Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4141CA66DA3511EFAD598F9C762E951A.roa
File: 4141CA66DA3511EFAD598F9C762E951A.roa (raw, json)
Hash identifier: TUF+ZkRXydRbvOt+pPp7Ny66lwus9TZ85W0AcupnRD0=
Subject key identifier: 82:42:53:AF:80:47:0D:5F:63:B2:DC:06:60:42:9D:56:4E:EF:40:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4141CA66DA3511EFAD598F9C762E951A.roa
Signing time: Fri 24 Jan 2025 09:26:13 +0000
ROA not before: Fri 24 Jan 2025 09:26:10 +0000
ROA not after: Fri 28 Feb 2025 09:26:10 +0000
asID: 62240
IP address blocks: 154.195.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83177 (0x144e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:26:10 2025 GMT
Not After : Feb 28 09:26:10 2025 GMT
Subject: CN=67935cb5-7cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:96:0a:68:21:23:f3:2a:f7:eb:ad:67:86:
8f:0a:95:84:68:50:80:5a:4f:7d:80:57:6b:b1:d4:
14:d1:a3:bc:dd:e5:a4:c5:87:43:87:c5:f0:56:87:
23:a2:69:12:24:66:fd:06:8d:54:ab:79:d4:fb:95:
7e:b8:85:21:eb:4a:bb:01:8b:8c:61:7d:23:48:53:
65:0c:74:88:6f:dc:0b:5c:cf:a8:ef:7b:65:2a:f4:
61:dd:b4:63:f2:ac:c9:3e:81:e2:f0:7b:42:e2:d7:
86:16:f2:7b:cb:75:f5:82:ae:a9:e8:45:6c:04:eb:
e1:51:34:1e:d2:39:48:84:44:77:0e:37:f8:ac:83:
e3:da:ba:8d:49:ce:3e:67:6f:3b:cc:72:15:04:82:
57:9d:3f:e2:95:94:8e:b2:f5:05:c9:77:0d:04:74:
9a:f2:0a:2d:e1:33:dd:7c:08:95:24:23:41:af:c0:
70:09:c0:e3:91:a0:96:6b:80:1c:6f:db:88:67:1f:
45:7e:c7:03:40:cf:fa:d9:25:8b:eb:41:47:10:e3:
74:98:1f:c0:e5:ba:24:99:79:b8:81:53:91:11:ef:
2b:79:b6:49:06:a6:63:d3:57:a0:2f:c7:73:77:ad:
0a:f0:1e:dd:9c:97:ef:db:6c:09:ff:1e:2e:a0:32:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:53:AF:80:47:0D:5F:63:B2:DC:06:60:42:9D:56:4E:EF:40:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4141CA66DA3511EFAD598F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
47:36:07:65:e4:b1:3e:91:f4:0d:1f:38:c9:bc:ee:7d:a5:5e:
a0:60:9c:74:97:3c:6d:6c:32:5f:53:89:ce:d8:e9:4f:73:09:
0e:aa:97:22:cf:1e:ce:2f:9d:1b:21:2b:c1:db:8b:45:30:e9:
21:c3:00:d1:6b:17:54:f5:40:05:de:32:7a:ec:2b:fb:4a:ad:
f0:65:23:c5:ab:5e:8c:f5:da:8f:04:36:36:18:ed:a1:f9:38:
ba:59:3e:b7:e8:fa:44:43:24:0d:b4:64:2b:b3:54:78:1e:ca:
95:03:be:01:10:84:16:84:28:4e:00:a3:2c:bc:1f:e6:6f:0b:
a7:67:b7:b4:3b:e5:ca:d6:15:06:3e:d2:97:a6:74:56:82:f0:
db:48:9f:f1:16:96:2b:19:43:87:8e:06:ce:76:ed:a2:4c:67:
92:a7:6e:71:5c:0b:b0:ea:1e:dc:4d:53:e6:34:78:b8:e2:fd:
34:2f:b2:cd:3c:09:d8:df:a1:c7:6f:53:b5:f7:60:86:70:ad:
fb:e5:84:3a:bf:cb:24:29:74:52:cb:98:16:32:6b:b4:0f:fc:
57:b2:85:39:e6:4b:ac:60:75:f0:af:e0:57:94:86:4d:24:ff:
f2:ae:91:86:2c:e5:37:7f:4e:22:de:d9:46:bc:a3:5a:0e:77:
dd:2f:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:50 2025 by rpki-client