Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36DA48E4DD6611EF909C07AB762E951A.roa
File: 36DA48E4DD6611EF909C07AB762E951A.roa (raw, json)
Hash identifier: LVvgkFr6FZaR+DrnoZbZmmDlihIJgR8T3yrhXOuk9TE=
Subject key identifier: 6A:27:72:C4:C6:55:B8:7B:C7:F4:CD:31:60:7F:15:47:D2:E1:23:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36DA48E4DD6611EF909C07AB762E951A.roa
Signing time: Tue 28 Jan 2025 10:54:15 +0000
ROA not before: Tue 28 Jan 2025 10:54:10 +0000
ROA not after: Fri 14 Feb 2025 10:54:10 +0000
asID: 5065
IP address blocks: 154.86.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85204 (0x14cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:54:10 2025 GMT
Not After : Feb 14 10:54:10 2025 GMT
Subject: CN=6798b757-606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:36:77:60:6a:88:aa:d8:fc:28:83:61:ac:
e0:80:fe:ea:5b:db:2a:c8:13:1b:0b:b7:34:76:36:
72:66:9a:3f:06:be:c2:0f:c8:70:13:5d:df:5c:99:
97:ab:a1:54:59:71:2e:95:ca:76:f5:29:9b:7d:bd:
43:af:df:39:46:6b:b6:c5:27:12:9c:e6:c9:d3:20:
e1:af:03:e8:f1:e4:9e:75:ee:45:c7:b5:1b:03:6e:
c0:1a:fd:c3:dc:ca:17:0c:54:59:32:6c:ae:16:92:
53:11:98:5b:c3:2c:f8:16:fc:02:96:98:61:60:e1:
3c:69:99:ae:29:d4:d7:40:3b:76:16:14:3b:8d:7d:
5e:0d:7b:b6:1d:1d:ec:0b:db:9c:ee:fc:de:60:b1:
3b:ac:2a:6a:be:2b:dc:fb:ea:5c:6c:b9:97:2b:b6:
99:96:f5:fc:51:5d:78:3a:8c:89:fa:6a:0b:ac:6b:
00:1f:ff:52:63:57:6d:97:b4:0e:41:ce:ab:0e:04:
f7:ab:6a:e8:42:0d:23:0c:6f:41:55:5f:ce:64:d3:
f3:72:b6:00:78:f1:7c:c6:bf:66:3a:31:66:c4:3f:
4b:a2:6c:96:55:18:d4:cf:16:fb:5e:56:9f:51:13:
f5:d5:19:2b:c7:54:05:64:06:f7:35:a7:31:ed:ad:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:72:C4:C6:55:B8:7B:C7:F4:CD:31:60:7F:15:47:D2:E1:23:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36DA48E4DD6611EF909C07AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cc:d0:2d:cb:11:26:b6:f8:ac:84:d3:e4:5f:13:1a:dc:34:
b8:54:82:5d:e7:ad:d1:6e:41:1b:21:d9:fb:2a:cc:92:c7:dc:
b3:0e:7b:d2:e1:5f:09:cf:eb:b8:e1:b3:1b:a4:2c:bc:14:18:
4a:7d:e3:89:ba:81:f3:dd:3b:6d:9c:92:78:7e:25:73:94:5c:
95:f6:a1:ee:d0:bf:83:4a:5c:df:84:4a:17:29:f2:65:9d:a0:
93:8f:97:11:61:73:27:6d:ed:19:6e:91:f9:7d:73:8e:10:52:
95:6a:89:95:1e:99:dc:6c:d0:ab:90:0c:f9:04:26:56:29:15:
e0:21:8a:6f:d5:57:8f:32:a1:f0:25:bf:5a:79:34:9d:dc:e6:
cb:f4:d2:43:8e:2e:bf:4b:bb:ab:ce:6f:96:f6:f1:54:1c:3c:
53:ec:29:7f:d7:5f:60:8a:32:99:77:aa:a0:91:ec:74:8a:67:
20:ae:75:8e:fe:58:aa:f5:3b:3f:1c:a9:65:82:da:60:fc:00:
ad:30:ce:5d:36:f3:70:bd:a3:bd:5f:9d:2d:0d:68:55:01:13:
02:25:53:9f:d1:51:ac:b7:fd:39:38:98:93:63:1c:a6:ef:55:
98:0f:2c:64:b8:24:b2:3b:0f:c8:aa:ae:fa:07:60:63:a0:69:
c8:15:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:09 2025 by rpki-client