Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30013DD6DA5D11EFB4E294AC762E951A.roa
File: 30013DD6DA5D11EFB4E294AC762E951A.roa (raw, json)
Hash identifier: 7YtzJmSyGKn3eQOYs4T/bmTLP+A7io/gUHrsAY1Z8Lk=
Subject key identifier: 9A:4F:3A:E3:B4:F9:F1:51:BD:5E:B4:F9:76:52:D0:1E:D6:AE:89:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30013DD6DA5D11EFB4E294AC762E951A.roa
Signing time: Fri 24 Jan 2025 14:12:04 +0000
ROA not before: Fri 24 Jan 2025 14:12:01 +0000
ROA not after: Sat 01 Mar 2025 14:12:01 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83960 (0x147f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:12:01 2025 GMT
Not After : Mar 1 14:12:01 2025 GMT
Subject: CN=67939fb4-7f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:7f:c1:97:3b:60:62:e4:41:17:68:dd:2c:
13:50:a0:98:33:e2:79:47:d8:09:d5:d1:33:44:0a:
bc:bd:90:5a:bb:90:95:88:a7:0d:51:9b:a7:a7:9d:
99:5c:cb:50:27:1e:90:5b:f2:ba:49:bc:32:c2:ae:
35:1a:b6:51:b5:db:43:31:80:fe:87:9a:34:60:16:
71:28:5d:e9:36:16:be:99:20:58:c8:2f:25:81:a2:
30:ac:83:f1:6f:d4:01:8a:72:03:82:08:50:d5:59:
38:68:a1:67:53:54:9b:43:b6:35:fa:ab:ec:01:db:
45:0e:91:c2:53:4d:0d:fd:2f:73:90:1e:39:a8:6e:
2f:5e:55:6e:0d:14:e6:ea:1c:a1:b0:5e:11:85:72:
68:2e:8b:90:91:ee:54:dc:41:0a:72:37:6c:f7:d4:
37:b2:ef:2c:4e:83:3b:50:0d:e3:b6:5c:40:b9:08:
07:fa:50:44:5d:83:de:54:c2:e3:1a:d7:f1:51:6f:
35:9c:2d:1e:1c:8e:ad:5b:12:35:99:da:bb:91:5a:
2f:34:a1:2f:c0:a3:e1:25:b0:f8:8a:c1:f4:8a:7b:
9f:24:fe:52:a0:3a:8c:1e:d7:d0:5f:5f:c4:a0:da:
60:16:ab:02:38:f9:78:c1:05:8d:cf:eb:8d:e0:dc:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:3A:E3:B4:F9:F1:51:BD:5E:B4:F9:76:52:D0:1E:D6:AE:89:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30013DD6DA5D11EFB4E294AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:96:3b:c3:1f:b4:78:f0:3d:17:ea:ef:bd:61:a5:b6:e2:ca:
1f:9f:ec:3f:43:41:ac:94:94:7c:39:2c:75:41:8d:fd:32:85:
14:34:6c:be:4b:41:36:1a:8b:72:2a:57:98:03:24:e9:61:8b:
6e:39:d8:8c:9f:c6:1c:8c:b2:40:48:5b:c1:5f:d2:1b:e9:3e:
a1:16:8b:d6:02:0c:86:41:6b:24:1e:d3:88:3a:c1:47:8d:87:
bc:ff:a4:38:ee:f3:d4:85:36:35:47:13:58:e4:05:aa:3e:d7:
fe:cd:70:a7:44:17:6f:11:34:88:85:4b:8a:01:c8:5f:df:70:
d9:b3:27:c9:3a:43:8c:c7:33:64:bf:de:5e:b9:d2:fb:6a:ef:
08:ad:ec:fa:ba:93:b3:43:3c:bb:75:49:2b:95:75:fc:34:eb:
9b:09:dc:fd:4d:ec:5b:b2:d5:79:33:1d:c3:2c:3a:72:c2:46:
2e:a8:b2:41:20:71:c9:7e:b1:5d:4c:93:f2:6c:05:2d:30:3b:
6e:47:ec:64:02:50:45:d4:ed:3d:0f:b3:9a:12:e7:a2:29:74:
64:55:0c:81:17:7d:1e:93:ed:75:59:55:cf:46:c7:40:ac:7e:
2d:35:11:de:b5:ed:1f:f0:66:ea:00:89:e9:23:2c:1a:a5:4b:
71:5e:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:44 2025 by rpki-client