Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4133250D96911EF99D7E341762E951A.roa
File: A4133250D96911EF99D7E341762E951A.roa (raw, json)
Hash identifier: 1hyCkno+fywG7Xf+sbxBQyt1CvAypmgZ9SWpfll3ytY=
Subject key identifier: 98:4C:E7:06:32:B1:07:1D:31:BA:C2:DA:D4:BD:D5:BF:E4:80:1E:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4133250D96911EF99D7E341762E951A.roa
Signing time: Thu 23 Jan 2025 09:08:42 +0000
ROA not before: Thu 23 Jan 2025 09:08:38 +0000
ROA not after: Fri 28 Feb 2025 09:08:38 +0000
asID: 62240
IP address blocks: 154.194.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82128 (0x140d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:08:38 2025 GMT
Not After : Feb 28 09:08:38 2025 GMT
Subject: CN=6792071a-5fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:b3:ac:47:6a:ea:fe:de:7d:bf:1e:65:ba:
63:90:74:6c:a7:59:29:cf:18:27:fb:50:42:4a:bc:
79:b2:c0:8a:9e:9e:77:62:f6:e7:14:a3:0e:9f:a3:
4c:1e:d7:d8:eb:1c:c8:2e:bc:35:2c:54:47:67:52:
4d:be:55:89:26:99:7c:87:c8:4e:8b:8b:51:dd:07:
63:c8:91:d6:6f:bc:c2:42:8f:12:7d:4b:a0:86:43:
e1:ee:fd:58:75:47:66:60:36:32:a5:ea:e3:0b:76:
54:d3:72:90:a4:59:41:b4:22:0c:df:35:c3:1b:d7:
98:88:46:19:df:28:3d:a4:9f:63:c5:53:a5:8e:e6:
6d:14:5d:20:21:f9:08:94:c4:7d:86:cc:aa:e9:4c:
5a:d3:ca:c8:80:5b:f1:b7:f9:8d:df:94:87:fc:bc:
aa:f5:0e:58:fa:16:cd:ad:0d:ff:02:dc:94:86:44:
c3:68:72:3b:af:dd:29:1e:8a:d7:22:05:ae:8f:76:
c6:8d:ca:2d:20:26:eb:3c:14:b1:f5:9a:7d:45:6e:
84:fc:c8:6a:67:3c:b7:a8:c6:5c:69:53:46:85:20:
37:2c:17:bb:33:aa:63:01:be:a7:29:24:59:38:31:
25:bc:a7:49:96:a7:92:08:1a:49:db:c1:69:55:03:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:E7:06:32:B1:07:1D:31:BA:C2:DA:D4:BD:D5:BF:E4:80:1E:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4133250D96911EF99D7E341762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:80:7d:fc:f3:ed:76:6f:51:a6:7b:59:96:c4:5e:d9:5a:3a:
ac:16:e5:cc:5d:3b:8c:f8:c5:14:d9:92:41:28:12:36:20:54:
bc:78:9c:3e:a8:1b:5d:31:ab:e2:43:b4:d0:79:e6:62:58:44:
81:02:b5:8c:d8:1b:31:c2:4e:50:41:66:2d:74:b7:0a:09:0b:
40:8e:7a:16:b9:d6:98:ed:ea:ed:c5:a7:01:9c:c2:b3:a8:0f:
ef:46:06:44:6d:93:8d:26:5b:fa:54:77:64:95:53:0b:c1:8e:
04:d1:32:ec:e9:99:38:ae:5b:ef:c0:aa:88:fb:66:ee:c9:2a:
68:79:a0:21:2e:b6:ad:0c:5b:23:2c:33:b0:b0:8b:b7:0f:9a:
2a:3e:8a:06:f2:74:22:34:9d:bc:f7:07:78:90:6f:24:a2:a9:
f8:a0:cb:f9:e8:62:87:c8:ee:e6:64:b6:e1:d6:75:94:92:c6:
b8:b0:cb:8d:4b:ef:f5:4e:ec:3a:82:53:af:dc:c2:98:25:a8:
b1:df:b3:26:0b:7a:55:13:85:79:c5:a5:fe:bd:d6:61:30:ee:
3d:d9:7c:0a:bc:bf:57:07:0c:a8:4f:e0:c5:b6:6f:cf:65:d4:
93:40:49:a1:d4:53:69:34:f3:f0:4a:a1:71:7f:78:d0:ea:48:
3f:b0:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:41 2025 by rpki-client