Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1714DB2CD3F311EF9CB3964F762E951A.roa
File: 1714DB2CD3F311EF9CB3964F762E951A.roa (raw, json)
Hash identifier: 2d3AFA92ZmzzyZE2mu5Svxg+01KG2vOVOPw2K1k5UBk=
Subject key identifier: FD:B9:C7:AC:85:23:6D:E2:47:10:B1:42:A1:73:43:57:BB:23:4E:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1714DB2CD3F311EF9CB3964F762E951A.roa
Signing time: Thu 16 Jan 2025 10:17:29 +0000
ROA not before: Thu 16 Jan 2025 10:17:25 +0000
ROA not after: Sun 16 Mar 2025 10:17:25 +0000
asID: 17561
IP address blocks: 154.196.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80842 (0x13bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:17:25 2025 GMT
Not After : Mar 16 10:17:25 2025 GMT
Subject: CN=6788dcb9-c8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:fd:4a:fa:04:06:68:b7:f1:e2:44:0c:75:
cc:06:f9:1d:fc:5f:31:39:59:fc:d5:04:11:22:4d:
fe:f5:f8:91:7b:8d:7f:f9:5b:f6:ea:5d:19:bc:13:
e8:ec:b5:7f:9b:03:56:cd:8f:05:51:b5:4b:a4:22:
f1:3d:a7:c8:c7:12:12:5c:f6:cb:83:38:dc:f8:2d:
51:82:e2:ac:e1:c2:4a:19:70:ba:d4:42:50:e7:b1:
c0:5d:0f:18:f0:3b:43:31:35:c8:10:0c:d0:96:9a:
cb:b3:db:45:c9:3b:29:5e:5e:69:af:69:92:0b:cb:
22:e8:ca:4d:b2:ae:67:3c:48:14:68:98:eb:9e:8c:
bb:3a:b7:fc:fa:2f:13:39:6e:b4:eb:40:48:7f:1d:
4d:60:17:73:8a:c9:89:c1:83:da:4a:f8:51:a0:11:
d8:51:1b:d0:cc:b7:4c:16:0b:14:54:95:ea:6d:6f:
f7:d1:c3:9a:e7:34:65:4d:89:a8:2e:d0:47:22:bb:
af:d8:2f:26:35:df:18:32:59:b6:41:d0:74:83:23:
1b:72:78:6d:74:15:97:91:1f:53:66:2b:93:c5:ab:
0c:75:17:42:a2:9b:df:04:14:6c:b9:7a:a6:0f:d5:
3e:3c:1d:48:ad:e0:2c:b2:33:6a:28:88:bb:91:8d:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:C7:AC:85:23:6D:E2:47:10:B1:42:A1:73:43:57:BB:23:4E:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1714DB2CD3F311EF9CB3964F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/20
Signature Algorithm: sha256WithRSAEncryption
30:79:14:ee:38:4f:4c:eb:79:d8:11:c9:77:cd:af:fa:b1:39:
2b:11:e0:ea:1e:95:8d:eb:79:74:93:57:71:07:63:41:89:89:
c7:9f:e9:c5:51:0a:98:c8:b5:ae:34:f2:d4:2d:57:71:6b:3d:
2c:ad:d2:72:5b:09:7d:40:63:b5:a3:29:7d:ff:70:f8:04:a8:
9f:c0:30:25:6f:c6:56:9c:2f:7d:06:ad:f9:06:a1:d7:c1:1e:
28:97:0a:a4:81:1d:b9:03:5b:40:53:db:9f:57:71:07:75:81:
ce:f6:da:16:19:65:87:64:21:55:00:84:48:10:15:39:35:4c:
e3:dc:00:b3:cc:fe:09:75:88:18:69:e2:c9:e1:ed:8e:3d:f9:
19:9b:4f:22:7e:09:42:19:cf:d2:d8:14:f7:e7:71:dd:d1:1c:
fc:c8:83:1f:4e:05:36:88:46:e9:e1:22:cb:0a:83:93:5f:f9:
86:2f:b8:4d:79:bd:80:a0:8c:6c:32:fa:2b:d2:1a:22:c9:1e:
60:ab:6e:3f:16:da:83:b1:ca:6d:a7:39:e4:0f:45:24:a7:74:
6d:ca:f9:38:86:c1:7a:00:cb:0d:15:92:6d:9b:ae:66:a4:65:
51:38:9e:36:2f:cd:c4:67:30:14:6b:f0:46:ad:68:37:9a:f9:
af:89:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:46 2025 by rpki-client