Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E690202DA4411EF8A933384762E951A.roa
File: 1E690202DA4411EF8A933384762E951A.roa (raw, json)
Hash identifier: UzVBHPoN8W7UNC02KvA00WElfbgmcpa51oeiiH8mKbY=
Subject key identifier: 7B:68:98:35:47:58:09:71:6C:CD:86:3C:6C:F1:1E:C0:6D:42:8C:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E690202DA4411EF8A933384762E951A.roa
Signing time: Fri 24 Jan 2025 11:12:37 +0000
ROA not before: Fri 24 Jan 2025 11:12:34 +0000
ROA not after: Fri 28 Feb 2025 11:12:34 +0000
asID: 62240
IP address blocks: 154.196.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83442 (0x145f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:12:34 2025 GMT
Not After : Feb 28 11:12:34 2025 GMT
Subject: CN=679375a5-b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:d4:ff:dc:a7:5e:8c:bf:45:e8:dc:b8:e4:
ef:2c:e0:08:1e:d1:03:e1:59:22:3c:f1:70:66:cb:
ef:35:e8:fb:b0:55:34:00:28:e9:49:06:75:0b:f2:
6f:64:0e:73:2c:b7:fd:b8:0c:99:fd:7c:56:4b:42:
8f:56:e1:b4:ab:20:d4:5d:24:c3:1d:58:74:63:51:
7f:56:ad:bc:fc:1b:54:0e:06:82:17:8b:5e:a9:ae:
83:bd:66:83:88:32:ab:a2:78:e3:32:4d:60:00:4c:
3f:96:74:bf:59:ab:bf:1f:70:b1:f5:f9:9a:ff:23:
e7:d9:12:84:03:a9:9e:2a:09:6c:67:0c:ad:2c:01:
90:fb:6c:5a:70:34:dc:71:a0:36:38:af:4b:ea:9f:
9c:fc:b5:6b:50:fc:a0:18:49:c9:38:1b:94:83:7e:
2a:38:92:49:e7:a6:03:b6:d5:76:62:ff:81:f6:d8:
85:40:c3:6c:93:b9:6d:38:57:ac:cf:67:87:50:78:
74:91:7c:5c:6c:74:d7:b6:fa:68:8f:d8:06:5c:37:
f8:34:51:6d:ca:8b:b1:cb:ff:d2:73:0f:2b:4c:74:
27:69:7c:e6:d6:df:08:6f:f9:f9:d6:41:d9:8f:e2:
6a:82:f7:2a:58:14:2c:a5:c0:80:8d:e8:1d:83:06:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:98:35:47:58:09:71:6C:CD:86:3C:6C:F1:1E:C0:6D:42:8C:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E690202DA4411EF8A933384762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.77.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:e5:05:84:97:e2:35:31:a0:78:16:0d:7f:08:a8:42:59:35:
53:a6:a0:ea:8f:18:a7:56:d1:da:58:84:d3:c9:cf:6d:6f:99:
05:f5:3d:db:9d:77:07:c7:9d:22:74:06:22:b6:06:99:ab:38:
d5:e7:27:0c:ee:1d:09:35:3b:d7:77:88:b0:36:fa:2b:44:55:
fd:4e:c1:44:1a:0e:a9:47:80:a0:6c:21:a1:30:d1:c7:64:76:
60:97:86:87:ca:eb:1b:52:3a:87:a0:39:86:72:58:e9:72:d1:
48:33:03:f2:3d:ea:35:5c:71:46:f7:4d:2b:80:2d:da:f6:1a:
93:57:68:3f:a7:9c:d9:26:97:d1:a5:60:46:cb:7e:17:a4:3b:
d7:c0:93:a3:01:7d:09:4a:b9:e1:6e:c7:23:e3:82:52:a8:61:
8a:76:b0:75:48:a0:78:f1:b7:c2:70:aa:07:60:a4:ce:40:66:
c2:93:d4:03:55:b2:ba:b2:f4:45:f9:14:81:70:1a:c3:9b:21:
47:27:4b:30:da:25:a2:af:1d:5f:6b:23:98:33:29:33:bb:a1:
30:d5:73:34:fb:b0:88:01:e7:80:2b:76:14:2e:08:04:da:ed:
85:0c:c7:30:ef:f8:3f:74:8d:0b:59:97:64:45:ed:e0:5f:0e:
c1:cd:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:48 2025 by rpki-client