Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0331C80D97911EFBA23DEAC762E951A.roa
File: A0331C80D97911EFBA23DEAC762E951A.roa (raw, json)
Hash identifier: +4YBYOsbruUGDz3H6S5SDfPfNHVSP6KXU1n4hnXB9v0=
Subject key identifier: 51:2E:72:BA:0F:F1:7C:88:82:3B:0D:0D:96:74:9A:63:F0:DD:B2:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01416F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0331C80D97911EFBA23DEAC762E951A.roa
Signing time: Thu 23 Jan 2025 11:03:07 +0000
ROA not before: Thu 23 Jan 2025 11:03:04 +0000
ROA not after: Fri 28 Feb 2025 11:03:04 +0000
asID: 62240
IP address blocks: 154.195.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82287 (0x1416f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:03:04 2025 GMT
Not After : Feb 28 11:03:04 2025 GMT
Subject: CN=679221eb-f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:85:de:4a:97:8f:79:d8:39:ae:97:36:23:
f7:c0:a9:db:5a:f2:2f:43:1d:d1:6f:f3:a0:04:b5:
34:66:80:c6:0c:2f:c7:30:44:17:9f:2a:45:75:a5:
f1:c1:03:82:45:6b:f5:97:b0:83:78:ee:60:a0:4d:
21:ea:ca:e6:c5:06:8b:70:91:85:28:d9:25:65:8f:
c3:91:1a:55:a1:76:8d:46:8e:00:20:71:9d:2c:ae:
aa:92:04:2c:05:d5:5d:4e:bd:50:0b:72:70:6b:cd:
1c:8b:b6:b6:e7:df:a9:21:39:a7:2e:ea:41:12:dc:
2a:83:a0:49:8d:92:ce:94:3e:70:54:aa:97:11:35:
af:81:66:40:45:e6:73:fd:be:7d:72:b3:6b:7f:f9:
83:dd:a1:4d:ca:6a:a2:46:32:a2:b7:f0:cb:79:e9:
4e:55:eb:5f:70:91:c2:e8:0b:60:fb:71:8b:92:a4:
77:f5:74:ea:37:ef:56:e5:0b:67:a4:f0:1a:4c:0f:
79:a5:ea:ff:5e:e5:3d:ad:d9:d0:1d:d5:92:dc:6a:
96:dc:17:76:8e:b9:e2:0d:b0:6d:65:4f:35:e9:f2:
86:ce:4a:41:8a:a1:48:17:b9:41:e4:ff:73:78:26:
37:27:27:87:d3:f6:5f:5b:a1:e9:00:eb:36:6c:35:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:72:BA:0F:F1:7C:88:82:3B:0D:0D:96:74:9A:63:F0:DD:B2:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0331C80D97911EFBA23DEAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.145.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bc:f5:67:43:ae:9e:19:d1:54:b2:74:bb:be:ab:19:63:31:
9e:5a:9a:e2:6f:36:20:0b:a1:22:c1:3e:74:e7:56:40:1a:0c:
84:1f:e5:2b:82:e9:52:1f:ec:fb:a0:f9:22:cd:03:0c:dd:69:
00:f9:9c:4d:6d:45:c0:96:5b:23:12:76:90:a7:5e:32:85:1d:
fa:2c:b8:39:5c:14:c4:35:e3:15:cd:db:d0:7b:59:55:50:e8:
0c:13:7a:91:de:9f:ad:41:62:da:37:ad:f3:4d:4f:f9:5b:f0:
d3:be:77:f4:e0:df:c4:ef:ad:d4:30:fc:0c:db:af:50:6a:c2:
b6:1f:b0:91:fe:9e:50:84:e8:cb:ef:6c:f8:8d:e5:31:9e:b0:
f3:30:e7:51:b3:bc:80:76:90:8f:4c:bc:b9:a9:9c:3e:0e:28:
13:b4:8a:ee:1b:25:ce:60:c3:00:49:ef:4c:40:f2:54:8e:b7:
0d:c9:0e:26:16:9a:31:24:e0:72:de:6b:44:47:bd:b8:56:cb:
c4:eb:3c:36:18:a0:af:77:e7:25:7c:4f:89:77:ad:39:db:2a:
c8:4c:ff:7d:8b:47:a5:99:44:31:7a:bd:0d:bc:98:db:24:fd:
c5:52:ec:04:1d:f7:55:98:17:81:3a:46:46:c1:61:fe:55:b6:
ce:77:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:10 2025 by rpki-client