Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA8A368DCA111EFB7022B79762E951A.roa
File: 7CA8A368DCA111EFB7022B79762E951A.roa (raw, json)
Hash identifier: QfOnlGjNq3sGxqfKS8zlWfWXq9y8/GmTcMtxy4blTFA=
Subject key identifier: B9:2A:1E:F9:9D:2D:74:28:67:0E:D1:62:EB:E0:44:B9:58:61:C4:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA8A368DCA111EFB7022B79762E951A.roa
Signing time: Mon 27 Jan 2025 11:26:02 +0000
ROA not before: Mon 27 Jan 2025 11:25:30 +0000
ROA not after: Sat 08 Feb 2025 11:25:30 +0000
asID: 7018
IP address blocks: 154.195.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84947 (0x14bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:25:30 2025 GMT
Not After : Feb 8 11:25:30 2025 GMT
Subject: CN=67976d4a-8c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:bf:91:38:a3:d9:4a:9a:e7:e3:df:66:cb:
2d:6f:27:7e:52:3a:c8:70:da:79:95:d9:e6:9f:81:
e3:8b:99:fc:e2:0e:db:f4:88:75:b0:34:44:3f:3b:
e1:5d:fc:f6:3b:fd:65:d3:df:1b:1f:46:70:5e:85:
15:75:4f:c3:cb:2b:29:47:4a:38:7f:9a:44:e6:45:
d8:8a:24:aa:1d:0e:c0:0b:b3:8a:c8:54:4c:ca:98:
ca:b1:5b:c6:c0:ec:41:77:5f:0a:fc:f2:25:26:dc:
59:1e:ea:a5:48:74:07:c9:23:ac:13:9f:87:7f:1c:
2b:e8:df:d9:de:d2:f7:43:5a:05:12:54:81:a9:79:
f4:c5:9e:6c:51:ce:b8:f5:a5:a5:8c:16:c0:df:50:
59:8b:79:7c:eb:0f:8b:ed:41:f1:df:16:ed:99:23:
61:fa:3a:03:86:66:2b:27:53:2d:94:b8:5a:f6:d5:
d9:34:ab:4f:99:84:8f:9f:b9:27:d9:a3:63:03:98:
a1:a6:9b:25:c5:21:10:36:bb:d5:65:37:ac:ca:a6:
ff:9e:be:37:46:cc:46:13:13:93:dd:3d:6f:2b:b6:
85:5f:3f:74:df:c2:fe:7f:a1:53:07:7d:6f:e9:aa:
cd:11:29:df:4b:b8:c9:c9:bf:cf:e9:e7:47:eb:6d:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:1E:F9:9D:2D:74:28:67:0E:D1:62:EB:E0:44:B9:58:61:C4:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CA8A368DCA111EFB7022B79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.32.0/23
Signature Algorithm: sha256WithRSAEncryption
13:1a:cc:c1:43:55:93:3d:93:0b:d2:10:3f:09:2a:6b:8d:11:
83:46:b7:e4:3e:e2:fc:34:55:98:5c:3d:5f:c5:0e:25:cd:e5:
4a:bb:ba:d2:15:00:3c:fc:c1:3f:0f:6e:d9:1a:78:c7:ce:f8:
a1:11:12:df:e4:96:f7:81:e5:b7:cf:fb:c8:ee:5c:de:9d:cc:
0b:e7:7f:5d:d9:ea:ab:5e:f7:0d:d9:12:84:6a:4c:c6:a9:d2:
ce:ab:91:e2:44:d0:07:7f:c1:e6:72:c0:87:56:ab:ca:77:79:
6d:6f:21:b7:3b:b2:cb:9e:47:43:61:8c:25:e7:71:cc:c5:07:
19:00:7f:3e:56:aa:3a:bc:10:1b:2c:30:02:a6:e5:e6:d8:da:
2f:cb:22:1e:64:74:7e:f5:09:82:f8:3f:6b:9c:7f:08:76:f0:
c8:a9:ae:7f:e2:a6:85:e5:ef:15:73:78:be:72:96:64:a6:0e:
32:50:13:56:2a:bd:b9:75:45:87:c0:13:3b:2e:52:4c:d7:4f:
8e:53:38:ed:16:7c:be:00:18:f7:5c:c4:44:5f:16:70:ca:7a:
cb:7c:82:c4:50:81:e1:e3:52:25:91:c7:3a:27:fa:29:fe:55:
10:11:96:af:f6:87:b3:9f:55:07:d3:d4:83:c4:2f:7f:79:61:
25:1f:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:32:01 2025 by rpki-client