Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C629BED3FE11EF8839F39A762E951A.roa
File: 97C629BED3FE11EF8839F39A762E951A.roa (raw, json)
Hash identifier: kUWGlEfFANelPv+uORJHxBLuRcN06suJ3AaEECU5f00=
Subject key identifier: 4D:6A:98:E1:3B:3F:67:8F:9E:EC:BF:17:94:32:77:B5:83:4B:EB:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C629BED3FE11EF8839F39A762E951A.roa
Signing time: Thu 16 Jan 2025 11:39:49 +0000
ROA not before: Thu 16 Jan 2025 11:39:46 +0000
ROA not after: Sun 16 Mar 2025 11:39:46 +0000
asID: 17561
IP address blocks: 154.206.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80896 (0x13c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:39:46 2025 GMT
Not After : Mar 16 11:39:46 2025 GMT
Subject: CN=6788f005-cf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:ef:8c:d6:72:c4:7f:c5:52:50:63:bd:3c:
cf:17:6e:63:8a:7e:8a:f9:93:b3:ef:a0:2e:93:13:
09:ac:03:5a:44:5d:c8:e9:28:46:5e:61:a2:46:f4:
1e:f8:77:3f:8f:32:4f:ac:b9:6a:49:ea:52:8b:2e:
b6:8b:a5:11:a4:2d:cd:4e:7a:57:0b:92:f7:f7:f5:
c0:87:e6:d5:a1:fa:9f:c0:78:7e:3c:bf:d9:7c:d1:
34:e9:14:ea:72:58:11:54:02:db:17:21:10:f1:55:
70:17:a5:98:18:dd:6f:36:38:da:2f:7e:0b:ab:43:
7b:2e:e8:f7:ce:5a:69:ff:0c:f6:df:21:d1:1f:bb:
9d:79:c4:72:f0:cf:7c:e2:64:c7:09:cc:91:10:d9:
64:f0:92:b1:39:61:8f:ab:67:37:97:90:2b:65:19:
68:f5:f6:2a:cd:63:84:76:4f:82:ff:42:8e:78:f7:
05:db:dd:7a:b7:ec:8d:59:59:ce:f9:7a:aa:b0:31:
66:7a:c7:62:c4:ce:42:61:08:b7:99:b5:12:4e:58:
8e:1a:92:e8:cf:bc:24:1c:40:3f:65:48:8e:9d:6b:
2f:db:59:44:5c:d1:b3:bc:73:30:62:ff:d3:78:d5:
6c:37:1e:4e:a2:74:96:34:b5:d2:b4:51:fe:d5:2f:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:98:E1:3B:3F:67:8F:9E:EC:BF:17:94:32:77:B5:83:4B:EB:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97C629BED3FE11EF8839F39A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.194.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ad:71:d6:ad:43:d0:b0:55:d3:b7:08:47:af:6b:0d:66:f8:
51:f3:f0:7d:47:5b:d7:f5:35:b4:af:a8:7c:56:84:cb:69:69:
4d:c8:6c:51:50:78:66:2a:0c:4b:86:8f:44:81:5f:44:ee:48:
65:ad:ca:5d:6b:d7:62:58:8c:02:40:7b:d5:e7:59:5f:34:3f:
84:71:7c:6a:28:72:88:c9:e1:60:fa:87:d9:83:5e:84:08:ab:
07:b0:62:03:6f:7e:4b:d3:1d:a8:e9:99:e7:8e:d1:6e:66:f2:
b8:71:f2:12:74:ee:c3:f5:8a:91:45:ea:aa:f1:fb:f6:a0:c7:
e3:7c:cf:95:52:09:fa:70:0e:a6:ed:50:cf:91:a0:20:44:26:
2a:e1:02:6b:98:65:a7:63:b5:ba:43:29:1d:88:06:7c:d1:48:
76:3c:b6:d9:da:25:54:d1:da:0f:c9:b0:90:6c:b1:3d:90:2c:
12:a6:94:b9:43:f7:f8:44:28:a6:65:da:87:f5:4f:68:8f:30:
45:53:10:ca:37:ee:06:2b:bc:32:eb:21:6f:e5:33:86:8d:97:
d5:bd:8c:ba:73:89:8e:a8:a6:5a:5f:3f:a5:d1:76:c1:94:af:
ba:9c:e3:79:87:89:ce:9d:99:78:5b:5d:52:5b:70:55:d0:83:
c6:24:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:18 2025 by rpki-client