Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02547D8D98611EFAB68D482762E951A.roa
File: A02547D8D98611EFAB68D482762E951A.roa (raw, json)
Hash identifier: 8LagqQDF0zy9hMnBrCMPc9HV2eAGWWnfakN2e93pM/g=
Subject key identifier: 09:CE:F6:E0:2A:EC:6C:AD:36:04:E4:DB:8A:F2:B5:D3:D8:6C:CE:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014228
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02547D8D98611EFAB68D482762E951A.roa
Signing time: Thu 23 Jan 2025 12:36:11 +0000
ROA not before: Thu 23 Jan 2025 12:36:07 +0000
ROA not after: Fri 28 Feb 2025 12:36:07 +0000
asID: 62240
IP address blocks: 154.195.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82472 (0x14228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:36:07 2025 GMT
Not After : Feb 28 12:36:07 2025 GMT
Subject: CN=679237bb-22cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:34:63:1d:07:99:6a:af:23:37:87:21:ab:
e2:36:6c:1e:0f:c8:1e:33:83:ee:36:10:0a:02:bb:
86:18:bf:89:bd:5e:f2:e8:69:ff:93:67:76:e2:d4:
57:db:20:0c:19:d1:ab:5f:7f:e1:8a:95:53:e1:97:
08:21:f4:cc:cf:3b:57:62:22:a3:a2:aa:43:de:29:
db:cc:89:d0:1b:10:25:38:3d:f1:a2:60:c7:9b:1c:
a8:90:65:78:34:2c:c5:73:06:37:fb:69:35:eb:fb:
a4:7d:d8:05:79:fa:b8:dc:6f:23:80:53:d2:eb:b8:
69:b6:84:4b:bf:77:e0:4b:6e:71:31:6c:a8:27:35:
93:27:ac:d7:7a:87:af:e2:28:ce:fa:e2:77:bc:34:
d1:2b:b8:ec:ec:cd:64:13:a4:86:79:76:2b:5e:78:
bc:37:7a:a6:8d:c3:f3:78:10:e2:69:57:25:cd:06:
f3:54:8e:aa:57:94:2c:da:95:8b:20:b0:23:09:7b:
32:17:51:59:ab:41:52:28:92:8a:6a:67:7a:f6:60:
fc:e6:bb:3d:55:b4:66:09:da:14:bb:73:ed:e7:0a:
55:2f:c4:0f:ec:12:06:e3:2e:50:aa:34:ed:b7:b9:
ec:41:66:28:dd:6e:d9:bb:1a:81:9d:dc:c2:dd:96:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:F6:E0:2A:EC:6C:AD:36:04:E4:DB:8A:F2:B5:D3:D8:6C:CE:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02547D8D98611EFAB68D482762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:33:1a:9e:4d:7c:2d:8a:78:0d:7c:3c:83:e1:42:ee:f8:52:
1f:0b:f1:22:66:8f:b9:df:5b:71:1f:9c:01:1e:99:6f:c2:d1:
fe:c6:8d:92:ba:c1:a3:b8:8f:d5:87:86:1b:b7:6c:d8:b1:ec:
0e:8d:dd:4d:b3:9f:4c:46:2a:8c:b4:f4:a1:80:9f:4a:8b:61:
8a:86:22:03:f9:d0:77:04:b0:5e:45:4f:7c:a7:6e:a8:32:0c:
98:ab:94:c5:a8:b9:ba:89:54:8c:da:e7:29:c2:9e:ff:e2:a7:
d1:4e:7a:bc:4b:e6:51:1a:96:d7:6b:82:4f:ff:d8:d9:a9:0a:
70:e1:86:a3:e6:78:40:c0:ec:18:94:21:af:a0:b5:0d:8e:3b:
82:7a:27:f7:94:ea:05:cd:88:66:1d:b6:b7:2e:12:6f:0b:15:
1c:25:41:ea:46:54:45:6c:ad:1e:3d:92:0e:87:26:99:52:f1:
59:3f:9a:6a:f8:bd:2c:c2:a9:10:cc:b8:26:11:4c:b5:9c:07:
19:d8:72:4b:0e:67:d8:d2:93:23:c5:d2:62:ff:23:70:c3:e6:
71:89:33:bf:d0:0a:77:72:df:48:26:ed:7c:c3:0f:58:9d:5a:
a6:b5:28:ce:a0:84:12:8b:8c:ea:5b:8c:a0:0b:e1:8b:9d:ef:
08:c9:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:23 2025 by rpki-client