Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578181A4DA4911EFAF78F0A4762E951A.roa
File: 578181A4DA4911EFAF78F0A4762E951A.roa (raw, json)
Hash identifier: IRjLzuY1gzWILpEuTiIcid3Wgelxv7rA1yA0SWYJQUw=
Subject key identifier: B3:C1:64:DB:08:25:E4:DF:3D:E7:31:AB:D5:A4:AF:BC:2F:04:24:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01464C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578181A4DA4911EFAF78F0A4762E951A.roa
Signing time: Fri 24 Jan 2025 11:50:01 +0000
ROA not before: Fri 24 Jan 2025 11:49:57 +0000
ROA not after: Fri 28 Feb 2025 11:49:57 +0000
asID: 62240
IP address blocks: 154.195.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83532 (0x1464c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:49:57 2025 GMT
Not After : Feb 28 11:49:57 2025 GMT
Subject: CN=67937e69-c880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:4e:03:c3:0f:c0:15:de:cf:6e:09:1f:2e:
2e:14:9f:56:27:36:9a:3a:f8:21:1f:c0:e0:67:85:
ed:35:f9:85:9b:60:16:75:77:b3:2e:b8:30:77:20:
18:a1:5a:8f:d2:5b:df:1a:ec:c4:24:93:0a:d1:72:
29:ce:be:01:c2:ab:1f:45:ea:cf:8c:05:f1:82:2e:
85:58:fb:42:17:aa:c6:cf:38:cb:0f:e8:aa:e9:40:
69:0a:5b:59:0f:2b:24:6a:6a:03:84:7c:95:85:5f:
94:7e:98:4c:97:3b:b6:4f:e5:01:55:fc:a6:5c:37:
94:4b:e2:50:ff:1a:ef:1d:e1:b5:f5:26:bf:1b:cb:
12:31:ab:a3:81:1f:6c:d9:e5:38:f3:63:17:2b:f1:
38:51:fe:7f:cf:b6:9a:3e:ba:bd:e3:6b:81:b2:7e:
d7:27:cf:ac:b7:b6:97:1a:95:14:d5:ac:ef:34:fd:
48:fa:d6:33:8a:f6:b9:c0:6b:2b:96:7e:16:97:23:
4d:8a:b2:a6:25:7a:91:9c:f5:33:77:23:87:04:ad:
49:0a:99:e1:47:41:82:ab:77:5f:f0:32:14:a2:e2:
d9:dc:01:d3:eb:a4:ba:5f:99:af:2b:19:9f:ff:29:
75:53:79:34:41:2b:c0:09:ae:9d:86:2c:16:95:e8:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:64:DB:08:25:E4:DF:3D:E7:31:AB:D5:A4:AF:BC:2F:04:24:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578181A4DA4911EFAF78F0A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.111.0/24
Signature Algorithm: sha256WithRSAEncryption
04:89:ab:a8:ed:14:91:93:12:f8:56:d7:f3:d7:ef:18:6a:42:
aa:cb:4d:dc:8e:85:92:e2:ab:46:47:3f:2a:2f:f6:33:c0:4c:
ad:f0:bb:3b:43:38:fe:aa:ba:16:e6:53:b0:ed:3e:1a:5b:ac:
2e:d3:67:97:27:a8:c2:5d:21:de:bf:66:a3:31:ff:6b:a3:7f:
a3:f9:01:c8:63:4e:ef:79:c2:cf:74:a5:15:f7:4b:34:e9:94:
08:fa:73:4f:a8:a1:38:fa:68:be:8c:fd:81:72:74:ef:e1:ed:
a6:44:7e:17:26:90:ea:7e:91:f0:60:e0:ed:e7:19:59:ab:f4:
c1:82:9c:17:07:15:36:51:76:2c:e2:29:f5:2e:98:f6:04:00:
af:51:4f:ad:92:fa:5d:9c:49:0c:85:2f:46:e5:91:00:3d:9b:
5d:6a:5a:5f:15:fd:37:8e:7f:50:a3:3b:d5:1a:b7:37:f0:cd:
09:b5:04:23:81:3a:be:99:6c:47:77:8f:eb:af:e1:51:5d:92:
af:1a:50:48:1d:22:65:b7:49:cd:1b:fb:ac:eb:97:a1:62:fc:
d2:dd:8d:42:c3:33:0a:f6:26:14:53:cf:a5:ab:58:f0:c4:3a:
bd:1d:0c:a9:5c:26:76:64:d9:7b:09:48:09:b1:2c:5d:b5:a7:
23:f3:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:37 2025 by rpki-client