Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115AEDD6D97811EF9BB05EA1762E951A.roa
File: 115AEDD6D97811EF9BB05EA1762E951A.roa (raw, json)
Hash identifier: jQYqh0EW4jQY/Ru7g7TJrUUsVGyWcRe8OJFUfhH93J8=
Subject key identifier: B3:66:20:CD:89:E0:C9:BC:FD:9F:37:BE:E8:77:E2:32:C4:A1:19:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014156
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115AEDD6D97811EF9BB05EA1762E951A.roa
Signing time: Thu 23 Jan 2025 10:51:58 +0000
ROA not before: Thu 23 Jan 2025 10:51:55 +0000
ROA not after: Fri 28 Feb 2025 10:51:55 +0000
asID: 62240
IP address blocks: 154.195.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82262 (0x14156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:51:55 2025 GMT
Not After : Feb 28 10:51:55 2025 GMT
Subject: CN=67921f4e-32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:18:0c:16:93:99:6f:10:56:89:43:74:49:
4b:9e:17:78:63:ca:9d:6b:bb:84:72:32:6c:ba:8d:
9b:4a:71:c8:dd:3e:ab:15:97:9d:ad:0f:07:d2:b3:
b8:05:57:c9:d0:03:20:0d:e6:67:7b:c3:e4:19:ca:
b6:a3:73:7f:31:3a:10:89:02:76:1e:34:77:24:68:
3e:85:85:1a:61:81:0c:32:2f:fb:94:a5:8f:b4:4f:
98:6b:25:37:f5:f2:99:a9:db:91:c4:2f:df:87:dd:
bf:aa:7f:1b:c3:96:91:c7:cb:81:24:e9:2d:bd:b1:
ae:86:2f:05:30:15:53:24:68:f9:31:18:4c:67:11:
ce:06:8e:b4:7d:e3:c8:1b:2a:08:57:51:0f:1b:27:
10:c6:85:19:9d:4f:a3:e1:f1:1c:7c:8a:05:31:da:
14:0f:ed:8a:b3:c8:31:75:81:b6:89:90:14:60:fe:
bb:b1:a5:f8:87:20:66:09:bf:f3:b8:25:e8:45:1f:
9d:91:62:c3:5f:c8:b0:cc:7b:e9:d4:d0:7c:c1:74:
f3:87:9f:f5:28:31:38:6c:da:8f:a4:2c:79:e0:d0:
12:eb:57:c3:8c:04:da:57:b5:58:a5:a6:e4:9b:12:
9d:5f:c4:8e:8d:9a:4e:49:b8:25:b4:57:08:be:8d:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:20:CD:89:E0:C9:BC:FD:9F:37:BE:E8:77:E2:32:C4:A1:19:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115AEDD6D97811EF9BB05EA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.138.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d3:cd:52:bc:82:21:af:ed:3b:ee:22:0f:18:88:ae:19:f3:
07:5c:78:e8:5d:96:54:a0:e8:48:67:67:c4:2c:4d:d0:9f:1f:
84:ba:c3:ee:00:90:9b:67:66:67:e8:31:2b:59:c8:58:e3:58:
1d:80:b6:d7:49:5d:07:d5:bd:b6:f0:2c:99:9b:b7:ee:74:cc:
66:7f:3e:60:bc:56:91:26:fa:7d:fb:d8:b1:6e:e5:e1:f6:56:
fe:32:1e:0e:08:ba:6c:e5:47:d7:a3:b2:1d:b1:7d:ca:31:79:
43:78:d9:7f:3f:38:18:df:54:b6:3b:4e:a6:8f:65:7a:dc:b9:
b3:b2:b9:cd:51:74:36:87:39:f6:dd:13:34:f7:f8:33:21:a5:
04:9a:6a:bd:1b:d9:d1:5f:fb:69:3b:56:2b:ee:dd:1c:0a:67:
d1:1c:f8:7b:a4:8d:00:f9:99:ce:4b:01:d7:8d:8c:a7:98:33:
11:14:26:dd:ae:88:21:2e:d9:95:bd:07:76:d4:f1:ea:29:0e:
41:05:c2:0a:66:c6:0f:6c:93:58:9f:f5:2a:01:7a:9f:91:4a:
d3:80:e6:a9:1d:42:d4:f9:60:f3:65:45:3c:25:68:a9:7a:5a:
18:67:60:38:75:5b:c1:46:3d:53:00:b0:c5:6f:b9:d5:e7:33:
23:65:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:52 2025 by rpki-client