Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D3778D57711EFBCFBDA45762E951A.roa
File: 429D3778D57711EFBCFBDA45762E951A.roa (raw, json)
Hash identifier: gDgUiOSBFWlVDqm2ZuMY1v4mQPwe9qFNd3YUf8gH5I0=
Subject key identifier: 74:92:DD:E2:9B:28:66:C0:D3:8E:36:AD:1F:F6:39:6E:03:E7:88:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D3778D57711EFBCFBDA45762E951A.roa
Signing time: Sat 18 Jan 2025 08:36:07 +0000
ROA not before: Sat 18 Jan 2025 08:36:03 +0000
ROA not after: Sat 22 Feb 2025 08:36:03 +0000
asID: 18013
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81362 (0x13dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:36:03 2025 GMT
Not After : Feb 22 08:36:03 2025 GMT
Subject: CN=678b67f7-9bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c6:ff:a0:e5:b7:7f:64:48:d6:5a:d7:c1:c5:
0a:18:b9:d0:e4:eb:b9:bd:86:79:22:16:e4:3a:12:
72:e5:29:f8:ba:1c:87:78:e5:fc:82:1b:5c:6a:f4:
2f:46:a1:3e:26:d8:db:f7:63:69:76:ed:03:f3:8d:
bd:9d:53:8e:cf:ca:54:4c:87:1e:10:59:59:39:6d:
97:c6:cd:9d:f2:0f:95:c9:2b:b7:d9:6f:64:d3:e8:
6f:5a:f1:00:63:9e:3e:ad:44:94:9a:f9:b5:2c:2a:
35:a8:96:8f:3f:b0:92:af:aa:70:a4:6e:40:38:fa:
ae:f2:2d:ee:c6:71:94:c9:cd:21:0c:72:36:a8:e0:
b6:49:47:b3:d8:3a:ba:b1:80:9a:6d:ca:fa:81:fb:
34:62:b3:01:14:b8:1f:45:c3:5c:57:36:6d:2b:09:
13:24:57:2d:b4:2e:f5:2f:68:13:80:b4:23:4c:a7:
06:df:4e:f7:18:0b:cd:67:70:cf:4c:dd:62:eb:f5:
ea:49:6d:72:05:c5:64:7a:bd:f9:94:53:fb:96:57:
b1:a6:20:a0:7e:7d:f7:27:6f:cf:06:3c:31:06:6e:
6b:ed:de:1d:b3:7e:eb:9a:d2:4c:08:7e:4c:cc:4c:
80:f8:a2:17:82:fc:e4:f4:fe:7f:1c:1b:f9:78:c5:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:DD:E2:9B:28:66:C0:D3:8E:36:AD:1F:F6:39:6E:03:E7:88:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D3778D57711EFBCFBDA45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:2a:9d:3f:98:6a:f8:b4:b0:4e:6d:bb:f2:5f:4e:a0:09:06:
4b:02:ad:e4:f3:c7:0c:19:71:38:00:53:cb:5d:4d:cb:fc:fc:
f8:1c:28:b7:e2:31:47:e1:bd:b6:6f:0b:bf:1f:36:0c:2b:73:
e9:88:62:ce:57:66:04:2f:d4:99:c6:80:2b:f0:28:6b:be:96:
0d:cb:7f:12:11:34:c0:0f:13:56:84:35:f9:a3:0a:af:a9:fd:
7b:81:69:e2:64:78:f7:2d:14:ca:08:f3:fc:88:79:06:bf:54:
fa:9b:0d:61:7e:73:47:31:b9:03:2f:04:65:39:5b:24:7a:4a:
d7:0b:7a:30:be:35:bd:09:ae:e0:5a:a8:c5:85:47:bc:21:c0:
88:53:89:02:59:30:82:76:cd:46:73:34:1d:26:4e:8e:51:07:
40:5f:dc:d1:bc:77:f8:f5:ba:e6:f3:e5:49:4a:5b:ba:19:71:
af:0d:cf:98:a4:73:de:30:f0:72:f1:ad:2d:e2:8a:53:21:8c:
af:ba:cc:fe:be:02:6a:fc:bf:bf:c3:a2:a7:73:05:20:f9:6a:
f5:21:b2:67:79:27:d3:9b:5c:57:32:90:a9:cd:c1:8f:ad:49:
de:2d:c4:1c:e0:33:df:65:ea:30:13:6d:cc:f5:e2:ac:02:08:
76:27:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:23 2025 by rpki-client