Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6120A07EACA311EFB5CE4AAF762E951A.roa
File: 6120A07EACA311EFB5CE4AAF762E951A.roa (raw, json)
Hash identifier: mDUNAliPHol1lMoF013jx8mCjILkVZhGmpIlYJqyF9s=
Subject key identifier: 53:AF:5C:65:54:3E:56:1A:ED:B0:47:C4:CA:18:46:A0:EA:5F:C8:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011442
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6120A07EACA311EFB5CE4AAF762E951A.roa
Signing time: Wed 27 Nov 2024 09:38:38 +0000
ROA not before: Wed 27 Nov 2024 09:38:34 +0000
ROA not after: Tue 11 Feb 2025 09:38:34 +0000
asID: 7029
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70722 (0x11442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 09:38:34 2024 GMT
Not After : Feb 11 09:38:34 2025 GMT
Subject: CN=6746e89e-b2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:50:d7:11:69:84:9e:72:df:02:96:c6:a2:
56:3a:78:03:f6:d8:a6:50:60:3b:32:ee:3a:62:77:
15:ae:77:61:13:e2:a1:f5:5d:a7:c9:90:58:83:04:
be:74:b2:61:cf:7e:cd:02:94:c5:e8:93:e5:4d:27:
59:3a:51:25:c6:87:b8:f3:c5:ce:b8:09:c9:76:6d:
9f:7d:2c:12:1f:19:d6:bd:06:01:6d:6b:54:f5:f5:
24:23:59:7c:71:4e:c4:77:de:96:60:b8:41:46:1e:
bd:7e:e3:47:74:f2:d5:41:df:43:93:d8:dc:7f:f5:
8b:fd:7b:f9:4b:ae:43:aa:3c:00:d1:44:de:6f:b9:
93:a6:61:28:f3:b3:d3:17:44:71:22:b6:b2:c1:6b:
0b:20:44:c2:71:89:83:e6:fe:17:59:56:48:a7:86:
9c:14:51:0e:f2:61:be:26:b6:8b:f4:2b:9d:c6:9f:
db:10:3b:d1:8f:00:fd:45:db:03:96:fb:b1:96:75:
b0:02:b4:91:c1:b3:10:3f:c7:e9:d8:68:53:56:0d:
1c:1d:8e:7e:5e:c6:63:ad:77:0b:69:db:f0:a3:ec:
65:76:20:32:df:a5:a0:be:27:c3:5f:c6:b3:9f:1e:
b2:00:1d:6e:a1:88:3f:84:a5:c7:1c:38:00:bb:b0:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:5C:65:54:3E:56:1A:ED:B0:47:C4:CA:18:46:A0:EA:5F:C8:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6120A07EACA311EFB5CE4AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:e2:d9:db:9d:8a:5c:f6:8a:ca:e5:f7:c3:7f:92:90:83:31:
6b:22:ef:4b:0e:e3:0f:25:8a:5f:28:d6:37:d6:a4:b5:5a:cb:
7c:b2:06:c2:e8:11:64:98:6d:ad:f3:f7:6c:06:61:06:5d:67:
84:8a:3a:f0:83:7c:0c:18:5e:0c:3a:8f:5f:4b:09:45:39:ac:
ea:ff:f2:eb:de:e8:3e:aa:03:f1:03:eb:25:86:e5:e4:be:d7:
6c:1c:cd:7f:d3:ee:4f:b0:1e:c3:2a:ca:57:a0:05:69:09:5d:
8e:aa:95:7c:f6:10:eb:da:8f:92:b4:6c:24:0f:ef:d3:87:4a:
3e:5a:52:b0:1c:3d:fd:cc:96:de:1a:cc:85:fe:4e:e4:08:be:
66:7a:84:48:5b:fe:f4:cc:fa:3a:ba:73:26:b3:c9:ec:74:bc:
d2:01:76:26:6f:55:0b:e0:70:5e:1b:e3:e3:a0:6e:67:9f:79:
79:97:c6:17:29:7a:18:b9:39:7a:60:25:e0:a6:fc:84:0f:68:
e4:2c:56:00:35:63:09:72:2e:c0:61:1c:ad:ac:83:fc:03:cd:
98:e6:67:c3:f7:66:8f:42:a9:8e:41:9c:6e:15:6d:79:b3:99:
78:72:77:1b:d1:2d:6a:f8:01:b8:32:c1:ff:66:c1:2d:48:65:
23:bf:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:17 2025 by rpki-client