Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A00D3FADA4211EFBF20D676762E951A.roa
File: 5A00D3FADA4211EFBF20D676762E951A.roa (raw, json)
Hash identifier: k0immTaYFW7zf/RzEZd5ZOVFVwF9DdimSh4P2EnuxKo=
Subject key identifier: F8:C3:49:5E:D5:9C:F6:96:01:6C:ED:00:91:F1:2C:0F:6C:16:76:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A00D3FADA4211EFBF20D676762E951A.roa
Signing time: Fri 24 Jan 2025 10:59:58 +0000
ROA not before: Fri 24 Jan 2025 10:59:55 +0000
ROA not after: Fri 28 Feb 2025 10:59:55 +0000
asID: 62240
IP address blocks: 154.196.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83416 (0x145d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:59:55 2025 GMT
Not After : Feb 28 10:59:55 2025 GMT
Subject: CN=679372ae-ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:6c:82:5e:8b:58:81:d3:3d:a8:92:3f:b0:
37:91:cc:0b:4e:3f:48:d5:e4:d6:56:10:32:98:ef:
2b:da:6b:95:5b:0d:31:f7:32:bb:86:fb:d9:35:a2:
cd:b8:bc:37:8d:03:ae:e5:94:20:ee:db:de:e3:c4:
f8:f4:ae:10:fe:f4:9d:ef:97:79:e3:34:fc:55:3c:
0e:29:39:eb:c1:57:20:71:ac:ff:43:58:a1:39:dd:
42:36:f3:73:ef:51:4f:6e:1f:44:5d:ce:5b:0c:84:
f2:f9:26:14:a4:22:6d:89:d2:d6:02:40:0a:e3:eb:
c9:86:24:06:77:4f:28:a0:fe:5b:82:c0:be:77:eb:
b5:b7:ab:3c:a7:f5:09:e8:0f:06:e6:e6:a3:31:04:
b8:0c:31:b5:af:08:20:d8:94:8a:43:18:8f:f7:a7:
6d:8c:ec:64:08:18:c6:74:b4:bd:aa:51:e9:cc:8b:
e8:9c:12:cc:a4:60:be:82:2d:86:52:91:6b:f7:cf:
b9:fc:4a:bd:9c:ea:be:98:b5:6f:57:4e:95:83:d8:
02:ab:5a:db:d5:f8:25:57:8b:d2:ea:26:64:ae:c1:
c9:39:f7:cd:0a:89:2c:80:b1:7b:18:3c:8f:f9:98:
41:72:14:46:90:23:c8:f5:fe:7c:ee:cb:24:55:67:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:49:5E:D5:9C:F6:96:01:6C:ED:00:91:F1:2C:0F:6C:16:76:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A00D3FADA4211EFBF20D676762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:32:25:78:a1:fb:f4:06:22:6e:54:f2:06:15:a8:3e:1d:97:
34:f4:c3:53:a6:55:3c:97:20:ca:ac:8c:57:e1:9d:ac:28:2e:
e3:72:ae:7f:1c:9c:92:0c:7e:f8:97:11:0d:80:44:e8:aa:6b:
2e:ec:7f:5d:e3:18:6e:59:ab:28:a6:5a:e0:e1:1f:d9:d2:31:
78:29:fa:7f:70:55:3c:d5:dc:2c:f1:17:84:02:ac:c6:17:40:
c7:e4:3e:0b:32:15:02:3f:ce:5f:f2:7f:6a:c1:41:81:80:b7:
51:56:4b:45:9d:bb:7c:5c:be:3b:38:0e:fa:70:52:e3:73:02:
26:67:d9:fc:de:d1:2c:dc:4c:a2:a9:ab:4a:1d:d7:5f:08:ae:
e3:ec:74:cc:fc:7f:d1:f1:43:30:d5:71:f7:ac:2a:d1:05:42:
9a:ce:bd:45:77:59:88:dd:dd:9a:84:f9:b2:df:2a:2b:09:f5:
88:60:a1:ad:95:a8:ae:7e:29:63:71:43:5a:5e:ec:b4:cf:85:
7b:d7:81:fd:5f:d0:b4:29:65:aa:96:34:40:f0:1e:00:0f:c4:
5e:27:84:91:95:be:2b:86:7c:2a:aa:ec:66:bb:7a:1e:5c:4a:
64:a1:85:e4:3a:89:bc:45:30:27:90:7b:ed:cf:13:b6:62:5e:
11:b1:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:56 2025 by rpki-client