Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15329078C51711EF8B90BE63762E951A.roa
File: 15329078C51711EF8B90BE63762E951A.roa (raw, json)
Hash identifier: qOComtx23mVycd2m15d9Q9sZvPVoAYE0i4Br7Qq1ptM=
Subject key identifier: C1:B6:A3:38:18:CE:1C:37:0E:C6:CD:EE:CD:BA:07:19:28:F9:B1:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15329078C51711EF8B90BE63762E951A.roa
Signing time: Sat 28 Dec 2024 12:27:20 +0000
ROA not before: Sat 28 Dec 2024 12:27:17 +0000
ROA not after: Thu 06 Mar 2025 12:27:17 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76573 (0x12b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 12:27:17 2024 GMT
Not After : Mar 6 12:27:17 2025 GMT
Subject: CN=676feea8-12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:f2:21:e0:ca:78:98:5a:de:b3:b9:b4:a2:
8b:a1:06:d0:54:f4:83:ac:68:fa:8e:95:f8:a8:ec:
26:3a:6c:2a:10:93:53:9a:b4:46:1a:85:37:6a:b0:
ed:88:3f:33:aa:1f:02:19:61:95:80:d8:e4:2a:ef:
35:a8:c0:3e:b9:2e:7c:61:da:5f:fd:f5:ec:93:55:
02:36:e7:cd:62:b3:f5:2f:24:99:4a:94:5c:74:a0:
4a:56:01:73:c7:36:99:bb:b7:74:18:15:45:7d:9e:
b3:73:4b:57:d5:31:dc:28:5e:6b:0e:7f:fd:c5:c3:
dd:62:41:1e:0d:2e:d6:1f:b8:af:14:01:48:20:b0:
2d:94:d1:4b:c4:89:6b:56:d9:4a:f5:6f:dd:cd:0c:
b3:82:77:c6:21:5d:5c:40:89:6f:5f:e3:03:85:bf:
f9:f5:3c:8d:3a:c2:f1:2c:fd:08:e3:f2:5b:36:6f:
c2:4b:ee:1a:3c:4b:ff:25:60:33:d2:58:8e:c1:48:
0b:a4:96:a7:50:70:3e:68:e7:dc:cf:44:bc:4f:0f:
38:36:3c:8d:a0:48:f0:d5:e7:26:60:8f:28:d1:40:
4c:f0:74:d5:b0:47:fa:3b:d3:d4:3c:04:f9:52:70:
67:b7:42:15:eb:0a:54:ad:91:a7:2e:c2:7f:59:41:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:A3:38:18:CE:1C:37:0E:C6:CD:EE:CD:BA:07:19:28:F9:B1:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15329078C51711EF8B90BE63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:af:99:02:82:2f:37:f7:aa:65:c6:62:60:75:e4:8f:18:bd:
f1:50:69:49:d1:a8:13:a9:ff:d6:8d:94:9a:e2:c4:ca:3c:cc:
bc:c4:c1:86:ed:ab:74:50:ff:44:6c:13:cb:cd:44:b3:dc:52:
f2:69:7c:58:e8:d1:e4:30:95:f4:f6:16:e8:a3:29:75:60:5d:
98:fd:7b:55:04:61:85:b8:a6:fe:da:36:04:17:47:8b:9a:35:
72:f7:c2:fc:ff:56:48:1e:12:51:eb:68:a6:05:51:a1:57:80:
9b:d1:cc:5f:e3:13:36:20:6e:86:c6:99:6e:f4:ac:27:b7:0b:
fd:f1:5e:b2:35:fb:8c:39:79:07:36:37:5c:20:06:bd:29:27:
09:cb:d0:2e:6d:c1:92:1b:ee:3d:7f:db:77:73:5b:a9:0b:cf:
a5:c6:64:d0:4e:78:7f:44:d2:76:70:57:03:be:5c:a3:c1:09:
b7:d3:18:f6:2b:de:6e:ce:dc:c9:ba:a2:33:4b:0b:43:84:f8:
0c:e6:c5:ef:78:b3:20:60:70:82:8e:b5:28:be:bd:c4:c2:6e:
44:8d:81:1b:2f:69:63:71:f1:15:9b:01:7d:51:0c:fb:b0:d6:
e2:8a:95:ce:f0:df:ea:21:45:a3:54:98:00:2a:9d:33:55:62:
b1:1e:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:04 2025 by rpki-client