Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A802D1E4DA2811EFAC805348762E951A.roa
File: A802D1E4DA2811EFAC805348762E951A.roa (raw, json)
Hash identifier: AvREfl2m1kqn1TRIOjWCfW6qGOhAX6KlEDl/o+bRANk=
Subject key identifier: AC:6D:FA:C7:D4:85:70:CD:1F:98:26:D6:A5:B0:05:D7:E7:F1:ED:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014438
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A802D1E4DA2811EFAC805348762E951A.roa
Signing time: Fri 24 Jan 2025 07:56:02 +0000
ROA not before: Fri 24 Jan 2025 07:55:59 +0000
ROA not after: Wed 05 Mar 2025 07:55:59 +0000
asID: 202656
IP address blocks: 154.222.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83000 (0x14438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:55:59 2025 GMT
Not After : Mar 5 07:55:59 2025 GMT
Subject: CN=67934792-47ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:8e:50:01:bb:fa:04:10:28:65:1e:ea:57:
7b:66:5b:f4:5e:b1:21:27:ee:ff:ad:35:e3:8a:ce:
40:6c:51:be:be:3a:0f:66:f3:27:06:d7:ef:92:ac:
b8:0b:0c:f8:cd:d2:8f:3b:9e:47:ff:1c:42:4c:04:
f0:8a:bf:66:92:bf:d3:46:ff:22:aa:9a:7e:ac:e5:
c2:37:ae:20:0c:af:c2:2a:02:da:71:ef:48:5c:26:
79:9a:32:c6:64:71:25:ad:ee:90:f9:16:06:c5:4c:
ef:e7:83:89:a9:e4:f2:55:d2:62:76:28:1e:94:e7:
cc:50:2c:2c:38:9a:8e:0d:5f:5a:22:a8:8c:3b:5a:
84:cb:63:fe:85:7f:f9:f6:51:5d:dd:79:26:12:fd:
ae:02:c1:98:f9:e4:be:93:c1:d6:1d:f3:7f:a5:e3:
be:05:8d:73:b2:94:f0:4c:9b:55:29:bb:df:aa:4d:
86:88:3b:8e:7f:e7:a7:e4:5c:20:1a:db:65:e9:ee:
61:8b:71:36:e0:4c:fa:cd:06:3e:50:dd:8e:9b:5e:
c7:f9:b3:5b:29:6b:3d:56:5a:11:43:88:c1:d6:13:
3b:58:50:c4:dc:2e:4c:c4:08:4c:1a:c1:7a:d9:67:
53:be:02:e4:66:37:ee:99:7c:ab:26:19:81:3d:1b:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:FA:C7:D4:85:70:CD:1F:98:26:D6:A5:B0:05:D7:E7:F1:ED:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A802D1E4DA2811EFAC805348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c7:ea:e9:65:76:4f:17:10:03:e5:58:34:f9:c9:05:44:fc:
be:41:63:31:ff:ed:71:72:ff:fd:89:e2:da:5b:d5:9d:ff:f8:
b1:17:5a:e0:3e:c1:8c:da:e2:fe:ad:65:7c:bc:cb:f0:d0:55:
80:a8:c7:80:80:48:ca:65:88:a2:52:e7:8a:77:76:2e:de:9c:
1f:b7:64:1a:c0:6e:cb:9a:59:10:1e:ba:37:56:f6:69:63:72:
1e:e3:44:83:ab:bf:0d:f9:52:9f:27:ea:6a:05:7c:15:c4:b1:
ba:d8:d1:26:63:ba:5b:4d:bd:0f:1c:4e:c0:56:b1:90:62:b8:
12:cf:26:b7:22:82:51:3b:9b:78:33:cd:e3:08:0a:b3:26:64:
61:c0:0a:d9:3d:c3:b0:c2:d6:e9:1b:78:ca:45:26:69:5e:34:
cd:38:64:46:03:c0:87:82:80:57:ff:28:3d:fa:87:12:a4:51:
a4:b5:93:4d:5c:43:9a:f3:13:b0:a9:75:1f:fc:7e:0e:bf:81:
81:d3:d9:b4:df:8a:ed:66:cd:eb:87:f0:dd:75:8a:38:ec:a0:
87:ae:33:31:f1:67:ba:90:c2:7e:48:7e:3b:0a:f2:6f:d6:7d:
a5:21:3e:22:83:ab:8e:7b:f1:90:d8:34:ff:2b:d4:0b:6a:b7:
42:b1:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:27:16 2025 by rpki-client