Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D5A7D4D9D411EF8DCF9585762E951A.roa
File: 68D5A7D4D9D411EF8DCF9585762E951A.roa (raw, json)
Hash identifier: FGcMeY4/3WmCbrL3CpRunOxmX02QpKWU9XiMYAmJHFI=
Subject key identifier: D1:D6:F1:66:37:46:55:E5:8F:F7:15:73:B7:58:B7:7E:C6:CB:AD:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014329
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D5A7D4D9D411EF8DCF9585762E951A.roa
Signing time: Thu 23 Jan 2025 21:52:59 +0000
ROA not before: Fri 24 Jan 2025 21:52:55 +0000
ROA not after: Fri 28 Feb 2025 21:52:55 +0000
asID: 62240
IP address blocks: 154.194.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82729 (0x14329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:52:55 2025 GMT
Not After : Feb 28 21:52:55 2025 GMT
Subject: CN=6792ba3b-30ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:b6:4a:36:cc:be:2e:47:7d:4c:a8:87:8f:
d5:42:e5:5d:d0:f7:73:f9:e1:f9:15:87:ad:f5:9d:
f8:5b:eb:10:a7:99:1d:55:e9:48:2a:dd:05:77:c2:
27:db:bc:d7:0b:42:bf:cf:bd:42:1c:83:06:0d:24:
1c:ce:16:d2:3a:97:8d:3b:20:73:a7:e0:e8:fb:11:
62:43:b1:43:99:5e:d1:4e:60:23:69:f5:81:11:12:
8c:09:69:29:e7:c8:ba:1d:7c:89:13:8e:e6:45:f7:
5f:72:96:a7:19:44:bd:fe:ad:e2:b2:de:50:81:ec:
ac:01:f2:d4:f7:df:da:a4:fb:99:93:68:5d:b2:30:
69:94:cc:c7:e1:f9:0e:f4:13:a6:38:00:f7:66:49:
03:be:91:6b:06:33:bd:54:7a:36:35:45:0e:cf:5c:
21:2c:eb:6a:58:db:47:92:f2:f4:60:ee:c5:46:14:
35:4b:99:08:b1:87:d2:28:69:1a:d9:19:da:0d:d8:
cd:32:33:86:24:b7:e7:37:d7:73:c9:36:8d:5e:6d:
7a:0f:34:eb:d9:70:e4:6b:f5:dd:62:5a:9b:18:c3:
be:7c:26:f2:5a:0e:f4:73:f2:5a:a0:c9:d4:1d:d9:
3f:9c:ed:10:02:3a:5f:94:1d:45:34:3c:f7:85:38:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:F1:66:37:46:55:E5:8F:F7:15:73:B7:58:B7:7E:C6:CB:AD:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68D5A7D4D9D411EF8DCF9585762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.84.0/24
Signature Algorithm: sha256WithRSAEncryption
78:25:45:91:76:da:4c:f3:2f:8c:ce:b0:fa:f4:2b:a3:97:97:
40:0c:24:93:7e:af:f1:04:ec:04:3a:7e:cf:c5:b9:6b:a8:37:
78:39:04:f5:5d:95:7f:70:20:ae:ba:7d:27:4a:31:f5:dd:80:
ac:b8:51:12:cb:47:d7:52:c1:8f:21:78:4e:66:87:f1:bd:44:
8c:3c:f2:c6:b7:75:39:9d:96:86:f3:84:4c:64:39:83:01:0f:
d6:1c:34:fc:35:58:ec:b5:2e:63:b7:57:62:a0:c1:8c:c0:e1:
d9:06:f4:50:83:a2:db:a8:d9:15:85:5b:7e:73:0a:fd:ba:73:
a5:61:74:6a:b9:da:9c:b4:c1:72:58:73:cc:53:ba:1a:2b:91:
8e:84:08:31:50:9a:33:19:33:81:c3:65:91:0f:a5:66:b3:5a:
5e:4c:0d:2a:1a:ee:88:7f:f8:bf:38:b8:a1:36:4c:c3:a8:61:
0b:2b:93:ab:1d:ec:f8:45:0f:40:07:02:fe:72:6a:fe:82:c2:
e8:b4:d4:17:e0:e2:10:b1:c5:7f:bb:ff:18:26:ea:e8:9e:b7:
2f:e4:32:fd:83:d9:98:01:26:29:2c:86:2c:87:70:ea:66:d2:
2c:7b:d7:e8:17:aa:4e:59:21:3d:b6:c1:49:e3:11:7d:50:d4:
b8:45:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:22 2025 by rpki-client