Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E66D152D9C311EF8DF82894762E951A.roa
File: 6E66D152D9C311EF8DF82894762E951A.roa (raw, json)
Hash identifier: wxgqafzUUhpABsIOhKVgGKh+Mkeglg1QSPBrO2wUktg=
Subject key identifier: D6:93:CC:0B:5D:FE:07:A3:2B:63:34:2A:A9:E9:0F:12:04:4A:A8:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E66D152D9C311EF8DF82894762E951A.roa
Signing time: Thu 23 Jan 2025 19:51:27 +0000
ROA not before: Fri 24 Jan 2025 19:51:23 +0000
ROA not after: Fri 28 Feb 2025 19:51:23 +0000
asID: 62240
IP address blocks: 154.196.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82604 (0x142ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:51:23 2025 GMT
Not After : Feb 28 19:51:23 2025 GMT
Subject: CN=67929dbe-0d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:e1:ec:69:fe:8a:b3:8c:ca:b4:4f:0e:cd:
d9:12:4e:6e:0f:6b:a9:28:09:ca:eb:52:68:4c:00:
07:d5:f9:6c:6d:2a:3b:cc:9d:d1:25:30:80:b5:33:
d1:54:53:dd:3f:9b:30:28:98:03:05:00:55:dc:0d:
00:5c:88:35:e4:ff:8e:ca:47:b7:78:5e:1c:59:14:
99:86:3e:f9:31:d2:11:4e:38:0f:1c:e5:ca:e6:7f:
8b:38:a9:7d:63:64:fa:51:7a:1c:d8:30:c1:d4:27:
89:70:ee:6f:e0:20:2e:1c:7b:ab:a2:b6:45:59:70:
10:18:c7:98:c9:96:e2:03:93:d3:89:52:48:32:d2:
36:5f:ae:a9:9a:b0:8a:e9:b8:51:f3:04:a2:d1:d9:
c8:d5:20:b9:af:2a:2a:cb:19:91:fe:f5:65:bb:e2:
d6:0d:e0:45:f2:29:57:40:a6:8e:6e:43:09:dc:6e:
40:8e:72:38:1d:eb:19:88:44:8b:87:9e:d9:01:09:
54:e2:05:f8:a8:0f:ad:15:f9:19:16:76:ba:cb:dd:
58:bb:c3:35:8b:54:3d:e2:6a:b1:15:c3:40:a6:2e:
08:34:a8:fc:93:a4:0f:bd:e5:c5:90:7f:29:24:4f:
40:dc:5c:8e:db:05:a6:b2:f8:0f:d9:b3:e7:2c:9b:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:93:CC:0B:5D:FE:07:A3:2B:63:34:2A:A9:E9:0F:12:04:4A:A8:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E66D152D9C311EF8DF82894762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a2:4e:d5:e0:4e:47:0b:20:27:69:2c:e4:04:4c:51:cb:26:
ba:39:fd:93:d4:38:8a:e4:66:db:3b:b7:62:00:04:f4:52:d3:
c7:34:4f:3b:af:0d:ad:ce:90:01:e5:c2:a6:0a:3c:36:7e:24:
28:a4:93:89:23:11:d6:98:69:2b:72:e6:5b:ae:eb:86:09:78:
4f:9a:15:69:0f:23:e3:32:9d:af:4c:3e:7d:ad:b9:17:e2:9f:
22:93:a0:3c:e7:7d:61:c7:68:73:8b:66:d5:5c:cc:70:12:96:
49:fa:c6:33:84:41:89:ab:50:1a:3c:14:63:11:0e:08:9e:bc:
8b:24:03:4c:96:55:90:a4:9d:69:92:90:86:c8:fd:18:d4:6a:
fb:d7:31:56:86:e1:03:d0:80:1d:fe:5d:ff:d6:17:42:d3:88:
f7:fe:9c:1b:bc:d3:15:30:2c:a9:8a:13:fd:ca:f9:61:1c:5f:
5e:99:19:23:cb:17:ac:5f:d3:37:03:d2:b2:90:55:6f:50:1b:
ea:8f:0e:ae:99:ec:ae:bb:8b:39:b6:4e:7c:dd:f7:a0:9f:b9:
11:a9:89:dd:36:91:68:e9:96:75:e1:26:36:dc:ef:91:ac:cd:
b4:06:be:92:12:cf:7a:03:ac:1c:53:df:8d:e9:54:ec:d7:8a:
8d:bf:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:24 2025 by rpki-client