Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/477A5974CC0811EFBE882982762E951A.roa
File: 477A5974CC0811EFBE882982762E951A.roa (raw, json)
Hash identifier: kZ/8pOScsRV9x07wnSG/VeeEhdDbW/3kJXSBgezW6lg=
Subject key identifier: A7:5E:FE:BB:93:4F:47:FD:DE:18:60:1F:35:50:5A:02:5E:69:46:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/477A5974CC0811EFBE882982762E951A.roa
Signing time: Mon 06 Jan 2025 08:29:00 +0000
ROA not before: Mon 06 Jan 2025 08:28:57 +0000
ROA not after: Tue 11 Feb 2025 08:28:57 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79288 (0x135b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 08:28:57 2025 GMT
Not After : Feb 11 08:28:57 2025 GMT
Subject: CN=677b944c-10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:3d:5a:90:13:f7:b1:19:ad:25:6a:51:06:
4c:a9:43:77:ba:a5:a5:20:58:c3:ce:ce:ca:5e:25:
80:db:f5:1f:49:ba:fc:3c:77:47:35:e1:3f:ad:ae:
34:e9:ed:ba:31:85:61:29:ca:6b:f5:b6:e4:b9:ad:
c2:e2:1b:2c:ad:c1:7c:45:28:e4:a2:ed:8f:7e:40:
99:1d:32:f7:77:fc:65:89:ef:13:9b:03:4b:b9:43:
92:a8:7f:0c:15:e5:a8:29:ae:92:61:0f:12:e6:dd:
88:9c:0e:06:0a:ab:f1:ed:76:8b:a0:83:74:14:4c:
33:17:95:bd:8a:73:06:ff:33:94:ee:2c:c6:ab:ca:
96:68:53:0f:47:c2:24:73:89:cd:af:70:84:d5:75:
ba:bf:3c:c5:1b:4c:0a:7a:86:77:5e:2f:ff:a8:1d:
b2:13:d8:42:a6:48:92:11:62:4a:b5:3b:2a:f0:6a:
c8:5f:7a:97:02:c1:24:c8:f6:42:0f:ff:8b:ce:10:
70:ea:7d:84:cf:61:85:4f:94:12:d7:9b:71:32:11:
17:c7:a8:96:a4:e9:18:a9:e1:27:a7:c7:3e:43:e3:
e8:4e:40:9a:e4:17:1d:91:fa:e9:f1:85:56:2a:6b:
5e:e6:ee:04:57:53:a0:53:e5:d3:00:01:08:ef:b0:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:FE:BB:93:4F:47:FD:DE:18:60:1F:35:50:5A:02:5E:69:46:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/477A5974CC0811EFBE882982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:32:bb:b6:f5:72:75:a2:b3:57:04:a3:4f:01:cb:ee:b6:7d:
d2:ed:ac:39:9a:17:ff:c8:e5:ba:5c:e1:5b:a5:53:cf:7b:29:
77:f7:e8:4a:b5:94:35:9e:18:f4:91:2f:6e:66:02:9a:99:65:
f9:5d:1d:5c:44:8a:98:3e:97:46:24:10:cb:8e:1d:7e:b8:8b:
47:2a:d7:42:e7:30:e3:e6:82:af:b3:6f:74:36:79:9a:81:5c:
57:5b:60:9f:06:d9:94:e8:4a:f6:3a:81:57:ef:2d:4f:b2:5c:
db:70:fe:77:1f:41:ae:72:1b:d0:b7:16:0d:c3:1b:fd:18:29:
07:28:88:58:db:32:d9:a0:07:2a:4e:49:c9:8c:95:f2:35:f6:
43:45:4b:28:0d:e4:f9:96:8b:34:38:14:c2:6b:43:10:82:b9:
b7:83:d7:b2:a7:bf:8c:db:9f:09:fd:ac:3d:7c:c8:c4:78:b5:
20:79:34:eb:83:a2:b8:9d:6d:79:68:cd:77:6b:75:05:e0:3a:
75:62:d8:e8:d6:3a:1c:02:9f:4b:57:39:75:3b:21:a5:03:1f:
26:cf:5a:32:87:81:c6:95:59:79:a8:4f:2e:cd:d7:a3:3e:44:
d6:40:51:63:43:fc:7a:6c:76:e9:b9:09:64:9b:d2:2f:37:0c:
e5:37:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:19 2025 by rpki-client