Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78AF6FEADFE311EF8A89D86F762E951A.roa
File: 78AF6FEADFE311EF8A89D86F762E951A.roa (raw, json)
Hash identifier: Uj6bw3gKRtutw9soEIYe1LBxOQV03lCsXrSxZZp1dDw=
Subject key identifier: F4:F5:6F:4A:DF:22:D2:7D:EB:3D:00:19:B0:8F:7B:77:E6:5A:EF:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78AF6FEADFE311EF8A89D86F762E951A.roa
Signing time: Fri 31 Jan 2025 14:55:55 +0000
ROA not before: Fri 31 Jan 2025 14:55:51 +0000
ROA not after: Fri 07 Feb 2025 14:55:51 +0000
asID: 63199
IP address blocks: 154.207.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85452 (0x14dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:55:51 2025 GMT
Not After : Feb 7 14:55:51 2025 GMT
Subject: CN=679ce47b-5ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:a6:a5:00:00:63:c8:3f:a9:01:6f:bf:ea:
e0:4a:86:50:3f:b1:3f:bd:2e:29:79:eb:92:ec:66:
31:72:cf:71:56:8c:53:8d:71:0f:17:63:f7:dd:56:
7f:e8:8e:9f:e5:9c:6e:95:58:67:0c:61:21:a5:be:
6d:db:51:2b:9c:a1:2c:35:26:99:fb:d4:7f:6f:83:
12:f5:a5:df:f3:1f:7f:25:5f:b7:b3:8a:10:9a:a5:
5e:6e:da:51:f8:da:30:f9:9f:c3:2f:7e:c1:15:e5:
d4:cb:5d:8d:ed:d7:42:7f:84:c6:55:69:e7:81:73:
73:1a:85:cc:98:86:29:c9:de:49:8e:0b:49:98:71:
36:35:08:63:f0:cb:31:e3:e5:57:c4:c0:5d:c8:46:
3d:3e:5e:a8:64:21:f3:59:b0:d5:d0:68:e6:94:87:
f2:bb:2c:98:08:fd:9d:79:5e:0d:a2:86:64:bf:79:
01:0f:d2:0e:8e:c1:f1:c9:c6:d0:8c:e9:75:32:dd:
c4:b5:55:15:a1:0b:2b:9f:69:f6:ca:91:04:4a:e7:
39:36:58:63:bf:26:a1:e1:7c:26:96:44:fa:42:82:
19:e0:28:eb:48:57:fb:85:f7:3b:8b:ee:23:b9:b2:
e2:ff:b3:c2:21:19:0c:ab:7e:c6:5d:be:78:90:fa:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:6F:4A:DF:22:D2:7D:EB:3D:00:19:B0:8F:7B:77:E6:5A:EF:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78AF6FEADFE311EF8A89D86F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.93.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fb:ce:0c:46:a6:0d:48:a3:9f:44:36:75:e9:d7:d2:bf:1c:
90:e1:e1:ea:19:fe:af:0b:cc:4e:de:89:ff:3a:f7:ce:f9:80:
21:69:5b:17:75:bd:92:00:b8:a7:40:22:e8:fc:9d:91:98:44:
dd:ac:cd:57:78:a3:c9:f6:73:54:a1:a2:ba:06:76:11:a4:89:
ca:86:04:b5:f5:f0:f3:d8:62:ed:ae:6b:6a:94:44:6c:d9:de:
02:a5:85:39:0e:6e:34:32:d1:8b:ba:32:c1:11:ec:e2:6e:f4:
e5:cb:91:fb:0d:02:2d:62:51:78:5f:e7:f8:a2:d6:a7:7f:25:
2a:fe:f8:07:74:69:40:a9:d9:0a:f7:e3:50:06:2d:e7:e3:d6:
5f:08:03:ba:33:4e:7d:b5:c5:50:6b:c8:30:29:3a:0a:a8:3c:
fa:21:44:d4:6f:8d:5e:70:b9:be:cc:f2:a8:ed:5e:7c:10:8d:
14:a9:af:24:d2:31:ba:4f:bd:51:f4:81:36:fc:41:03:5e:9d:
b3:77:d4:c9:da:ed:a2:a0:62:eb:a8:53:67:7c:96:a0:7b:0c:
a6:e6:6e:35:bd:50:99:45:45:7a:17:be:71:f9:a2:2a:70:9e:
b0:d7:a3:d3:bc:55:81:37:7a:0f:89:de:90:6d:7e:fb:84:46:
4e:04:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:50 2025 by rpki-client