Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A07ED58CC2C11EFB6D12665762E951A.roa
File: 5A07ED58CC2C11EFB6D12665762E951A.roa (raw, json)
Hash identifier: qezG9BS8rUDt/5Y1qZQVNlnV/zOEQZtGwMITc669joI=
Subject key identifier: FB:FF:CD:EA:F6:FD:3C:83:67:55:F6:3E:F2:B1:A1:C1:03:1F:49:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A07ED58CC2C11EFB6D12665762E951A.roa
Signing time: Mon 06 Jan 2025 12:47:14 +0000
ROA not before: Mon 06 Jan 2025 12:47:09 +0000
ROA not after: Thu 06 Feb 2025 12:47:09 +0000
asID: 151800
IP address blocks: 154.197.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79396 (0x13624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 12:47:09 2025 GMT
Not After : Feb 6 12:47:09 2025 GMT
Subject: CN=677bd0d1-2f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:d5:ae:0b:f7:68:e4:ca:43:ec:ed:46:9f:
31:dd:14:52:28:50:3d:7e:94:72:db:a9:97:a9:67:
6d:77:95:87:5c:f7:10:34:59:2b:c4:b7:23:bb:49:
22:a1:50:e7:f0:71:dc:be:15:fc:7c:a3:5c:0a:c0:
30:22:82:ae:90:2e:49:5a:d5:7c:2d:1c:46:24:9d:
75:99:ee:b2:63:ee:36:a0:87:05:10:b7:8d:6e:71:
68:d9:51:c6:4c:1a:d3:81:03:90:96:8a:05:64:e4:
80:44:5e:28:14:b1:e9:9c:c5:07:2d:d5:c8:9c:9c:
c9:08:61:80:0c:56:e4:c0:79:d6:76:19:2f:5d:75:
bd:ef:a5:a7:89:17:3d:77:83:e3:5b:62:18:9d:86:
6a:ae:62:aa:3e:db:5b:3c:37:a4:96:2e:57:b4:73:
73:8d:68:a4:9b:b2:16:6e:f0:4a:b6:8b:e0:49:f6:
fd:26:3c:10:31:df:cc:7c:79:d9:43:fe:03:19:83:
a4:2e:e5:2a:6e:64:d4:02:77:56:a3:ee:8a:92:21:
44:ab:76:f0:85:02:9b:8e:13:7b:22:50:3d:9f:91:
10:ac:f6:63:3d:18:4b:b8:ea:44:b4:12:89:f5:6d:
7e:f0:4c:08:6e:79:49:5e:af:dc:81:ef:6c:d8:e2:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:CD:EA:F6:FD:3C:83:67:55:F6:3E:F2:B1:A1:C1:03:1F:49:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A07ED58CC2C11EFB6D12665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:97:06:68:7b:32:63:92:44:0a:89:cc:3c:65:4b:3a:7c:4c:
08:0d:4f:42:79:c0:4c:3d:6d:d5:67:77:78:dc:9e:e3:c2:cd:
11:52:d5:3a:50:5f:54:3c:87:47:ae:d2:73:c2:07:b9:24:d1:
e1:cf:2a:46:72:5b:0c:76:b1:15:f3:2f:e9:81:46:e0:42:42:
00:b2:01:c1:91:80:43:4c:4e:b1:5b:c9:9c:cc:ee:ff:43:d8:
97:cc:24:c9:0d:11:17:89:3d:e7:de:99:14:d0:63:3f:3e:5a:
50:15:78:8a:b8:d1:03:b6:82:b5:95:2c:69:bd:43:19:26:34:
19:c6:76:12:29:80:6d:cb:ca:be:d1:4a:00:3d:bb:e1:1d:88:
85:86:79:a7:61:5e:de:fe:71:1d:04:92:d8:5a:01:b8:2b:dc:
8d:3d:4d:aa:99:0e:40:ce:97:07:e4:92:56:e2:7c:16:2b:0b:
65:8f:e8:cf:67:c6:fb:90:a3:05:d7:94:53:a7:c9:41:dc:ee:
d6:c8:b7:56:5c:30:e0:20:27:5b:4b:8a:42:40:c9:b5:ee:a4:
00:57:55:54:48:36:46:9d:34:0f:ec:25:47:94:a4:0a:a6:35:
41:d1:0a:ad:1b:91:af:bc:17:8c:8f:37:d8:14:9e:c0:85:fb:
d6:ce:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:58 2025 by rpki-client