Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820747D0D9CF11EFB0E5DC64762E951A.roa
File: 820747D0D9CF11EFB0E5DC64762E951A.roa (raw, json)
Hash identifier: lxKWTFF95OO8fRyHpz2kx85uIWM0lXfIRfevIGy6cpc=
Subject key identifier: BC:35:04:32:4E:D1:A0:B2:6A:AB:75:30:D6:B9:3D:C5:3E:67:61:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014305
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820747D0D9CF11EFB0E5DC64762E951A.roa
Signing time: Thu 23 Jan 2025 21:17:53 +0000
ROA not before: Fri 24 Jan 2025 21:17:49 +0000
ROA not after: Fri 28 Feb 2025 21:17:49 +0000
asID: 62240
IP address blocks: 154.196.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82693 (0x14305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:17:49 2025 GMT
Not After : Feb 28 21:17:49 2025 GMT
Subject: CN=6792b201-f624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:69:0c:27:eb:96:dd:4d:b8:ca:ad:0c:39:
9d:bf:18:1d:62:be:9a:a8:32:a9:2b:b7:62:23:39:
a7:e8:73:a1:c1:b1:6c:32:59:07:23:38:92:7c:45:
f5:03:87:f5:75:64:2d:93:19:3b:3b:c0:1a:f9:6b:
67:6f:3f:0e:ff:3c:8f:50:04:48:ea:4b:a9:13:b3:
fc:32:14:e7:e3:09:c0:d3:8d:ed:13:5d:cc:1b:cb:
08:fb:e4:e0:cc:e6:2e:6f:6b:70:ea:a9:31:63:9c:
4e:6b:ac:a7:d9:25:68:c0:66:fd:fa:94:63:c2:77:
2d:b1:e0:7c:b1:95:72:a6:27:e5:b4:f3:a7:52:05:
a2:b8:11:d7:eb:3a:bd:96:a4:45:5e:e4:9b:b9:7d:
21:67:37:2c:8c:74:f5:bd:31:20:d3:2d:85:25:c2:
7c:29:47:9c:1a:f9:c6:fe:38:f1:52:4d:5c:36:e0:
92:60:53:f5:09:fb:c3:95:b6:d4:ae:e7:7f:5e:2d:
01:8e:c9:b4:4b:20:af:d3:2d:46:8f:71:10:a2:24:
8f:03:cd:76:59:7d:5e:e7:a8:5a:89:fc:0d:29:f2:
79:dd:91:a9:93:12:7d:59:18:81:9d:43:7c:04:9b:
95:05:98:58:bd:53:eb:29:17:33:21:de:92:71:86:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:04:32:4E:D1:A0:B2:6A:AB:75:30:D6:B9:3D:C5:3E:67:61:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820747D0D9CF11EFB0E5DC64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:9d:fe:43:68:d2:5b:ff:e6:ef:a5:78:7f:68:e2:a8:29:48:
c6:ce:9a:bb:4c:02:89:ec:07:56:a6:3a:38:d0:82:e7:64:04:
d0:82:c8:26:0a:1a:db:d1:a4:c2:55:22:9e:9a:28:f5:31:9c:
c5:44:5a:d5:f7:ec:dc:4d:3e:ca:bf:c2:12:07:2e:88:6b:26:
ca:ab:f0:62:59:48:79:36:60:d0:87:4e:48:c3:e0:e8:4b:34:
1a:91:9c:ef:c6:17:3b:66:2d:6d:06:86:ab:f0:1d:d0:76:0a:
2b:62:9f:a5:9c:c7:00:21:89:84:91:5c:d3:3f:c2:c2:85:0b:
59:22:f8:04:84:0c:f3:24:a0:d8:d1:57:61:b0:ee:15:08:88:
21:9a:18:59:c7:69:b5:bd:34:b4:f1:30:b4:b2:40:ae:a3:12:
08:1f:35:5c:91:2e:35:72:ca:d3:37:5a:a4:59:fa:e9:17:38:
dd:2b:74:0d:98:61:e5:b6:6f:56:94:58:07:12:a4:2e:72:32:
b2:ad:3a:7d:7f:0e:95:7c:20:c8:64:d9:c1:60:af:7c:62:60:
07:ec:60:5d:3d:80:f6:80:b0:1d:c9:06:b8:1b:9e:aa:16:db:
de:48:3b:83:cb:ff:f1:1e:2f:bf:e8:ef:ea:2d:2d:f2:07:2f:
0d:80:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:03 2025 by rpki-client