Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2DA15C0CC2B11EF90FBDD60762E951A.roa
File: A2DA15C0CC2B11EF90FBDD60762E951A.roa (raw, json)
Hash identifier: VwzVqIHWEMXCahSTbYhl8uGTxFb/5rfzbib1puKR8Mg=
Subject key identifier: C4:BE:F9:BC:4D:7F:D9:08:7D:EA:A9:2D:32:DB:15:94:82:20:49:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01361E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2DA15C0CC2B11EF90FBDD60762E951A.roa
Signing time: Mon 06 Jan 2025 12:42:06 +0000
ROA not before: Mon 06 Jan 2025 12:42:02 +0000
ROA not after: Thu 06 Feb 2025 12:42:02 +0000
asID: 151800
IP address blocks: 154.197.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79390 (0x1361e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 12:42:02 2025 GMT
Not After : Feb 6 12:42:02 2025 GMT
Subject: CN=677bcf9e-1939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:9b:dc:ed:a2:dc:67:db:4e:51:ad:3c:74:
41:aa:af:79:ac:71:f0:7e:2b:d3:e1:5f:a3:4d:52:
45:2a:7f:d1:8b:2c:e1:6c:bf:b7:08:d8:34:ef:d8:
10:7e:d4:ef:fc:f8:ef:aa:9d:1a:95:b1:19:1a:b5:
1a:0b:a2:e8:9d:72:6a:45:2e:5e:d0:85:73:af:a4:
c6:fd:b3:bb:fd:8e:52:10:dc:8d:77:6d:18:d7:65:
89:d6:f6:a1:6c:96:a7:0a:be:31:e7:33:72:7e:a4:
e4:c6:52:cf:66:b6:e9:f8:46:3b:41:9a:f5:02:04:
90:1b:2f:f8:f9:9a:2a:59:9e:76:05:6c:8b:ec:01:
82:3e:bb:48:39:e6:cf:65:e8:36:1e:f0:1a:94:c5:
58:26:21:2e:11:c6:c0:49:a6:e0:a1:48:0b:29:73:
e9:71:46:1f:89:65:a9:a8:62:1a:e4:c0:0c:fd:52:
1b:84:0a:39:c4:2b:74:81:80:57:43:66:54:94:24:
93:12:22:13:59:6f:69:10:27:41:fb:05:7f:ce:88:
9a:d3:a5:75:8a:a7:46:f2:d8:fe:9d:c6:39:cb:20:
6c:18:fc:79:44:ea:c6:aa:d3:74:13:66:0b:29:2b:
f5:8a:7c:6b:61:e6:8c:30:4f:f7:73:05:35:0d:09:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:F9:BC:4D:7F:D9:08:7D:EA:A9:2D:32:DB:15:94:82:20:49:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2DA15C0CC2B11EF90FBDD60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:48:31:e0:ca:31:4d:ea:aa:08:0a:28:f6:f1:b8:67:1b:0c:
87:c0:0f:35:a6:97:54:64:0c:bd:a2:46:47:f2:3a:63:ba:cf:
af:06:58:e7:30:ed:3e:5c:05:0a:05:6a:cc:9f:16:b3:a3:05:
6c:af:a7:10:2f:98:ba:52:e5:fe:b4:1e:2d:c2:fd:c8:29:6d:
28:74:dc:42:ce:8b:c4:4f:d4:58:53:da:7a:bd:f0:95:9c:65:
b6:c2:15:55:90:4b:2f:aa:cc:1b:29:ee:6a:dc:39:9a:ce:bf:
e6:16:99:75:7a:a1:61:99:13:a8:59:0b:20:a2:88:66:43:fe:
62:47:48:62:a8:3d:19:97:f2:52:d9:a5:5c:f9:53:21:10:aa:
cf:9b:1a:cc:77:92:e2:a5:13:0c:1e:86:16:5e:35:2b:a7:fa:
72:d6:32:2a:9c:25:84:fb:c3:d7:20:a7:79:5b:62:e8:b3:65:
2a:6c:c0:38:e1:54:60:ba:28:51:65:af:05:55:0d:51:7a:9c:
0a:e5:5e:9d:f5:52:c9:07:8b:e4:b5:11:bf:b8:07:d9:09:0a:
82:4e:1f:88:83:5f:71:08:58:4a:c9:1e:d3:ef:f8:b4:10:a2:
4b:9e:bd:57:bc:03:00:3e:8f:36:42:1f:33:68:d8:88:a5:2a:
26:7f:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:07 2025 by rpki-client