Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78157CF6DFDD11EFBB45D64A762E951A.roa
File: 78157CF6DFDD11EFBB45D64A762E951A.roa (raw, json)
Hash identifier: +Boq3Obh1qK6z7onjw1hm67kzsFEyEVQbjx0pmOi2Sk=
Subject key identifier: 15:42:4A:95:3F:4D:7D:D7:B5:F7:84:7C:E8:54:5B:91:FD:3A:EA:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78157CF6DFDD11EFBB45D64A762E951A.roa
Signing time: Fri 31 Jan 2025 14:12:57 +0000
ROA not before: Fri 31 Jan 2025 14:12:53 +0000
ROA not after: Mon 10 Feb 2025 14:12:53 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85423 (0x14daf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:12:53 2025 GMT
Not After : Feb 10 14:12:53 2025 GMT
Subject: CN=679cda69-0e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:f7:f0:6a:d7:f7:dd:e5:e0:e9:56:88:43:
f4:81:3c:d0:c1:bf:83:07:46:4f:3c:10:49:ae:71:
53:ef:41:fd:ec:80:e7:63:05:92:84:97:62:cb:c1:
23:59:04:3c:7d:ff:88:0d:0b:0c:74:02:b4:f2:97:
8c:e0:23:da:e9:a2:0f:0b:29:7f:e5:57:4c:ea:51:
29:39:e6:a6:54:1f:b5:79:fe:2e:f4:6e:9a:c2:ce:
dc:ca:5d:a8:16:05:59:11:9c:c3:21:2c:e9:f4:1b:
cc:13:4d:77:b6:16:e8:08:78:a6:fa:bf:8e:95:fb:
10:ea:d4:39:c7:39:97:3e:81:85:b7:31:b2:08:07:
43:77:75:b9:f0:ca:17:f8:5b:7d:fa:6a:6d:0a:c1:
e9:3b:8b:10:aa:94:f7:73:24:48:ea:99:2f:9c:03:
c7:b7:74:53:e8:7d:2a:b8:72:46:c1:30:81:bc:2d:
17:f1:bc:4e:6c:e6:9e:ea:88:d6:ff:69:68:f5:d6:
2a:77:d1:82:bb:20:19:1a:b6:f9:e9:b7:26:bf:03:
85:83:75:cf:5f:fd:9f:4a:0b:d6:66:28:03:2a:bb:
77:91:b0:d2:d3:86:e5:8b:e5:33:a6:52:98:47:ba:
4e:6f:97:2d:85:43:c7:95:65:ec:9e:fb:50:48:78:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:4A:95:3F:4D:7D:D7:B5:F7:84:7C:E8:54:5B:91:FD:3A:EA:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78157CF6DFDD11EFBB45D64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:dc:be:fc:b9:bd:4e:34:70:6d:55:25:ee:55:1c:04:a6:15:
0c:5b:67:5e:64:1e:e0:c6:e3:75:cc:eb:65:71:d8:0b:1f:f5:
3b:69:f1:4c:a0:38:18:cc:8c:5d:5c:23:ab:75:a8:c1:ec:d5:
ea:ee:cb:53:01:2a:f4:cc:32:31:56:8f:ac:46:a3:c6:05:20:
96:57:25:53:14:56:54:43:15:28:ba:0b:be:4e:ff:fd:d9:9e:
32:23:d7:84:69:a1:7d:0b:a5:bd:18:6f:39:7d:3e:4a:73:3b:
5c:c4:90:85:af:54:21:5b:29:a5:8b:b7:cc:28:97:91:cc:ae:
07:0c:90:ff:cf:ec:86:5e:da:c8:18:1c:de:b2:a7:92:ae:d5:
9b:00:36:69:e8:95:d7:1b:bc:29:d1:a8:9c:c3:26:84:05:cb:
c4:49:8e:79:94:bd:d0:1e:e8:5d:10:28:e5:43:56:d3:ad:4d:
41:fd:79:c8:36:f1:38:4d:18:2d:80:ff:f3:d6:bb:22:fe:81:
65:57:26:a2:88:55:6a:70:02:4d:53:c8:17:41:38:c7:73:c6:
a6:86:4c:8d:87:39:33:70:fa:bf:3a:67:d2:05:8e:48:e4:74:
34:35:f5:db:f7:8d:f6:1d:ca:1b:e6:e1:1f:f8:42:d3:fd:e3:
6d:25:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:34 2025 by rpki-client