Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988A2528D9D311EFBAFE447F762E951A.roa
File: 988A2528D9D311EFBAFE447F762E951A.roa (raw, json)
Hash identifier: UnPKC0WlH7/SIY7BAjGhOWMcAoCWLAZDHv3uYU9XMdY=
Subject key identifier: 1D:CC:F5:C7:C7:31:F6:97:CE:D7:D0:DB:18:C1:F5:04:6A:8C:E4:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014323
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988A2528D9D311EFBAFE447F762E951A.roa
Signing time: Thu 23 Jan 2025 21:47:09 +0000
ROA not before: Fri 24 Jan 2025 21:47:05 +0000
ROA not after: Fri 28 Feb 2025 21:47:05 +0000
asID: 62240
IP address blocks: 154.194.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82723 (0x14323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:47:05 2025 GMT
Not After : Feb 28 21:47:05 2025 GMT
Subject: CN=6792b8dd-0ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:f7:21:c9:85:dc:c9:54:6a:25:09:40:94:
d0:74:0c:bd:54:36:83:5f:a3:e4:7b:f1:7f:3d:75:
7f:53:8b:8a:06:e3:f5:18:d2:0b:a0:67:d2:8c:eb:
cb:d9:38:db:1f:58:ac:e3:fc:33:65:e3:06:45:3b:
12:bf:98:31:a9:1b:67:9b:79:2c:3b:29:90:0b:cf:
65:52:94:72:06:a7:25:10:04:f0:2c:16:37:61:a5:
15:13:13:25:e2:d9:72:e3:d1:a4:1c:c7:29:7c:87:
9d:10:9a:42:87:40:98:c9:9b:54:63:db:d8:c8:75:
e4:13:6f:d8:2c:6f:43:78:09:4e:17:f8:23:2a:ce:
40:04:3c:93:d7:d3:05:55:57:1a:64:0c:3a:96:af:
78:f9:f3:a1:8f:03:64:89:9b:90:05:47:0d:5d:d1:
5c:10:4d:53:80:79:1b:e5:c8:c2:fa:27:9f:3a:2b:
b5:eb:25:f0:57:ed:41:48:c4:43:d4:3a:a4:fa:37:
c0:95:f0:53:88:f7:c8:f8:5d:81:06:f9:e2:94:37:
9d:06:97:52:00:fe:87:f3:06:62:eb:4c:22:30:7a:
ac:9b:3e:87:b1:92:b7:90:9f:f4:77:21:60:96:22:
39:e7:87:16:90:4e:6f:d4:fb:17:ad:91:57:8c:45:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:F5:C7:C7:31:F6:97:CE:D7:D0:DB:18:C1:F5:04:6A:8C:E4:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988A2528D9D311EFBAFE447F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:56:00:9a:e7:1b:90:cf:4a:bb:fb:59:e7:b8:9a:de:e3:06:
9f:99:50:cc:7a:9e:f8:21:f5:18:c2:e1:bb:f2:85:6b:16:7c:
29:3c:b9:dd:78:29:62:1e:61:e7:5d:3f:05:43:33:f6:66:34:
a7:32:0e:3e:a5:74:84:4c:ad:09:ea:a1:12:12:37:8c:48:25:
ed:59:20:9d:6f:4f:58:21:79:57:fa:65:53:3f:89:9d:71:8d:
d7:cb:39:85:1e:fa:93:c8:22:81:c5:6b:7e:14:c4:d3:b2:3c:
34:15:21:b2:c0:a4:81:9c:5b:b9:8a:19:09:e9:f8:1a:2b:75:
09:8a:f7:b5:25:99:4c:5a:32:da:e5:dc:54:b7:c4:54:dc:30:
f8:27:02:a8:7e:1d:c3:57:3f:1c:c2:15:ed:93:ef:9e:b0:51:
7b:0e:c6:60:4b:75:d9:ff:ff:52:a0:40:2d:64:3f:1e:b2:1d:
0b:31:37:43:34:43:93:5a:a3:38:4f:ec:c4:df:c2:10:42:3d:
f5:74:5a:9b:56:a9:d5:e8:17:fb:13:54:63:d5:d6:e3:fd:b6:
96:e0:6a:03:70:c1:dc:af:17:e2:ac:11:d3:a0:0b:56:e6:7b:
6f:d5:b3:08:ba:a4:08:56:26:b9:e3:66:4d:63:68:35:6d:55:
97:7d:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:39 2025 by rpki-client