Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE38D82DA5A11EF8E96D299762E951A.roa
File: 4FE38D82DA5A11EF8E96D299762E951A.roa (raw, json)
Hash identifier: J5aiUpoJetHL0kLgFNsRTAB5XlQjYjTkuG3SN0uXqyU=
Subject key identifier: 4D:89:31:30:29:02:2E:4B:15:6C:CF:82:39:97:CE:84:B1:C3:BD:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE38D82DA5A11EF8E96D299762E951A.roa
Signing time: Fri 24 Jan 2025 13:51:29 +0000
ROA not before: Fri 24 Jan 2025 13:51:26 +0000
ROA not after: Fri 28 Feb 2025 13:51:26 +0000
asID: 62240
IP address blocks: 154.195.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83899 (0x147bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:51:26 2025 GMT
Not After : Feb 28 13:51:26 2025 GMT
Subject: CN=67939ae1-7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:a7:a5:3c:e5:ae:18:ca:b8:bc:40:19:2f:
87:27:e5:6a:e4:71:0e:b0:23:9d:2c:8c:4e:ec:10:
6b:e9:a7:42:6d:61:3e:22:6c:6a:3e:e2:47:e0:79:
73:9a:af:6c:3e:69:ea:87:1c:b4:7b:44:f8:a9:d1:
ec:8b:5a:29:d3:77:66:53:31:f5:a6:a4:7b:7b:33:
cb:26:2c:38:5d:b5:f2:d8:27:8d:7e:c8:bc:27:5d:
6b:d5:af:b5:a3:79:7d:db:24:a8:99:70:03:7c:7c:
53:65:bb:05:d0:33:25:b7:fb:cf:0f:c5:eb:ff:98:
2c:34:0a:63:3d:60:b1:7f:36:b6:bd:c8:0a:22:c7:
32:7c:dd:46:b6:a9:9a:2a:ae:01:aa:f6:d9:28:f9:
c6:2d:ed:e9:b3:9c:dc:38:1a:8c:15:78:8c:4c:0a:
74:6a:fd:b3:af:f5:77:09:45:63:4b:1f:cd:1b:30:
9e:f8:44:e5:b0:80:20:ff:80:b9:d2:7b:25:15:fe:
e7:cc:26:f9:f4:18:da:c9:6a:2a:19:71:97:4b:34:
71:78:d6:01:8e:11:6e:2c:11:d6:02:b5:89:ac:74:
de:07:aa:d4:0b:29:c6:f2:48:11:d8:d0:6a:74:79:
9c:6f:39:c2:de:0c:ec:12:f3:e9:90:41:3b:46:d5:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:31:30:29:02:2E:4B:15:6C:CF:82:39:97:CE:84:B1:C3:BD:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE38D82DA5A11EF8E96D299762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.7.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f9:38:5a:e2:0e:85:66:f0:b3:00:9a:23:c9:e4:05:5c:bb:
09:4b:e4:2c:f3:18:a3:0c:1d:1b:ba:77:15:db:a5:ac:0c:20:
93:3b:42:81:b3:63:f0:cf:b2:ba:54:dd:b4:22:3e:e2:74:99:
31:48:a2:23:16:65:0d:c1:c4:3f:bf:e7:44:7c:7f:60:90:11:
da:14:a3:45:ac:32:14:a7:72:9c:8d:cf:b4:11:07:fc:81:96:
a5:4e:44:ec:9e:a1:aa:75:9c:fb:5e:7e:bb:6a:aa:c9:23:85:
be:33:13:29:1f:f6:3f:dc:0a:c5:7c:04:0b:93:79:e4:7e:21:
87:87:98:0a:de:ae:51:4c:3a:b2:cc:fc:9f:d6:4c:d3:13:c6:
18:b8:00:80:1d:39:f8:90:94:4c:c5:04:6d:e6:cc:73:cb:8f:
25:43:ea:cd:ae:a4:25:8f:05:d4:d2:79:78:2e:2c:23:40:89:
37:c8:64:76:67:06:6c:2a:1f:59:fe:9c:54:b8:ba:62:e8:23:
d8:59:39:c6:f2:b3:cb:ac:03:4e:b9:8e:65:62:41:ad:b9:59:
0a:68:8f:31:98:c0:12:ca:8f:d7:9f:fe:2e:6d:d9:b9:49:a0:
1f:6b:c8:15:0d:c1:e2:c0:cc:50:49:a4:56:9c:82:76:86:c6:
19:e6:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:53 2025 by rpki-client