Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C173D80DA6011EF98888743762E951A.roa
File: 7C173D80DA6011EF98888743762E951A.roa (raw, json)
Hash identifier: 5GKyXJwfOVABTgQ1/+ftEZReun9UKoAL1zoE0Pz9tjw=
Subject key identifier: B4:81:50:D7:85:7B:59:1D:AE:92:57:CE:35:8D:D0:FB:4E:C3:46:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014840
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C173D80DA6011EF98888743762E951A.roa
Signing time: Fri 24 Jan 2025 14:35:41 +0000
ROA not before: Fri 24 Jan 2025 14:35:37 +0000
ROA not after: Wed 05 Mar 2025 14:35:37 +0000
asID: 48031
IP address blocks: 154.223.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84032 (0x14840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:35:37 2025 GMT
Not After : Mar 5 14:35:37 2025 GMT
Subject: CN=6793a53c-9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:20:85:5c:33:f5:8f:73:57:47:2b:01:f6:
7b:1f:d0:62:0a:12:fc:bc:6f:0a:9f:51:c9:5f:e0:
46:e7:5c:01:b9:cf:05:9c:31:02:c5:88:09:3f:68:
e0:1c:70:a5:67:f5:37:6d:5d:be:70:10:9b:84:b8:
28:91:3d:56:e4:44:8a:60:ac:8e:8a:4e:b0:bf:7b:
4d:6a:d6:d3:61:08:fb:37:c9:95:e3:76:3c:e2:aa:
fa:07:4a:6e:ed:d6:0e:10:c4:d4:d4:d6:03:87:8d:
3a:63:10:6a:61:16:7f:5a:ca:ed:8d:fe:cd:8f:74:
5c:9f:89:bc:8d:ed:2a:c5:0e:e1:ae:45:1a:cc:e3:
ef:1b:a0:6f:00:ce:d2:24:6f:26:99:03:72:a8:a6:
a7:8b:87:81:8c:41:9a:f0:42:65:39:6a:91:49:06:
83:fd:95:de:be:2a:50:6e:60:d2:a6:3c:3b:ff:e0:
dd:85:8d:d4:cc:06:3f:76:f6:0f:d3:b4:d0:dc:93:
93:44:cb:14:45:80:19:24:82:72:0c:14:c5:5a:8a:
14:a3:ba:e6:b4:42:49:65:a7:41:27:25:f2:1b:0b:
cd:d1:e7:cc:81:99:1d:59:0e:d6:bb:3e:01:7f:17:
8c:bf:c1:e5:c1:42:ce:75:84:94:a1:ce:9a:8c:56:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:81:50:D7:85:7B:59:1D:AE:92:57:CE:35:8D:D0:FB:4E:C3:46:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C173D80DA6011EF98888743762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5a:63:2c:f3:c5:f7:af:80:d0:66:f3:37:99:28:fc:a8:e6:
c6:a1:63:6d:c3:e2:ff:9a:1a:cf:90:2e:e1:1e:da:fc:b4:f5:
41:90:fc:1c:c5:04:81:d6:fa:6f:d6:7a:f0:cb:6d:b0:e3:75:
cf:69:e1:6c:44:a0:e1:4c:72:2c:f5:ed:a4:5b:08:a5:4c:11:
81:9a:19:69:5b:c7:df:75:8d:15:b0:df:03:1d:18:d0:4d:5b:
78:ef:b2:cf:05:59:fe:d3:19:3a:b1:d6:d5:6d:9c:a3:aa:71:
1f:d0:c9:d0:ad:40:70:06:33:6f:14:7c:89:83:f8:2c:d0:c0:
9c:a1:41:5f:11:cc:16:65:cc:15:2b:17:8d:ee:3a:a5:a2:b2:
08:02:74:fe:95:15:86:f2:ff:f2:02:d3:62:b0:65:fb:3f:2a:
6e:b4:58:b2:f9:ee:5b:9b:14:e2:a3:e4:10:3a:7b:24:de:b6:
a8:8d:75:ef:ad:f4:3a:a3:86:eb:5f:01:f4:09:b1:52:25:84:
0b:70:1c:2c:44:99:50:58:6e:29:f3:76:61:88:53:12:ca:ee:
d9:07:da:90:35:47:2d:0e:f5:1e:6c:20:9d:1d:2a:66:fa:ac:
0c:8d:4d:7e:d0:1c:3f:19:96:7e:a3:4f:58:77:f5:12:d3:69:
1e:ba:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:22 2025 by rpki-client