Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF5CE12D96A11EF9684D046762E951A.roa
File: 6CF5CE12D96A11EF9684D046762E951A.roa (raw, json)
Hash identifier: L0fBGp577u2KVxu+jmHt9XxWj4BSJcBMWIG29o1oAMU=
Subject key identifier: 73:CE:99:8C:20:C1:A7:DC:44:DF:3A:E7:B5:CA:24:99:E1:09:B5:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF5CE12D96A11EF9684D046762E951A.roa
Signing time: Thu 23 Jan 2025 09:14:19 +0000
ROA not before: Thu 23 Jan 2025 09:14:15 +0000
ROA not after: Fri 28 Feb 2025 09:14:15 +0000
asID: 62240
IP address blocks: 154.194.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82138 (0x140da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:14:15 2025 GMT
Not After : Feb 28 09:14:15 2025 GMT
Subject: CN=6792086b-78dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:28:14:77:16:96:f7:a1:0a:34:c3:25:ef:
08:56:01:b8:05:45:8f:8e:3f:e5:ab:89:7a:80:be:
f5:e2:2d:84:51:56:6d:c6:b9:c0:3c:e6:3b:14:74:
f5:a1:55:19:56:a5:59:8e:db:bc:69:7e:72:8e:71:
1f:ae:8e:cf:d5:6f:33:62:53:d3:2d:ca:3e:6c:18:
2f:99:da:17:83:e6:25:f3:c1:34:53:c0:da:25:39:
47:68:af:2d:47:24:45:09:4b:53:2f:57:d9:09:d1:
72:2e:4a:c9:da:04:8a:29:f8:65:8d:56:af:c9:d3:
33:2f:63:f2:66:d3:93:9b:5f:54:97:76:ca:6c:a6:
06:52:5e:2c:97:57:9a:9d:ec:2a:fb:28:43:66:58:
af:1f:f8:b7:49:fe:9d:91:98:9c:89:c3:69:ce:bf:
2c:59:15:93:37:2a:a5:3c:2f:1a:59:4a:d2:b7:a6:
b6:a5:79:a3:5e:67:4b:41:9d:5a:82:5c:40:0c:f4:
41:7c:32:a1:09:f4:02:01:f5:eb:3e:ef:67:3b:7e:
60:19:c6:55:55:0f:7c:81:9a:af:f4:93:53:7a:02:
bc:f0:30:62:b7:4a:af:5a:8c:30:29:a2:1b:7d:3c:
30:27:7f:5b:11:99:f6:db:b2:85:ac:28:40:10:2a:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:99:8C:20:C1:A7:DC:44:DF:3A:E7:B5:CA:24:99:E1:09:B5:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF5CE12D96A11EF9684D046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.103.0/24
Signature Algorithm: sha256WithRSAEncryption
39:47:ab:4a:2f:be:71:54:ee:bd:13:2e:1d:6e:33:fa:aa:0c:
b6:6f:31:aa:80:2e:3a:73:59:58:b4:5a:98:15:f3:55:e9:82:
18:30:c0:ec:17:5d:48:03:1a:7b:9d:22:db:07:55:60:2b:8d:
76:2c:aa:6f:fe:fe:de:3d:76:f0:21:63:92:7d:e5:13:6f:f5:
f8:d4:e6:68:be:88:58:e7:f9:8a:d2:0f:e5:18:79:8d:72:1f:
25:0c:69:14:3e:52:01:0e:78:c3:63:13:3a:68:fd:f5:23:6c:
47:fe:6c:0d:9b:63:d1:2d:29:7e:15:24:5c:37:70:c4:dd:73:
dc:e6:8d:2a:82:32:e3:6b:40:dd:1e:33:07:2e:ad:63:44:0c:
d9:15:46:37:51:21:10:36:16:3c:1d:00:a4:f5:03:ed:17:57:
eb:5c:af:8b:15:eb:0c:c8:cc:21:5b:f9:77:71:28:ce:ec:4d:
c2:fb:3e:90:b1:82:34:47:8d:ad:f3:f1:0e:a5:48:19:22:07:
34:4d:ca:8b:1c:e8:95:71:d2:75:4e:ad:2b:6e:06:3c:a3:b1:
4c:13:08:a8:34:37:90:08:03:bf:01:81:b6:a8:13:79:ff:fe:
ae:17:bd:d4:95:5b:c7:5f:93:0e:24:8e:af:56:be:3c:69:1c:
79:d1:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:26 2025 by rpki-client