Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D94D2F6D97C11EFBB5E1ABF762E951A.roa
File: 7D94D2F6D97C11EFBB5E1ABF762E951A.roa (raw, json)
Hash identifier: fW9UcFrWLnjCDCxG0oyPPFzqUosEJaWLzA9sCDk86Qo=
Subject key identifier: 00:E1:47:88:BF:57:8F:BD:B5:D4:9E:F7:B6:D3:0B:10:26:4A:8B:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014192
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D94D2F6D97C11EFBB5E1ABF762E951A.roa
Signing time: Thu 23 Jan 2025 11:23:39 +0000
ROA not before: Thu 23 Jan 2025 11:23:23 +0000
ROA not after: Fri 28 Feb 2025 11:23:23 +0000
asID: 62240
IP address blocks: 154.195.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82322 (0x14192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:23:23 2025 GMT
Not After : Feb 28 11:23:23 2025 GMT
Subject: CN=679226bb-5273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ac:84:fb:c2:3d:70:2a:f5:0e:76:bc:5b:4c:
0e:74:fd:34:d5:3f:32:f2:2b:e8:69:44:24:0c:f1:
cc:06:6e:ae:c6:a4:6b:94:0c:51:40:17:81:70:c9:
04:b8:76:0e:ab:02:38:1d:ba:b8:65:98:b5:cb:5d:
dc:2a:3b:a5:cb:d6:b3:43:ee:f5:b2:a4:54:16:f1:
47:79:d8:49:1a:b0:1a:52:58:28:3d:05:92:c4:dc:
92:58:0b:b8:4a:3b:d1:2a:69:83:fa:9a:90:d8:1a:
08:e9:0b:45:96:ec:b3:f5:fd:b4:ac:34:65:36:71:
90:21:c8:b3:69:18:3b:5a:a9:05:d4:9c:03:a1:68:
21:07:5f:19:5d:c4:b0:ea:aa:b9:8d:bc:da:f5:e7:
00:75:28:be:f5:fc:dd:fa:03:2a:c1:bd:d1:1b:8b:
5c:b5:91:2b:12:4b:7c:65:1f:b7:54:52:e5:a2:d2:
f9:91:be:34:a7:9f:fa:69:8a:aa:03:50:10:d5:5d:
4d:f9:87:ac:2b:ca:2f:5c:6b:56:33:a2:81:16:5a:
d1:e1:2e:e7:db:b4:03:c9:ba:29:20:e3:47:ca:21:
3b:98:12:93:c9:46:c6:6a:df:1d:3d:bb:ac:4f:07:
39:85:fd:2e:b9:02:11:a1:6f:ed:03:b2:63:6f:62:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:47:88:BF:57:8F:BD:B5:D4:9E:F7:B6:D3:0B:10:26:4A:8B:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D94D2F6D97C11EFBB5E1ABF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.156.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e4:8b:80:98:92:c9:26:15:3c:02:43:7e:ec:c5:f0:f9:2c:
86:04:54:0c:9a:3c:fe:80:c6:62:cc:bc:02:12:33:88:8d:9c:
78:51:89:94:7b:83:dd:40:63:70:3c:2d:19:1a:47:1c:6e:d9:
a1:d2:6d:75:8f:23:fa:96:64:7b:f7:a5:85:4c:47:fc:8d:94:
3f:ba:0d:03:4c:31:d9:d2:da:54:3c:10:7a:6e:9b:a1:fc:59:
3f:5a:78:56:43:f8:38:ad:ac:23:67:6f:c7:a3:77:be:52:89:
93:c7:a8:1a:44:4f:7e:d4:2b:4c:a0:07:57:ee:66:f6:a6:4f:
61:4f:5b:6a:33:2b:3b:05:06:25:1a:f9:92:43:08:4c:44:66:
1b:4f:51:58:8e:2f:8a:81:12:ee:a9:e3:1c:52:e0:75:ef:06:
e8:10:4e:c0:9a:bf:2c:49:bc:9c:1a:49:23:68:4e:1a:60:0d:
e2:69:18:64:58:b4:e8:37:06:09:26:20:56:b7:ef:c1:34:99:
24:74:79:0b:1f:25:6d:c2:fd:cb:14:97:f2:92:63:ab:c1:4a:
7d:ed:8d:2b:91:3e:d4:25:12:8d:13:0b:74:31:52:c8:a4:b2:
59:49:29:c8:23:fa:25:41:48:14:64:97:d4:fc:62:6a:33:58:
b0:04:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:31 2025 by rpki-client