Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67373CF4DAF011EF9F826C94762E951A.roa
File: 67373CF4DAF011EF9F826C94762E951A.roa (raw, json)
Hash identifier: c6S6zWRIK014cc/JZhlE9MtcUquhzdTzdsaBkSW9z7g=
Subject key identifier: 7D:3A:2B:82:40:0A:C3:35:99:E6:81:27:52:22:06:30:3E:FD:03:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67373CF4DAF011EF9F826C94762E951A.roa
Signing time: Sat 25 Jan 2025 07:45:53 +0000
ROA not before: Sat 25 Jan 2025 07:45:50 +0000
ROA not after: Fri 07 Feb 2025 07:45:50 +0000
asID: 5065
IP address blocks: 154.86.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84209 (0x148f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 07:45:50 2025 GMT
Not After : Feb 7 07:45:50 2025 GMT
Subject: CN=679496b1-d75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:c4:9b:b6:6c:f7:c7:76:fa:51:9b:1a:da:
84:11:93:e4:f5:0d:ae:e6:78:c4:df:93:0c:12:04:
46:5d:4f:74:79:41:b6:30:60:83:39:e7:ad:ab:bc:
2c:f7:43:46:64:5e:06:8d:ee:61:c7:12:db:3b:4b:
f3:57:87:8e:6d:88:61:cb:d7:ed:02:0b:b8:a2:41:
20:6d:2f:59:c8:16:eb:b2:5f:bc:ba:8f:39:5b:1a:
b0:99:2a:2c:87:e9:0d:1b:5d:87:33:43:a4:ce:4c:
c0:14:2b:61:ec:87:37:da:4a:be:d2:ae:92:d2:83:
c0:e2:1c:40:7d:67:8d:d6:cb:bc:2d:c8:1d:b3:c9:
9e:39:ac:d4:4c:28:a7:e4:37:4b:85:18:4d:7a:ed:
f4:ae:87:ed:18:23:a1:55:d5:48:e4:c9:0e:27:1c:
c6:00:9e:9d:cd:32:1a:56:11:de:0b:0f:45:8b:85:
bb:27:c8:a4:47:56:24:1e:9f:f8:55:ad:73:ad:13:
5f:2c:3b:2e:ad:3c:90:e2:9d:e1:a0:e3:35:7f:aa:
22:0d:ce:4e:96:52:0a:2f:6d:00:ac:44:45:10:4c:
b6:f8:22:9a:a0:f6:f7:5d:07:49:c9:e3:a1:d0:a1:
8b:73:88:ab:8a:06:28:d6:23:69:f3:4a:15:ee:d1:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:2B:82:40:0A:C3:35:99:E6:81:27:52:22:06:30:3E:FD:03:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67373CF4DAF011EF9F826C94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.11.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b0:58:f2:ed:d6:65:11:65:a6:5d:93:f7:84:5a:68:bd:cc:
ed:ba:e4:49:59:55:98:4b:cb:23:a9:31:fc:7c:7b:b4:5d:9e:
6d:9e:5c:f3:88:91:81:3d:c8:4a:03:c6:9a:52:c5:80:09:7e:
1b:5f:aa:ea:6e:52:5e:2c:c7:6e:49:05:83:a9:18:e1:db:6d:
3c:eb:86:e3:e7:e1:c9:88:f2:01:9a:57:a3:9f:cc:ba:cb:5a:
7f:60:14:32:80:0b:1f:f4:be:2b:e5:82:69:51:96:08:a9:95:
79:5e:bf:c5:d4:e6:d3:38:66:f9:31:dd:94:23:42:7b:4f:f8:
96:96:e3:a1:b9:ab:5f:37:58:0d:ce:b7:08:64:b6:e0:7e:cf:
1f:8f:54:0b:52:d3:b7:96:dd:a1:ae:f1:3a:a4:58:d9:93:a6:
00:d6:0d:ef:a9:57:6e:60:cf:d1:f7:d9:1c:17:29:05:fe:b7:
06:41:55:aa:da:c6:bf:e2:71:23:2b:28:cd:5e:eb:e0:ca:7a:
f7:83:7d:b3:eb:14:e3:f5:39:ab:e8:30:2d:48:1d:ef:fe:2c:
7c:be:f6:62:ab:c8:f4:4e:bc:f6:c9:81:d3:e3:e0:89:ba:25:
86:20:bb:b7:f3:4b:e1:ac:86:a0:c6:78:64:6c:fd:84:21:46:
6c:08:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:40 2025 by rpki-client