Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99097166CC2C11EFB9BE0B67762E951A.roa
File: 99097166CC2C11EFB9BE0B67762E951A.roa (raw, json)
Hash identifier: Vt5ua02YJZFgRBbb/w6rm5mQ1H/f/B5FY7LylWnk9W4=
Subject key identifier: 3B:03:B0:74:60:0B:06:42:79:DD:D1:05:C4:3E:57:D5:FC:2F:E9:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013626
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99097166CC2C11EFB9BE0B67762E951A.roa
Signing time: Mon 06 Jan 2025 12:48:59 +0000
ROA not before: Mon 06 Jan 2025 12:48:55 +0000
ROA not after: Thu 06 Feb 2025 12:48:55 +0000
asID: 151800
IP address blocks: 154.197.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79398 (0x13626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 12:48:55 2025 GMT
Not After : Feb 6 12:48:55 2025 GMT
Subject: CN=677bd13b-6e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:f8:01:79:29:a5:a6:98:b7:27:07:e7:c9:
e2:36:12:9f:f4:5b:73:99:df:8c:69:48:51:d6:61:
63:04:29:0d:5b:9e:78:2f:76:c0:72:39:69:9b:c8:
a7:0e:a6:d6:65:0a:37:ca:3b:c2:c6:96:87:7d:46:
47:d2:db:0f:81:e1:a8:be:27:48:15:f3:f6:47:f8:
66:24:ce:d2:c3:a8:3b:de:51:b1:59:da:5d:8a:ed:
77:47:37:c2:69:dd:dd:ba:da:f0:e3:eb:9d:f3:ee:
68:ad:b1:41:f3:5d:85:68:72:f2:d5:cb:83:90:80:
98:33:c1:fd:7b:93:9f:7a:14:55:31:4b:c4:08:a1:
d5:66:39:0f:a7:62:44:2e:92:d5:63:ea:53:7a:12:
9f:f8:ce:5e:17:dc:db:9e:e6:93:54:c4:96:81:21:
76:b6:cc:22:b6:fc:30:4e:86:7e:67:2c:4d:70:37:
91:db:ee:78:bf:85:85:8d:5a:97:10:2a:2a:75:98:
fb:f1:09:df:d9:bf:1d:3a:a5:96:7f:bd:ec:42:bb:
2c:55:fd:dc:e0:29:ef:31:98:35:d5:8c:7b:7c:0d:
74:61:99:dc:5d:5e:d7:19:4a:30:f0:ba:bd:89:72:
48:0a:57:d2:7f:54:ef:54:dd:4a:e5:4c:9e:76:10:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:B0:74:60:0B:06:42:79:DD:D1:05:C4:3E:57:D5:FC:2F:E9:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99097166CC2C11EFB9BE0B67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.96.0/24
Signature Algorithm: sha256WithRSAEncryption
71:27:35:c9:75:d2:a4:d4:a1:bf:c1:be:0b:fa:50:25:84:0c:
38:f2:8d:0c:23:99:df:df:b9:f3:12:c1:12:fe:06:b2:6f:04:
e5:0e:38:7d:4a:65:13:53:c8:d7:65:bd:5a:7f:09:a6:22:96:
85:5a:5d:b7:d8:59:1b:1a:12:a0:0a:ef:fc:ba:d2:ca:70:ae:
b0:fa:f2:90:f7:e7:bd:18:b7:1e:e8:f5:0a:00:89:05:ab:6f:
2e:99:81:c4:90:d7:23:10:00:fe:d3:4c:85:2c:72:6b:4a:e0:
73:95:de:eb:fe:90:2b:d9:4a:40:be:a3:ea:4e:45:1f:5a:43:
7a:6e:c0:b2:f3:ff:0c:34:a2:13:91:b1:b9:49:a8:49:f8:cc:
1b:5a:f5:1f:95:41:f3:ba:fc:5a:8d:73:d4:7c:de:33:13:59:
e3:55:25:af:a7:21:08:97:84:54:4c:8d:6b:b9:c3:b2:8e:b1:
b4:c2:2a:91:fb:da:ed:fc:fb:60:22:98:50:1c:ef:39:64:ce:
64:36:67:73:24:5a:d2:7f:48:2d:71:8b:a6:a9:da:0a:02:3e:
78:ff:f3:d2:4f:a4:74:ee:54:aa:48:da:17:31:bb:b2:a2:a2:
f7:dd:4e:cf:24:9e:e7:d5:db:d7:ad:65:91:44:0f:12:5a:c6:
bd:85:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:37 2025 by rpki-client