Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616B6204D9C511EFA6BAF69F762E951A.roa
File: 616B6204D9C511EFA6BAF69F762E951A.roa (raw, json)
Hash identifier: GYpfJxbDynLxDDvW+n4E0nd+CwwlXEnz5uczE2FcIPM=
Subject key identifier: F6:EA:74:4D:F6:69:D1:A6:44:38:99:A7:D8:96:D6:FA:84:63:79:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616B6204D9C511EFA6BAF69F762E951A.roa
Signing time: Thu 23 Jan 2025 20:05:24 +0000
ROA not before: Fri 24 Jan 2025 20:05:19 +0000
ROA not after: Fri 28 Feb 2025 20:05:19 +0000
asID: 62240
IP address blocks: 154.196.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82618 (0x142ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:05:19 2025 GMT
Not After : Feb 28 20:05:19 2025 GMT
Subject: CN=6792a104-2196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:4f:89:33:e9:f8:05:7b:91:73:53:77:04:
19:4b:57:70:37:06:f6:73:bb:d7:81:14:8f:cd:45:
d5:93:74:f1:32:8d:9a:8e:fc:54:52:00:83:8a:74:
ff:83:73:81:36:bd:68:7e:14:ec:37:00:9c:26:d9:
ee:06:0f:af:c0:4b:14:4a:53:09:30:4a:21:5b:64:
d3:dc:0d:22:0b:1f:5d:17:71:c5:42:f3:b5:57:88:
26:3a:02:71:54:d6:84:37:33:57:29:0b:fd:f9:39:
1d:57:b3:3a:3d:6a:a2:0a:2e:1d:08:4b:23:2f:76:
9b:db:49:d6:64:02:09:54:08:4a:17:89:c0:cf:4b:
2f:0f:ed:03:d8:30:2f:24:ef:a3:5e:27:fc:9d:b6:
58:a7:18:0c:01:a2:88:f8:c9:c7:4b:ec:fa:13:7b:
19:fa:c6:da:c9:65:f8:cb:e7:89:c0:8a:db:26:1c:
90:33:c7:ba:0d:4b:97:b0:bc:fa:02:20:52:cc:2a:
3f:63:1d:fb:46:a1:ea:f5:24:6d:fb:e1:10:6c:6a:
38:3a:ef:85:d3:14:c9:6b:94:72:3d:78:51:ec:2e:
22:2d:d3:60:fe:4a:5c:4a:f8:d5:05:ca:f3:7c:c0:
70:d4:85:4d:a5:d7:c7:1a:67:9f:54:48:23:34:cf:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:74:4D:F6:69:D1:A6:44:38:99:A7:D8:96:D6:FA:84:63:79:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616B6204D9C511EFA6BAF69F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:98:32:c9:08:c6:4b:6e:42:fe:30:84:ae:29:1b:c3:c6:
51:0e:79:27:b1:d2:68:7d:51:e9:aa:ea:4e:76:fd:ed:4b:99:
22:f3:29:88:ad:ce:b5:d7:d1:eb:7c:79:18:51:69:8c:3f:a3:
dd:4d:ed:c8:f2:d7:e9:13:a7:f8:50:5d:c4:14:65:cb:bb:b0:
9d:70:b2:03:29:dc:b4:1c:17:c5:fa:09:c4:3c:a4:f7:92:07:
ca:dd:13:12:98:25:25:eb:7d:e4:b3:9e:59:d4:2a:a1:63:b4:
6c:20:b9:f6:85:94:4f:cd:3d:86:1d:96:19:01:cf:82:8a:b2:
bb:c0:4d:c6:0c:eb:69:d7:bc:8e:f5:7f:46:3e:6f:81:79:d4:
c2:14:33:cd:8b:41:f7:42:dc:39:37:bf:e5:84:e9:ad:64:05:
fe:13:a5:41:2a:17:94:f0:59:9b:32:06:57:55:9d:4c:98:6b:
bb:2b:43:01:f1:c2:1e:a5:06:00:14:60:0c:39:9f:9c:7e:f7:
7c:25:7d:df:f0:b3:af:23:31:65:2f:c1:fb:d7:1d:94:41:bf:
e8:73:bf:10:55:41:35:ca:29:0f:a7:ad:14:89:d2:fd:74:e7:
40:6b:13:5d:e4:c0:5c:b9:05:bc:88:5f:b5:fa:85:4b:8a:8e:
7a:b1:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:48 2025 by rpki-client