Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A448862CDCBF11EFBF09E243762E951A.roa
File: A448862CDCBF11EFBF09E243762E951A.roa (raw, json)
Hash identifier: P870pHPkHq1ho/jW4s/fT6DsJfkyrT0tD/o8yQ03UvY=
Subject key identifier: 46:4F:93:B1:FB:1F:53:E2:12:CC:9B:15:51:E6:98:96:E7:D6:FE:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A448862CDCBF11EFBF09E243762E951A.roa
Signing time: Mon 27 Jan 2025 15:01:53 +0000
ROA not before: Mon 27 Jan 2025 15:01:49 +0000
ROA not after: Sun 09 Feb 2025 15:01:49 +0000
asID: 5065
IP address blocks: 154.86.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85035 (0x14c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:01:49 2025 GMT
Not After : Feb 9 15:01:49 2025 GMT
Subject: CN=67979fe0-d24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:e9:98:86:d9:9d:d8:fd:93:d4:d7:a4:17:
68:33:71:dd:c5:f4:d9:be:35:f1:5b:e0:a6:83:0d:
4f:e7:15:8f:c7:94:f8:34:fa:99:25:ca:2b:bc:cb:
b1:d1:6d:a7:54:cb:fd:34:d0:fd:a9:a0:86:18:5d:
67:a8:14:31:eb:46:5c:cb:23:e5:9f:9d:90:5b:9b:
38:a8:7a:63:2e:ea:44:5f:f9:92:6a:c1:db:4b:06:
fb:57:76:19:55:d7:0e:60:69:f3:a6:50:5d:f2:78:
51:67:11:97:72:22:65:35:dc:2f:cd:66:3d:cd:25:
ba:92:5c:88:12:a3:5d:9b:32:44:3d:0a:45:b5:b2:
50:49:a6:12:b6:f8:7f:48:6e:f6:09:20:3f:3e:6e:
cf:fc:12:a6:a7:4d:55:94:a4:e1:a5:67:bb:94:c8:
bd:cd:0c:7c:70:07:2d:e0:4c:57:ea:c2:61:57:3c:
6c:06:79:8f:4d:5c:74:f0:95:74:22:27:55:55:76:
fd:80:64:b3:f2:b4:86:37:66:ef:d3:e7:f4:42:e8:
b4:17:7f:1b:4a:dc:a7:11:6a:cb:74:22:63:58:59:
84:4d:0d:2c:84:2f:55:9f:6f:7a:1d:a3:3f:05:68:
c9:ec:73:f8:a0:e3:f5:9c:e3:88:ef:8b:30:e9:f2:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:93:B1:FB:1F:53:E2:12:CC:9B:15:51:E6:98:96:E7:D6:FE:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A448862CDCBF11EFBF09E243762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0a:02:9d:e2:59:cb:6b:e1:d2:82:ac:ce:99:83:7a:21:63:
e5:49:75:79:86:e2:30:96:f4:ea:ef:46:36:43:41:ea:8c:7c:
47:af:ee:bf:99:5e:6c:95:33:09:18:01:06:2c:aa:3b:6c:87:
29:64:83:ae:99:fc:c1:6a:0b:6f:99:55:cf:87:97:f4:22:2e:
ab:8f:06:2a:23:8d:c1:c6:4a:4f:b8:c0:c5:6c:81:a4:43:29:
fe:7a:22:d1:e3:1b:99:5f:e6:21:1c:40:88:14:ac:9a:b1:2f:
3a:81:8a:43:ed:56:f7:cb:10:be:f9:22:ef:c9:16:04:cf:d2:
ad:24:b7:14:fd:7c:14:a7:71:21:5d:95:36:11:9d:b9:fe:bf:
b4:a8:8c:e0:dd:4c:1e:3a:b9:c1:e3:f3:e4:a6:48:da:19:c2:
5c:5c:85:d0:28:07:20:63:0a:67:cd:71:d4:75:0f:37:e3:49:
18:48:15:f5:c6:63:98:96:78:58:34:52:17:59:d6:b3:5f:e2:
48:a7:ea:8a:0e:42:99:6c:1d:41:f0:ef:9b:96:d3:1c:30:e8:
ca:81:f0:cf:1b:08:5a:c1:07:31:e4:60:a8:81:76:b5:86:6c:
44:90:a3:50:68:fd:5d:1c:b4:1c:23:5a:82:8d:61:7a:f8:8b:
a3:f4:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:02 2025 by rpki-client