Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AE3730DA5811EF9003068A762E951A.roa
File: 16AE3730DA5811EF9003068A762E951A.roa (raw, json)
Hash identifier: ZaRNCY7Ty38aBs7AGF2fQKhAsCDSNhaHBtBublj0TgI=
Subject key identifier: 8A:FA:36:D7:AB:FE:49:6C:99:C2:8C:7B:9E:5A:DB:3A:63:DF:88:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01478B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AE3730DA5811EF9003068A762E951A.roa
Signing time: Fri 24 Jan 2025 13:35:34 +0000
ROA not before: Fri 24 Jan 2025 13:35:31 +0000
ROA not after: Fri 28 Feb 2025 13:35:31 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83851 (0x1478b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:35:31 2025 GMT
Not After : Feb 28 13:35:31 2025 GMT
Subject: CN=67939726-28e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f0:4c:d7:02:b7:4e:8b:50:d8:27:5e:a6:81:
52:71:5f:0c:f8:03:c9:65:0d:b6:34:10:9f:9a:51:
f0:fb:55:21:82:fb:5a:11:0a:f6:5e:55:f8:f3:ec:
0b:89:a9:54:48:be:ec:4e:e3:f4:9a:c1:4e:f0:9d:
10:16:28:91:ac:4a:3c:43:5b:a1:a3:93:ae:37:90:
ed:32:bc:4c:08:ad:70:b2:b2:5a:72:1e:73:e8:b9:
22:d7:52:fc:e0:75:a4:70:4e:0a:8a:4e:c9:94:37:
69:8d:ff:00:d3:16:c1:69:d6:5f:6b:60:11:51:3e:
d3:51:7f:19:43:7c:8a:9a:76:35:cc:c6:9f:00:53:
d4:db:67:5b:f9:57:ab:3e:eb:96:69:b3:ba:16:dc:
f1:24:bc:88:64:56:8b:e1:1b:26:34:1c:e0:ee:55:
6b:96:6e:53:f8:20:e0:31:55:be:c2:99:3e:f2:18:
7b:c7:86:c2:50:6d:c3:db:4c:ca:8f:21:85:39:e6:
95:ca:8c:08:f5:b0:02:2f:52:c5:ab:55:fa:f6:0b:
c9:22:f3:da:71:63:74:51:75:a6:7b:07:90:22:c1:
33:30:fe:54:78:e7:56:bd:91:54:4d:08:82:f8:85:
3c:8e:62:46:3d:1c:38:b8:6e:00:bc:d0:b7:43:2a:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:36:D7:AB:FE:49:6C:99:C2:8C:7B:9E:5A:DB:3A:63:DF:88:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16AE3730DA5811EF9003068A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:22:d9:dd:ff:8b:1f:8a:40:be:68:3c:08:51:d6:ec:6b:dd:
5e:88:ac:67:80:b1:46:da:67:ab:11:14:26:d2:dc:ba:15:74:
2b:de:ba:bc:d2:68:37:dd:7f:78:53:e2:99:23:69:f8:21:b4:
26:e1:fd:ac:9b:ec:9a:d3:d8:8b:22:48:14:94:e1:70:78:88:
72:43:5d:fe:2e:2f:22:98:e7:b3:8f:45:21:8b:3f:42:6a:ac:
d3:1a:3f:da:4f:22:29:2a:fa:68:81:af:62:23:35:83:5c:a4:
79:0a:b8:85:a2:36:4c:eb:43:96:b3:4d:6e:9c:59:36:12:fd:
ed:27:4c:2e:d2:7f:6d:a2:49:77:d2:02:77:f6:e2:b5:8e:32:
11:37:b6:cf:74:88:92:35:a1:bc:58:f5:c8:51:ea:1f:8a:6c:
3b:65:7b:ce:b7:30:38:c2:5e:c0:15:8d:01:b1:47:d8:c2:0d:
83:f8:e0:3d:ce:9c:f9:e4:05:d1:a9:4c:ea:c9:83:bf:d4:f4:
8a:98:cf:14:31:7a:c4:49:59:08:e7:48:c8:af:f1:4e:7f:28:
8e:7e:62:28:fa:b5:0d:14:79:50:90:90:f7:0d:ea:69:5e:62:
8c:cf:73:49:9a:7b:01:08:e3:f5:6c:be:84:4c:74:87:44:6f:
e0:72:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:31 2025 by rpki-client