Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7289A760DA4411EFB5CB9984762E951A.roa
File: 7289A760DA4411EFB5CB9984762E951A.roa (raw, json)
Hash identifier: CBxW2XFUd4pU25jyoUnKjijithpymFZ3eOtRmfghBMc=
Subject key identifier: 9A:4A:A6:6F:A6:47:CC:A5:D8:3D:D5:E6:7E:CE:1A:9F:F2:84:95:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7289A760DA4411EFB5CB9984762E951A.roa
Signing time: Fri 24 Jan 2025 11:14:59 +0000
ROA not before: Fri 24 Jan 2025 11:14:55 +0000
ROA not after: Fri 28 Feb 2025 11:14:55 +0000
asID: 62240
IP address blocks: 154.196.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83446 (0x145f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:14:55 2025 GMT
Not After : Feb 28 11:14:55 2025 GMT
Subject: CN=67937632-204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:cf:89:a9:ad:4b:df:28:b5:2d:81:bc:31:
54:d6:d5:c6:c9:a8:08:0b:fa:32:b9:07:8f:4c:c0:
70:b3:ab:02:b4:64:8a:70:49:20:b5:58:22:ba:9d:
1b:0f:e8:68:19:bd:94:e2:18:cf:1b:4e:85:d3:04:
cc:83:d7:48:44:f7:96:9a:f2:90:04:fa:51:f7:58:
2a:86:39:a3:b2:06:e6:bb:6f:04:b0:4c:e5:9f:8f:
e3:3e:65:41:73:63:06:05:cd:f5:4c:64:cd:70:17:
0b:1b:7b:da:fb:8e:98:83:99:0c:ab:26:ad:b8:11:
c9:7c:9d:16:07:ff:45:e0:62:6a:f8:71:1d:60:4e:
70:4c:cd:b5:ac:df:46:e1:9b:b0:6a:e3:e6:21:ae:
15:81:e0:89:de:ad:de:8a:d1:c2:ec:5d:d0:89:28:
ca:dc:2e:61:d6:95:1f:ba:8e:bd:4d:c7:ae:61:0b:
41:bb:c5:7a:29:ee:ad:0b:60:35:50:33:59:88:dd:
c4:c2:30:cd:62:0a:f3:58:35:d7:48:ee:d8:4a:ed:
74:27:7a:10:7c:39:ff:71:1f:69:da:2d:0d:0c:f1:
91:e1:03:16:43:d2:f2:d6:3f:ea:51:74:7b:19:b8:
fe:88:6a:6e:22:0c:6f:d2:7c:9a:bd:49:52:f3:95:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:A6:6F:A6:47:CC:A5:D8:3D:D5:E6:7E:CE:1A:9F:F2:84:95:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7289A760DA4411EFB5CB9984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.78.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2c:28:65:2d:12:db:8a:d5:ca:ab:2c:21:05:93:5e:45:5a:
68:6d:18:14:e7:f7:71:7a:8c:77:62:40:9f:a9:48:1f:a6:d8:
06:69:a8:0c:dd:ff:f3:93:75:b8:7a:a2:39:3c:ff:97:6a:4d:
b1:77:6b:a3:41:c3:01:cb:aa:cd:be:4f:7d:ff:1e:94:d8:b2:
dd:c5:f7:a1:30:c7:74:53:e5:a5:ce:a2:be:2a:49:42:64:c6:
12:d8:cc:98:a4:a9:b5:5f:57:00:09:4b:a2:2d:0d:f4:63:1d:
4d:a2:fb:49:e1:f6:b2:3a:62:ab:34:a6:72:0e:12:56:fd:0c:
52:e6:9b:74:4d:f7:a5:00:c5:f5:92:d6:fb:68:bc:10:27:7d:
8f:e9:8e:61:b8:e0:d8:43:81:5b:39:0a:b9:fe:96:a1:78:af:
10:b6:10:36:34:33:ac:ca:e5:9e:9a:b4:1f:66:76:c6:8c:7e:
a0:7b:08:e0:6e:2e:13:3e:e5:e0:03:92:e2:55:b6:9b:18:22:
ec:d5:e8:48:6b:68:96:c7:da:83:23:e4:8f:a6:25:43:33:a6:
40:8d:62:ef:eb:27:34:58:18:f7:e7:33:d3:0d:f5:dd:71:d6:
dc:4b:7a:71:a5:b7:84:11:9d:d0:dd:d2:6d:18:c4:ce:95:9e:
30:21:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:39 2025 by rpki-client