Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEAEAE2DA3311EF8E76AB92762E951A.roa
File: 8EEAEAE2DA3311EF8E76AB92762E951A.roa (raw, json)
Hash identifier: 85Supz+DF6td2AWbtKJNYl+6A5Xl3MlL3Zh8iaQJOpA=
Subject key identifier: 7F:79:2F:A5:5E:10:EE:A7:34:64:34:A4:D5:AE:32:C9:B9:13:3F:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEAEAE2DA3311EF8E76AB92762E951A.roa
Signing time: Fri 24 Jan 2025 09:14:05 +0000
ROA not before: Fri 24 Jan 2025 09:14:01 +0000
ROA not after: Fri 28 Feb 2025 09:14:01 +0000
asID: 62240
IP address blocks: 154.195.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83146 (0x144ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:14:01 2025 GMT
Not After : Feb 28 09:14:01 2025 GMT
Subject: CN=679359dd-17d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:18:64:6f:ab:95:60:dd:09:15:a8:f4:2a:
00:e0:a8:40:6b:56:b0:e0:24:f8:27:09:9c:4b:f7:
48:3b:cb:1c:d9:db:1f:d7:39:fe:a1:96:a6:90:e9:
6d:55:e3:99:29:ff:b0:a7:29:20:00:bf:d7:39:29:
1a:48:a3:09:8b:58:41:f7:2f:b7:3c:28:d7:63:30:
36:09:bc:19:5b:a2:e7:a8:34:c2:99:e0:78:8e:de:
7a:c2:c1:af:13:bd:80:19:6d:ab:4c:07:f1:48:69:
08:f0:06:a7:5c:4f:15:6f:bd:dc:eb:a8:41:1f:46:
71:05:39:04:5d:82:2e:26:a0:9f:82:90:b0:09:60:
ce:a6:70:07:15:59:9f:c1:94:09:79:4d:ed:37:51:
d9:1e:d1:c0:c7:d3:8f:27:9c:94:25:f9:e7:7b:48:
3b:e7:c3:b7:dc:2b:37:d9:97:19:11:da:32:9d:a7:
dd:4b:af:23:d2:84:e5:e3:04:3f:f5:77:56:e5:0e:
7e:cd:2c:63:27:2e:eb:2f:6a:ef:41:8c:9f:f5:b7:
a8:ad:92:f7:ba:d9:a8:e0:9a:35:31:f6:9b:cd:9f:
df:04:cc:77:00:ac:63:67:85:ab:1b:d9:e2:9c:e5:
f9:c0:1a:f2:61:9d:cd:3c:5b:74:d2:f9:69:be:97:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:2F:A5:5E:10:EE:A7:34:64:34:A4:D5:AE:32:C9:B9:13:3F:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEAEAE2DA3311EF8E76AB92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:04:98:76:51:3e:cd:ef:de:cc:2d:4a:00:9d:54:b2:0f:b3:
ed:e2:b5:82:ef:ad:33:cc:ae:9f:dc:94:02:87:e6:d8:ee:93:
f0:a6:b6:d9:29:43:65:1e:b5:6a:61:2c:3d:9b:76:05:9f:40:
96:8a:34:94:31:57:2c:40:58:23:45:11:4d:3c:47:8e:42:3d:
c5:8c:f4:20:18:3a:ad:54:d6:a8:68:7a:90:85:52:db:3d:a0:
44:52:fe:bf:ca:ee:3e:2c:83:50:a4:73:3c:36:d7:66:6f:09:
8d:2a:99:46:69:9f:42:a4:ee:9d:d6:8b:18:f0:ab:23:47:22:
29:8d:7f:19:2a:e7:bc:ad:73:81:2c:82:90:de:07:ed:5a:0a:
ea:80:5b:8d:aa:66:c4:7f:23:14:e3:77:27:08:8b:26:2a:ad:
25:25:05:15:2c:50:97:28:9f:b0:b4:7f:28:0b:1f:8f:ef:53:
4f:e8:ec:0f:37:ee:33:9b:f8:fa:60:6f:be:73:4e:e7:ab:d2:
af:5b:2a:b6:61:84:99:dd:d1:3c:1f:3e:d6:5e:3b:43:b3:30:
38:8b:8b:9a:c3:51:c6:49:5a:1a:34:f3:4c:98:03:df:d8:1f:
6c:af:ab:f5:22:f9:69:99:62:6d:03:5e:58:c1:f0:11:87:94:
c8:7e:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:49 2025 by rpki-client