Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FB3D8DB1F11EF8D3FFE51762E951A.roa
File: 910FB3D8DB1F11EF8D3FFE51762E951A.roa (raw, json)
Hash identifier: 5AgichU8l24hK50NNlF4Cx1olbnCbo5TTTx0TjYxtVY=
Subject key identifier: AB:37:85:87:3B:C7:3E:82:EF:C7:F3:48:AB:04:F9:9D:11:2A:DA:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01497B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FB3D8DB1F11EF8D3FFE51762E951A.roa
Signing time: Sat 25 Jan 2025 13:23:30 +0000
ROA not before: Sat 25 Jan 2025 13:23:26 +0000
ROA not after: Tue 04 Feb 2025 13:23:26 +0000
asID: 395793
IP address blocks: 154.193.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84347 (0x1497b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:23:26 2025 GMT
Not After : Feb 4 13:23:26 2025 GMT
Subject: CN=6794e5d1-a280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:a9:2f:63:c9:89:a2:22:77:1f:f5:72:1b:
60:0c:23:ea:d8:c8:c3:6b:f9:75:ef:29:b5:5e:63:
49:21:d6:72:63:c8:92:9f:69:55:bb:df:5e:2b:48:
a4:88:56:79:4f:20:c8:e7:cd:87:31:ef:06:b6:fe:
ee:4c:d4:0d:fc:24:a8:9f:6d:15:c1:ac:30:2f:b7:
a9:4a:e0:26:66:c0:cf:48:e9:70:4f:da:45:af:cf:
bd:11:e2:d8:ba:70:e8:ef:8d:71:27:11:cc:63:34:
e3:33:50:d7:0c:ca:42:15:38:e2:ed:e7:4c:cb:d7:
9d:47:97:e1:44:a4:9e:48:65:8b:43:82:22:69:3c:
db:70:12:2c:32:a6:f7:f6:ef:2e:0d:ba:60:a8:01:
79:a6:3b:dd:19:55:f8:5a:d6:9b:2e:44:85:9c:05:
6c:6d:0d:1b:57:a6:d0:10:2f:69:63:03:a7:b5:01:
c7:85:e2:a9:6b:8e:44:f1:56:1a:69:3f:c4:6d:8d:
aa:14:e6:af:fa:9c:a4:cf:38:f6:80:19:dc:a1:2b:
a3:67:78:66:c8:5f:5b:a6:f3:49:25:35:1a:2c:b6:
87:6f:6f:f7:ac:0b:7e:9a:1c:a1:e5:e1:cf:17:d5:
70:67:22:58:f6:4b:be:fc:b1:f9:22:f7:33:80:aa:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:85:87:3B:C7:3E:82:EF:C7:F3:48:AB:04:F9:9D:11:2A:DA:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FB3D8DB1F11EF8D3FFE51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d6:c9:ff:05:ad:40:64:91:83:5d:57:7f:bb:b0:04:b1:8c:
78:6c:2a:c6:f5:75:dd:07:9b:6f:dd:cf:cf:53:6b:3a:93:05:
fd:23:28:63:61:f7:fb:c5:91:c1:1b:3f:9d:8f:47:14:e4:f4:
88:84:91:f5:26:f6:c6:21:9b:c1:db:26:c6:b1:10:2e:62:15:
44:f5:33:a1:53:88:f7:0f:73:d3:f0:a8:00:64:92:14:81:63:
45:54:67:ba:e5:67:2e:d0:11:17:bf:31:1f:4d:1e:ec:ec:77:
22:88:85:10:97:25:ca:76:84:2a:21:f5:7f:3f:a8:c4:ce:88:
7f:16:91:8d:6b:4d:b4:ec:4f:1e:98:34:81:3f:f0:18:12:33:
b0:9d:52:43:ac:e3:95:1f:5e:f1:74:4d:05:da:15:17:2d:4d:
59:7e:ba:6d:1e:5d:43:54:37:e8:82:d9:71:2e:1a:be:3c:b4:
f4:06:5a:70:19:e7:d9:ed:d4:ed:ae:f4:c8:0e:5c:f3:fc:ac:
00:99:ca:3a:24:ed:61:f2:76:ff:6a:bd:fe:08:b4:5d:b9:52:
ba:14:c2:3b:c2:c0:99:3c:70:27:67:69:96:4e:e3:b1:14:0c:
fe:b1:14:5f:14:cf:b8:9a:12:82:02:f0:60:61:6a:a1:00:cd:
e4:10:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:35 2025 by rpki-client