Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B7F2C8D97511EF91255891762E951A.roa
File: A6B7F2C8D97511EF91255891762E951A.roa (raw, json)
Hash identifier: Ob/tQjMUblcaBKhIVKob+uqk8qWff9d/U03L418fw7w=
Subject key identifier: 12:3C:C0:29:20:AF:DC:10:32:23:6B:C9:45:9A:87:47:04:2B:FD:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014132
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B7F2C8D97511EF91255891762E951A.roa
Signing time: Thu 23 Jan 2025 10:34:40 +0000
ROA not before: Thu 23 Jan 2025 10:34:36 +0000
ROA not after: Fri 28 Feb 2025 10:34:36 +0000
asID: 62240
IP address blocks: 154.195.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82226 (0x14132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:34:36 2025 GMT
Not After : Feb 28 10:34:36 2025 GMT
Subject: CN=67921b40-6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:43:86:b5:16:e3:80:7f:83:30:08:e8:7a:
36:b5:9b:e4:19:1d:3f:14:3b:ce:11:32:ae:87:28:
52:4a:b7:31:27:88:5f:c0:05:66:72:67:ad:fe:c9:
f6:85:ca:1b:97:07:b7:e6:11:87:96:9a:75:b3:99:
a1:dd:27:73:59:7f:c9:b4:b5:10:2f:45:07:6e:27:
03:3d:33:c0:60:b6:a4:3a:42:cd:60:8a:c3:1b:4f:
22:86:9c:e9:20:61:09:ac:3d:9b:b7:01:b1:cd:1c:
6a:c7:a0:c0:6f:41:ad:fa:5c:97:1c:9e:00:f9:7e:
6e:dc:5e:97:97:d9:1a:e4:e1:25:a8:36:0c:ea:af:
a4:06:82:f8:89:9e:5f:48:ba:a2:1a:b4:4d:ee:c0:
8f:fc:64:f8:45:1e:f4:76:c5:50:a0:5a:10:f6:ff:
fe:90:88:4f:ed:3c:32:0e:b8:60:09:16:d2:23:d7:
7c:c3:84:39:6f:91:d2:42:07:d8:cc:0f:87:21:5d:
af:e7:47:72:bb:07:75:9b:0b:5b:4b:aa:af:8b:05:
b3:e0:d1:da:35:09:9b:b9:bc:38:ce:f4:18:64:31:
21:84:69:16:d7:27:b1:1b:d4:42:0f:08:18:cb:93:
15:57:a7:77:f0:66:55:ab:29:4f:8d:2f:0f:25:72:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:C0:29:20:AF:DC:10:32:23:6B:C9:45:9A:87:47:04:2B:FD:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B7F2C8D97511EF91255891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9c:9b:9c:ee:25:f5:73:ce:f4:cf:e9:21:e1:de:28:c4:11:
a5:dc:e8:78:03:a2:7c:52:e6:6b:0d:5f:b7:c5:78:15:2d:39:
fe:4f:d4:cb:2b:24:36:3e:c8:93:b0:c5:5b:6b:d6:3e:c8:b4:
01:c5:d8:bd:9a:ee:cd:af:7a:bc:62:82:54:96:80:a2:56:4d:
d0:2c:a4:40:34:89:5d:69:72:fc:ad:85:1a:2b:49:9f:af:15:
7e:1f:ba:82:fe:0b:69:ed:37:aa:4a:eb:86:75:de:7d:96:f9:
8f:a6:79:a6:dd:d0:69:31:9d:63:f7:6f:d8:8b:cb:e6:b5:4d:
4d:47:53:cb:dc:dd:f9:0c:d4:26:28:dd:fe:cf:be:02:43:15:
9d:5a:fb:d1:60:d4:6d:9b:77:14:3c:d2:3d:8b:65:89:b2:fd:
23:40:da:a9:a5:ca:d8:7f:31:35:24:5c:de:f6:90:d0:75:71:
41:8a:c8:f4:2d:17:1b:98:b7:03:93:f2:86:ac:d5:c7:b3:7b:
76:27:3e:29:d2:f0:50:ce:68:5b:ab:72:06:8d:61:ad:ac:fd:
04:e5:69:93:96:ce:cd:9e:38:7d:3f:83:d5:fa:6c:ae:a1:f2:
08:88:c6:83:3c:fc:79:d9:3c:20:07:b0:41:a2:8c:63:dc:f1:
6a:cf:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:52 2025 by rpki-client