Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6C1CC0D9D211EFA9E5F877762E951A.roa
File: 3C6C1CC0D9D211EFA9E5F877762E951A.roa (raw, json)
Hash identifier: wevmWnDtrQ88y9+fB9GlU9ZO7uaTNiyLkZuA9jjfk/8=
Subject key identifier: D5:95:B9:C0:80:3D:10:16:9C:85:C1:86:7D:30:5E:D7:AC:25:11:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014319
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6C1CC0D9D211EFA9E5F877762E951A.roa
Signing time: Thu 23 Jan 2025 21:37:25 +0000
ROA not before: Fri 24 Jan 2025 21:37:21 +0000
ROA not after: Fri 28 Feb 2025 21:37:21 +0000
asID: 62240
IP address blocks: 154.196.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82713 (0x14319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:37:21 2025 GMT
Not After : Feb 28 21:37:21 2025 GMT
Subject: CN=6792b695-b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:1c:10:fc:2d:ff:e4:62:65:49:72:1c:59:
30:d8:ab:9a:aa:2d:43:20:75:05:f3:53:ea:42:19:
2b:a1:c9:7f:5e:55:45:b1:ed:f2:e6:c3:8b:8b:10:
e6:62:73:29:f0:2c:b6:7a:56:b4:c5:d8:d9:2c:f8:
7a:b2:97:c9:0e:43:4d:a9:56:5e:3e:be:d8:ce:3f:
7a:22:3d:8e:f1:15:2e:73:88:e6:58:aa:5e:38:f3:
76:71:72:91:53:a6:33:ec:9c:43:0b:64:0c:bb:52:
c8:65:86:4b:f5:f7:8c:85:57:07:ea:fd:14:ac:73:
ce:87:64:a7:11:67:75:83:69:f5:48:d6:9a:a0:6b:
42:e8:cd:c6:80:f8:b5:dc:99:7e:34:2f:b7:c4:5d:
34:21:ef:f9:62:30:58:dd:72:58:13:07:22:b1:cb:
a1:e4:19:c5:12:9f:4c:7d:41:40:2a:70:7f:4a:cb:
42:30:59:1b:30:89:a9:68:bd:a5:a1:37:77:99:e8:
f9:32:13:f5:71:9d:15:65:40:c9:95:30:ba:3d:2b:
c8:a4:c1:0d:55:37:ce:3c:92:42:a4:f1:07:c3:f4:
0d:36:dc:16:af:95:23:13:57:42:be:da:0a:2f:a1:
3f:f1:e1:89:52:5a:ab:c9:58:b6:47:ae:a2:60:ab:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:B9:C0:80:3D:10:16:9C:85:C1:86:7D:30:5E:D7:AC:25:11:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6C1CC0D9D211EFA9E5F877762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dd:92:6a:26:84:0d:4d:fd:d4:78:bd:84:8b:05:7c:84:69:
31:5e:44:60:68:7c:42:cc:42:8d:c7:92:48:c6:75:27:89:d9:
2a:fd:96:a6:51:4c:a6:f8:af:98:f3:7d:46:28:54:7e:53:43:
d6:4b:59:0a:58:8f:bc:64:44:f2:c1:1a:b1:91:fe:63:c1:03:
a9:b3:59:c3:32:5c:8a:db:9e:7a:f2:90:01:36:e6:63:34:d3:
74:de:76:1e:34:80:b2:60:3e:9d:1e:95:fe:c5:2b:99:0d:12:
ee:72:66:3c:27:db:26:1f:d8:2e:1e:b2:20:f9:d6:fc:c3:d3:
25:b3:12:a5:79:ae:fd:9c:b6:5c:2a:f2:32:dc:6f:32:91:a1:
f4:4e:bc:58:9a:1a:47:7d:d2:b5:ad:6d:09:4d:2a:41:91:0a:
b4:7d:28:a7:ef:f6:7a:7c:8f:5e:87:74:4d:f7:19:23:83:76:
8c:65:f1:b5:ff:bc:a6:1a:c8:80:37:a1:7f:a7:1e:d2:0e:9a:
99:ee:6e:6f:ec:f5:38:fc:75:75:28:c3:dc:94:fc:4a:6c:8b:
23:4c:62:75:89:e4:35:29:ac:e9:44:7e:43:69:af:26:e8:9c:
3a:25:77:05:13:da:1d:fb:a6:1e:04:83:7c:b9:1d:82:59:50:
da:5e:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:16 2025 by rpki-client