Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/378CC176DA3D11EF9E232D55762E951A.roa
File: 378CC176DA3D11EF9E232D55762E951A.roa (raw, json)
Hash identifier: SEcOxClzEZq1T/PzXGD3O7stGDHeZTEj3nGCLMhl0rE=
Subject key identifier: 05:FB:A4:AF:98:F4:7B:1F:1E:5A:62:EB:6E:A6:89:28:93:66:D9:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014580
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/378CC176DA3D11EF9E232D55762E951A.roa
Signing time: Fri 24 Jan 2025 10:23:13 +0000
ROA not before: Fri 24 Jan 2025 10:23:10 +0000
ROA not after: Fri 28 Feb 2025 10:23:10 +0000
asID: 62240
IP address blocks: 154.196.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83328 (0x14580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:23:10 2025 GMT
Not After : Feb 28 10:23:10 2025 GMT
Subject: CN=67936a11-bfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:57:b5:cf:0c:c6:79:af:bf:dd:18:95:fb:
13:63:23:a2:a6:9e:88:51:97:46:b3:82:e8:57:49:
a6:b1:7b:7d:33:17:48:87:4a:39:33:b8:71:4c:43:
c4:f1:c4:9f:17:f2:7d:fe:4c:ea:1a:4c:38:c6:20:
ce:41:82:3b:92:58:0d:6e:42:91:9c:3e:b9:77:b6:
7a:b6:10:34:52:de:54:99:eb:6a:f9:71:a8:8b:9a:
ef:f5:20:a6:76:73:b8:45:28:71:a3:c3:03:af:64:
3d:70:78:b5:6c:2b:89:41:5b:e1:73:cb:70:56:bc:
8e:92:b8:cb:3f:32:7b:b8:58:85:4d:59:c2:d6:e8:
e1:b9:98:20:e4:c1:0d:82:bf:a5:b6:02:85:73:b8:
ff:ce:e3:45:6e:98:33:30:3e:95:1e:b2:39:70:f0:
f6:88:ab:80:c4:58:9d:a6:bc:c7:11:31:c2:0a:c0:
1e:c4:70:74:b4:eb:ff:f8:45:d7:c0:9e:d2:77:69:
58:18:c1:dd:c8:d6:39:c8:b3:2e:d8:7a:ae:f3:d8:
21:e9:f1:dd:47:d0:eb:dd:be:a6:46:84:17:29:8b:
a7:dc:a0:2c:12:0b:7d:df:3c:e2:86:fa:02:ee:42:
09:7b:5c:f2:50:d0:1e:73:ed:80:60:a7:83:18:0e:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:A4:AF:98:F4:7B:1F:1E:5A:62:EB:6E:A6:89:28:93:66:D9:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/378CC176DA3D11EF9E232D55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.53.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0d:04:55:a9:67:d3:ab:ba:e7:43:46:9a:67:94:32:62:50:
00:b7:fb:aa:78:f7:97:36:9a:b4:ae:23:27:e6:1a:7d:02:7a:
3e:36:0d:75:06:7b:82:cc:0f:99:70:f2:de:07:7c:6b:1a:33:
41:92:fb:bb:46:fe:46:eb:c9:23:3b:d4:70:91:11:89:33:37:
5f:e1:86:b8:a0:7b:7a:a5:38:74:b4:90:b5:c3:a3:b8:87:fc:
a7:e9:4f:38:09:a0:a1:52:86:0a:9b:2b:93:72:f6:08:ab:3c:
b1:f6:32:88:f7:cc:20:95:3f:cf:b7:08:0e:c4:f1:10:59:df:
50:33:d5:69:8b:f9:74:a3:66:b7:ae:41:51:c0:db:7c:04:d7:
8a:e4:8e:bb:7d:d4:77:a9:b4:89:cb:82:21:b2:c3:72:c8:2f:
6e:c7:64:e6:9e:ca:c0:a1:94:4e:7a:77:cc:5f:2e:c4:e9:e4:
84:55:93:d3:80:44:59:e2:39:25:66:38:2c:7e:1a:39:d8:3e:
e8:25:97:2b:0f:f7:80:d5:40:d9:ea:1c:b6:57:80:df:6b:fc:
de:27:f8:7c:4f:9d:f4:19:d4:23:e5:cf:5e:5f:99:68:1f:30:
d2:4a:71:3d:3e:c0:64:2d:5e:2a:e9:ab:1d:4b:44:bd:ff:b8:
1d:20:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:39 2025 by rpki-client