Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384BF054D96C11EFAF388452762E951A.roa
File: 384BF054D96C11EFAF388452762E951A.roa (raw, json)
Hash identifier: YNt+Cas27JS94YAnrlZ2FQVWmC+ppq9k8WNJdip4tEs=
Subject key identifier: 84:F4:EB:F1:F1:00:4F:59:05:F0:A3:75:82:1B:8A:AA:64:EB:4B:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384BF054D96C11EFAF388452762E951A.roa
Signing time: Thu 23 Jan 2025 09:27:10 +0000
ROA not before: Thu 23 Jan 2025 09:27:06 +0000
ROA not after: Fri 28 Feb 2025 09:27:06 +0000
asID: 62240
IP address blocks: 154.194.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82152 (0x140e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:27:06 2025 GMT
Not After : Feb 28 09:27:06 2025 GMT
Subject: CN=67920b6d-7e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:21:d7:9b:57:b0:34:c7:ba:f3:ce:57:30:
dd:73:7d:ca:6a:75:73:b3:1c:28:19:7a:5c:5d:06:
92:d0:f6:6a:50:8e:0b:71:f8:ee:c0:45:1d:4d:58:
72:3c:5d:f0:21:90:98:f3:a1:b9:c6:dc:8d:52:1c:
eb:c4:ab:c1:3b:da:10:85:dd:87:71:5b:47:b0:98:
7e:45:37:78:4b:7b:b4:ef:cb:5f:92:f8:3c:8c:09:
9f:91:7a:91:cd:b0:e2:6c:2c:03:e4:e0:81:f7:97:
a9:63:9b:a9:74:8c:b5:14:b8:91:65:40:2a:e6:35:
a0:7b:c3:39:39:56:8f:58:93:f9:b3:22:cd:bf:09:
10:4d:4d:81:3d:cf:16:12:fb:4d:2e:59:ba:15:dc:
d8:d9:3c:ff:e7:b4:31:4e:5e:a3:15:46:a1:2d:24:
86:81:55:88:d8:36:bd:f1:fd:cf:c6:b0:ee:b5:f7:
a1:d8:ce:70:aa:a0:9b:b8:1f:ea:ef:60:6a:ec:84:
6b:42:83:d6:51:b6:f1:4c:fe:48:be:74:65:4c:68:
51:57:8d:d8:9c:cf:47:ae:86:c3:1a:95:c2:6b:1e:
56:64:5c:1d:d4:77:b0:05:02:8d:b2:ae:89:13:ad:
dd:aa:f5:d3:87:6b:40:d1:72:75:cb:3e:88:96:e1:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:EB:F1:F1:00:4F:59:05:F0:A3:75:82:1B:8A:AA:64:EB:4B:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384BF054D96C11EFAF388452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3d:bf:a8:52:8e:5a:b6:11:65:e0:f7:61:41:a6:f4:aa:1e:
df:be:0e:9b:95:16:f9:fe:cf:1d:5a:5e:4e:fc:c6:ce:57:d7:
c5:7b:06:ed:ac:f6:66:4e:6d:eb:a0:e9:c5:a4:ca:3a:4c:72:
40:19:fb:8e:7b:61:81:e8:06:11:9b:f3:4f:7b:8e:e6:f2:69:
15:11:b1:0a:28:70:30:0b:3f:f4:a8:b7:f8:6e:c4:d1:c2:92:
ce:05:3f:c8:2c:f2:13:b4:b6:51:84:4a:73:5a:6c:bc:e3:14:
9b:64:94:b4:26:da:db:be:e0:04:45:e8:35:1d:21:16:0b:ae:
5a:c6:8b:54:ab:f4:1a:22:a5:7a:1a:77:4a:30:10:70:37:7f:
b4:cd:bf:55:dd:f9:38:d2:ba:a9:63:45:5e:09:7b:c4:d5:32:
0e:cb:69:fd:bc:25:00:ea:86:05:d5:8b:a4:6a:b7:ea:91:41:
de:21:05:1a:6d:c7:64:c0:1c:6d:61:c4:ae:7c:38:2c:0d:80:
a1:a2:ed:3f:ce:5a:6b:cb:35:c0:7f:13:90:4e:7b:5a:27:94:
59:71:2a:db:6f:88:96:3f:a2:ac:37:ea:b6:87:be:b7:47:62:
d2:74:fb:0b:66:7c:2e:9f:67:8d:58:1a:09:da:44:57:a4:b4:
8c:c1:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:07 2025 by rpki-client