Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4211060D30A11EFB5EC638D762E951A.roa
File: A4211060D30A11EFB5EC638D762E951A.roa (raw, json)
Hash identifier: c8OZEkQDdQdQCy1zIHPbVmwIfB2NmCQH3BznMB5jSfk=
Subject key identifier: 49:11:55:92:6E:F4:6C:09:C3:9C:B5:52:06:B2:0C:C4:7E:73:56:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4211060D30A11EFB5EC638D762E951A.roa
Signing time: Wed 15 Jan 2025 06:33:33 +0000
ROA not before: Wed 15 Jan 2025 06:33:29 +0000
ROA not after: Wed 19 Feb 2025 06:33:29 +0000
asID: 53803
IP address blocks: 154.195.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80807 (0x13ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 06:33:29 2025 GMT
Not After : Feb 19 06:33:29 2025 GMT
Subject: CN=678756bd-56ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:93:98:6c:46:be:f9:23:13:64:09:24:0e:72:
4d:af:97:ed:df:ef:74:36:d1:82:b3:ff:c6:9b:3e:
fb:cb:5c:ec:36:e5:98:0e:16:83:2a:a6:85:b3:95:
d1:ff:83:47:15:c2:41:0b:f2:ec:b3:8f:46:e3:b6:
b0:90:b0:d3:9e:6d:b3:97:aa:ec:34:82:48:14:4a:
0c:04:0e:2c:c0:22:26:86:8c:28:a3:f5:e3:c5:b1:
22:d8:f2:66:84:66:30:b9:6f:cd:dc:0a:18:fb:72:
29:4b:24:bd:cd:0c:b2:91:13:db:f4:13:4e:26:d4:
eb:73:d5:1e:83:06:7a:47:4d:a0:6e:15:15:7f:a2:
4f:b6:49:30:09:f7:40:de:1e:18:74:eb:cf:95:34:
7e:cb:76:10:e2:1b:dc:40:66:6a:b9:81:a4:c9:c4:
f3:63:81:88:1b:93:fc:8d:4c:17:d1:68:b6:00:5f:
2e:74:c6:9c:05:f9:a1:c8:61:82:85:00:d9:1d:d6:
f5:78:a9:05:b3:ed:c2:fc:e7:6a:4d:b6:2d:ce:33:
a6:61:e2:e7:90:c7:54:6c:ca:a4:be:86:c2:5f:5a:
87:f1:d4:4e:5c:13:56:67:11:b8:39:7f:8c:68:2f:
34:51:7e:f1:b3:ce:06:9b:9f:00:6f:20:23:e0:14:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:55:92:6E:F4:6C:09:C3:9C:B5:52:06:B2:0C:C4:7E:73:56:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4211060D30A11EFB5EC638D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:00:14:7a:4e:f6:3d:b6:08:e0:32:ff:b7:db:43:c8:29:9d:
23:e2:11:ed:5a:a0:10:48:11:85:bd:bb:6e:08:87:80:a9:0c:
56:f3:bf:47:ef:4c:d0:00:19:5c:8c:73:da:c5:a6:e4:34:6d:
4e:7f:f9:81:4a:b9:3b:45:97:ba:85:aa:20:ff:0c:04:6d:af:
a6:3d:a2:18:1a:cf:df:5e:27:df:6a:ca:36:e9:e8:80:83:c3:
c9:b2:ba:c6:ba:b9:5e:60:df:a8:bb:0b:83:b2:0a:99:74:13:
f0:d9:f5:df:c6:04:9e:90:8a:15:a1:34:1b:08:91:3e:6b:ac:
bd:ba:9b:4b:66:17:8e:89:7a:a2:f1:ac:e8:fc:5f:bc:36:83:
bc:d6:4e:2b:7e:43:41:dd:de:a7:5d:2c:55:e7:72:48:76:43:
26:8c:8e:0f:0c:71:b3:ec:69:3e:79:64:64:22:ef:43:1e:17:
95:c1:b0:ea:19:80:4f:9a:c9:9d:ae:15:b2:91:56:f9:93:28:
f0:a9:44:fa:84:a5:eb:81:79:22:72:b3:9a:0a:3c:02:4e:b7:
c8:35:33:88:05:77:18:15:a6:2f:19:4e:f5:90:d8:2d:77:fc:
3d:a8:88:1a:92:4d:5e:65:40:2e:e4:7c:72:84:9d:ec:28:10:
02:69:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:53 2025 by rpki-client