Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78859884DA5511EFABC56179762E951A.roa
File: 78859884DA5511EFABC56179762E951A.roa (raw, json)
Hash identifier: LK4EjO5nHLvkL2bOn3d/Cxb7fFfvpwdHpcQ1y4CCj6g=
Subject key identifier: 42:79:9F:33:B5:B2:A5:2D:71:23:DA:CC:AD:D3:B1:67:37:C0:D6:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014759
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78859884DA5511EFABC56179762E951A.roa
Signing time: Fri 24 Jan 2025 13:16:50 +0000
ROA not before: Fri 24 Jan 2025 13:16:47 +0000
ROA not after: Wed 05 Mar 2025 13:16:47 +0000
asID: 44559
IP address blocks: 154.209.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83801 (0x14759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:16:47 2025 GMT
Not After : Mar 5 13:16:47 2025 GMT
Subject: CN=679392c2-95c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:79:34:da:81:6a:60:cf:6b:2d:d7:c1:60:
aa:14:39:4e:c7:ad:71:6f:82:e2:61:64:7d:0e:7f:
15:a8:7e:d4:cd:cf:05:b3:08:59:24:20:0b:f1:eb:
3c:03:0f:14:50:a1:e4:bc:d0:e4:f7:5d:f2:db:c8:
00:6f:ab:4e:33:38:de:42:fa:57:3c:3b:31:bd:19:
28:21:46:dc:ed:e4:52:3e:a2:67:f1:07:8d:b5:36:
d3:7b:ec:bc:92:45:ac:e8:9b:6f:d0:85:9b:e7:7e:
dc:b6:20:b6:6a:7c:62:4b:a4:48:5e:0d:5f:ea:8f:
eb:57:fd:2e:b9:d7:b0:6b:bb:53:dd:bb:46:08:9b:
5a:e0:b1:7d:a4:da:d8:a5:f3:f2:39:00:54:52:17:
84:b4:85:6d:03:75:19:31:74:91:8c:49:9b:00:4c:
91:df:ab:01:36:9f:0f:28:fa:95:a0:6d:18:dd:5b:
76:36:b5:55:6a:e5:9d:1c:ae:b6:a0:bb:b7:ba:48:
fa:53:8d:2c:43:8b:2a:36:da:9b:f6:77:f2:17:e6:
ab:44:5c:09:b3:65:b9:8b:20:94:b5:65:cf:a0:60:
f1:e9:8a:f1:6b:48:49:13:dd:01:2a:dd:c4:dc:1b:
cf:e6:ad:6f:5c:87:b4:4b:bf:69:71:53:45:c2:aa:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:9F:33:B5:B2:A5:2D:71:23:DA:CC:AD:D3:B1:67:37:C0:D6:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78859884DA5511EFABC56179762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:df:30:27:00:99:33:7e:bb:ba:a6:31:26:1a:15:d6:f1:96:
d2:fb:26:62:2d:96:e5:71:4a:b9:1b:76:6b:2e:78:b9:34:08:
26:3f:0d:6f:90:4f:03:d2:bc:43:e1:41:77:6d:85:76:10:d8:
44:fa:b3:d1:33:12:42:99:6d:3a:97:1c:f9:2f:90:57:1b:52:
be:2b:ac:27:a6:9f:1b:06:23:45:b8:52:06:e9:4a:16:6f:51:
80:5b:15:17:85:ed:76:d9:88:d8:b1:3f:69:4e:52:17:f7:38:
57:bd:aa:f8:d6:de:8d:89:b1:c6:69:57:c4:4e:fc:f3:3c:ef:
97:bd:ae:d1:1a:cf:d4:a8:a2:26:60:8f:d3:20:93:b1:20:30:
55:21:87:96:b9:24:5b:54:bd:1d:14:e0:e3:b2:90:14:9d:06:
5c:0c:95:c0:99:b8:df:d0:5a:28:3c:8e:83:10:4e:56:4f:75:
0a:66:f2:50:52:3b:d5:6c:ac:8c:f5:d5:7d:78:b7:f1:dc:94:
b6:17:13:95:9f:fd:dc:45:c6:1b:8e:c2:bc:b5:d4:44:8a:a9:
b3:6d:e6:23:f6:4f:5e:3a:8a:b7:90:f9:0e:6e:e1:23:16:36:
6b:df:6d:16:69:23:82:19:3b:83:79:d9:d4:3e:fe:df:e6:db:
48:67:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:35 2025 by rpki-client