Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A004D44D9C511EF9FDC6D9F762E951A.roa
File: 1A004D44D9C511EF9FDC6D9F762E951A.roa (raw, json)
Hash identifier: 6YAvr/3405gfDyKIJSlD4K50GZ3/YCoCqRUmTjvQ9kk=
Subject key identifier: 0D:7B:51:D5:8C:4E:8C:AE:96:46:2B:A3:30:3D:16:52:13:A2:A9:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A004D44D9C511EF9FDC6D9F762E951A.roa
Signing time: Thu 23 Jan 2025 20:03:24 +0000
ROA not before: Fri 24 Jan 2025 20:03:20 +0000
ROA not after: Fri 28 Feb 2025 20:03:20 +0000
asID: 62240
IP address blocks: 154.196.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82616 (0x142b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:03:20 2025 GMT
Not After : Feb 28 20:03:20 2025 GMT
Subject: CN=6792a08c-c9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:b8:6c:f8:3a:46:1c:2b:b8:47:58:3a:3c:
e8:d6:da:79:5e:ca:0f:66:2b:9f:d4:98:11:c2:10:
09:4f:86:4b:b2:e4:77:ca:01:a4:3e:60:93:45:b7:
08:f9:32:64:f7:4b:82:32:b5:3f:35:db:f8:b6:fc:
c9:88:87:ff:ae:73:6f:18:a2:b1:9f:b3:21:f7:7a:
17:40:29:a7:a0:7d:24:bf:5a:07:3f:9b:b6:5f:9d:
b7:29:ad:7c:56:0b:c3:bb:d2:4d:fa:8a:f2:4d:ca:
cf:6c:ab:8a:15:fb:c5:7c:48:5c:5e:e9:92:23:79:
19:f1:74:10:65:65:31:5e:f4:fb:5c:1d:4d:c4:73:
da:01:44:6d:a5:64:27:01:f1:5d:66:46:f3:81:25:
fa:7a:20:e9:c3:38:b0:a8:6b:42:17:f4:11:28:9f:
2a:10:9c:cc:17:d0:a9:59:4a:7f:26:8f:c1:99:13:
36:c2:3d:31:f5:fb:7b:82:76:36:58:2d:82:3a:67:
7c:a3:f8:5b:fa:a2:eb:56:a1:85:0f:a8:39:55:d9:
01:bf:4f:52:3e:7c:ce:80:93:6b:b2:ed:07:45:f7:
0f:76:39:fa:cb:31:c3:4e:42:89:c8:3b:a0:08:d2:
03:cb:81:ba:0d:fe:62:7b:e6:53:47:d6:df:b2:9b:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:51:D5:8C:4E:8C:AE:96:46:2B:A3:30:3D:16:52:13:A2:A9:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A004D44D9C511EF9FDC6D9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.40.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a7:fd:c8:a2:f7:14:93:e9:c9:85:4b:04:b2:1b:f2:99:24:
a0:43:48:ba:4f:bc:96:23:2b:f4:89:de:7a:0c:14:e2:4d:26:
28:6c:b8:ef:7a:50:71:f2:b6:5e:37:5a:41:f8:17:95:65:2b:
3b:71:0f:b2:fc:c2:13:0f:82:19:af:27:9d:78:e3:75:9f:45:
e9:d3:00:1c:a5:ef:e2:ab:48:b5:68:74:64:d3:d0:01:b1:29:
68:c9:f7:8b:12:f1:ed:59:cf:20:67:fa:48:9e:8a:88:11:0b:
a8:77:83:90:27:d7:a3:b3:08:c0:f1:14:6f:fc:1c:6f:3f:f9:
2d:38:46:87:10:eb:a3:ec:df:98:8b:68:be:8f:aa:6c:5a:4e:
bf:0b:84:61:8b:fb:db:ac:a3:3f:46:81:b8:55:b3:fc:31:77:
61:2c:83:90:e4:d1:91:ad:d0:cb:d7:ee:0b:31:42:59:9b:88:
32:2f:4c:f2:c1:3e:0a:d2:f5:23:cb:7a:59:d4:be:ae:43:0d:
c0:0e:68:e7:1b:7c:ad:6f:66:2a:ba:a7:96:81:5c:73:88:97:
cd:2c:48:b3:07:26:0d:82:af:79:7b:b5:74:ad:91:2a:a5:83:
96:6a:5a:2d:07:4e:9a:17:a5:a5:00:6f:75:ef:ae:71:97:18:
f8:74:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:24 2025 by rpki-client