Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49461BB0D97F11EFAD994B53762E951A.roa
File: 49461BB0D97F11EFAD994B53762E951A.roa (raw, json)
Hash identifier: sjRA7B1AThZ659zlMBqksZVwLcETQLzYMSQRer5HhA0=
Subject key identifier: 6F:1C:45:6C:F9:E9:09:B5:7A:21:3F:B6:F1:FE:9E:05:2C:1D:7D:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49461BB0D97F11EFAD994B53762E951A.roa
Signing time: Thu 23 Jan 2025 11:43:39 +0000
ROA not before: Thu 23 Jan 2025 11:43:35 +0000
ROA not after: Fri 28 Feb 2025 11:43:35 +0000
asID: 62240
IP address blocks: 154.195.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82361 (0x141b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:43:35 2025 GMT
Not After : Feb 28 11:43:35 2025 GMT
Subject: CN=67922b6a-a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:21:92:3c:44:83:21:ba:4d:b5:ff:3c:3b:
20:97:8e:aa:46:7b:25:de:11:43:21:ae:c6:e1:ea:
1a:c4:86:50:76:36:01:44:80:ac:69:73:a8:23:6c:
63:10:19:43:75:3e:b4:9e:19:76:8a:da:d4:d0:d7:
bd:99:e3:d9:b8:e3:b5:5e:18:33:67:52:32:b4:5d:
16:8d:af:a0:4b:d7:ea:32:68:16:8b:21:67:14:bd:
21:2a:e7:bb:90:6d:b9:10:36:70:06:00:ef:bc:b1:
6a:4b:60:58:b8:2e:d4:5a:f9:c8:00:95:3e:d5:7f:
ac:19:b4:7f:ad:4c:88:a4:1b:69:73:b9:67:c9:78:
2e:0f:af:ab:33:6d:ab:55:c1:ee:43:7a:6f:f4:63:
6f:0a:64:15:30:45:61:5e:64:97:f1:71:30:cb:11:
aa:5e:49:b2:79:6b:48:84:ad:03:ba:db:1c:c2:72:
1c:07:a4:ad:93:11:38:b2:8e:1f:0b:65:a4:80:01:
9b:2e:2e:9f:72:01:09:98:9b:0c:50:ca:31:53:2b:
f2:15:06:4b:6f:1f:d9:86:80:06:92:9e:53:93:ec:
ee:b3:0b:f9:a7:1d:ca:ce:03:01:aa:fd:62:2a:af:
6f:59:02:81:c8:24:81:45:5b:a7:80:d4:77:b8:e3:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:45:6C:F9:E9:09:B5:7A:21:3F:B6:F1:FE:9E:05:2C:1D:7D:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49461BB0D97F11EFAD994B53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.167.0/24
Signature Algorithm: sha256WithRSAEncryption
46:52:33:a5:fe:c6:01:1a:9c:ba:57:09:2e:f7:0b:94:7a:a2:
f8:2a:d6:2f:30:70:32:45:4b:0a:d9:0b:ad:af:e8:7e:38:99:
86:bc:b1:a0:eb:10:ba:f1:2f:07:d6:7d:eb:f8:8c:45:fd:c0:
16:bf:1d:be:2a:62:9a:59:f2:b6:6b:f4:1f:c2:6d:b7:4c:52:
2e:15:b3:54:9a:6f:7d:40:58:8f:4f:b7:f9:2d:b7:8b:4c:7a:
e0:71:5f:5f:6e:a8:7b:32:de:28:b9:bd:b6:68:99:8b:4d:24:
c5:1d:6d:ae:a6:8a:8e:7f:0e:e6:26:53:1e:44:fe:be:ef:92:
ef:b2:90:de:3b:11:89:49:85:23:d0:5f:36:1e:bf:d2:b0:64:
64:7a:25:31:41:4c:3a:e9:27:a5:76:81:80:d9:fd:b8:d5:0f:
6b:14:57:90:fd:93:26:5f:98:ca:8f:d0:9e:95:f2:ac:58:ab:
5a:8b:1e:7a:0d:e7:c9:2f:3f:95:8f:45:92:90:8f:8b:bd:f0:
2f:32:4e:65:ec:ef:51:a5:e4:50:97:4d:44:da:33:1a:b2:4e:
c7:fc:a7:fc:3d:b9:54:44:b2:7d:e4:43:54:49:7b:ef:00:a9:
61:49:15:76:2b:6b:e9:16:28:8f:42:93:d7:d3:e4:b7:ad:14:
d4:8e:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:53 2025 by rpki-client