80:c5:86:d6:f6:
e2:12:7d:f3:01:b4:25:61:41:56:ef:dc:98:8e:33:
17:fe:34:94:24:9f:d7:26:d7:42:8b:4f:20:47:2d:
5f:0f:bb:cb:b6:ad:a0:75:2b:44:50:26:4b:73:3e:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:73:AF:8C:F2:E1:47:C4:A7:5E:2B:35:3A:8F:20:14:19:93:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10A7B9DCDBD011EFAF3E7477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.56.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f7:60:dc:0c:07:b7:58:71:9f:82:b9:16:f4:d6:7b:1e:4a:
85:f9:8c:5e:b1:21:8d:69:32:01:5e:58:32:a8:d1:d2:9b:be:
e4:88:c7:34:4a:e9:4d:6c:91:33:58:e3:79:ca:44:68:73:1c:
48:b6:78:7c:a4:12:49:ad:30:6d:80:88:08:8c:9e:c2:51:00:
f8:4c:70:62:bc:3b:c0:5c:0c:3d:37:34:53:36:f8:d5:c5:a8:
fa:70:d2:a9:59:f5:15:86:b5:70:5a:62:68:e5:73:bb:5a:dd:
ac:af:89:3f:f5:92:6f:8c:bb:27:4e:39:1f:d2:f2:3a:62:f0:
6c:75:d2:bd:e0:ef:5f:b6:f6:58:41:58:30:28:d4:80:4f:17:
a9:71:04:ab:7e:ef:2e:9e:b8:d0:cd:82:ca:ad:bc:16:92:a4:
7d:80:34:88:ca:37:0a:60:4e:be:20:b4:22:90:2d:16:25:75:
3c:9e:57:3d:9e:ea:e4:ec:1b:d6:1c:73:f2:de:6c:f9:db:84:
e3:f8:30:60:7b:6f:4f:d9:7b:58:50:38:9a:f4:97:a9:e3:c7:
0c:57:f4:6c:a7:2e:d1:27:ec:f1:24:56:cf:1f:0b:02:1d:ee:
1d:6d:fc:df:9e:71:8d:aa:5d:a0:75:fb:ed:2d:24:91:29:1b:
d9:73:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:43 2025 by rpki-client