Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C7C396DC0811EFB305B270762E951A.roa
File: A8C7C396DC0811EFB305B270762E951A.roa (raw, json)
Hash identifier: 69H/TBVl0Yfv+ZXQ1MyuBomIr8uRNuKhT57hAVP1ECM=
Subject key identifier: 0F:7D:FB:49:29:12:19:60:F2:65:EF:C9:FB:CF:D3:D6:9E:67:AA:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C7C396DC0811EFB305B270762E951A.roa
Signing time: Sun 26 Jan 2025 17:12:02 +0000
ROA not before: Sun 26 Jan 2025 17:11:58 +0000
ROA not after: Thu 20 Feb 2025 17:11:58 +0000
asID: 142062
IP address blocks: 154.86.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84754 (0x14b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 17:11:58 2025 GMT
Not After : Feb 20 17:11:58 2025 GMT
Subject: CN=67966ce2-0972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:a5:b8:8f:a7:ca:bc:c3:11:a1:64:23:16:
f5:04:7f:ce:d5:95:4c:7a:12:26:d8:0a:ee:8b:70:
dd:d1:89:b9:dd:59:44:46:3a:42:90:20:6f:d6:bd:
51:59:91:be:d1:9a:41:4c:14:7d:6b:37:16:ca:b0:
8a:1d:c5:41:1c:af:0f:0a:28:26:14:92:38:94:cd:
1f:cf:9d:92:5a:06:49:60:29:3a:2c:a2:f3:62:2d:
71:ec:16:53:6a:26:3f:70:05:10:52:23:7a:8f:b4:
70:b2:16:68:a1:33:13:db:f4:09:be:35:b2:c5:1e:
d9:f3:09:ea:e4:6e:57:fb:2e:7d:b1:73:7a:6a:70:
6c:a2:10:e8:5a:8e:3a:7f:a4:d8:c7:fb:b2:1b:51:
d9:11:98:99:0c:98:9e:57:f9:5c:ab:45:b8:10:55:
0b:76:c3:90:54:93:24:3c:1f:a5:8c:e7:da:64:4d:
4c:d0:3e:1c:1b:49:7a:fe:66:d2:aa:51:45:9b:46:
66:ea:50:20:39:4e:4d:7b:81:ca:b3:fa:47:bb:c2:
fc:c4:a3:2e:15:5e:34:53:51:73:5d:a2:0e:b4:65:
ae:af:50:42:36:08:89:14:b8:e3:84:0f:e2:8e:ef:
bb:8a:04:8d:5a:19:cd:b4:0e:80:96:50:95:cf:c8:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:FB:49:29:12:19:60:F2:65:EF:C9:FB:CF:D3:D6:9E:67:AA:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8C7C396DC0811EFB305B270762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.84.0/24
Signature Algorithm: sha256WithRSAEncryption
91:74:1c:37:5e:c2:de:eb:a3:a5:06:98:fc:df:45:f7:a0:4c:
b8:40:4e:ab:ae:27:80:54:10:93:94:d7:fa:d8:8f:e5:74:bc:
43:12:e9:da:e6:32:c5:ce:10:20:90:42:5e:8e:75:f6:d0:9b:
e6:55:3c:90:ed:d4:5c:36:cb:54:d2:93:75:89:3a:fd:ae:8e:
16:46:e5:08:36:89:74:77:7c:e9:d5:ee:ee:74:f7:9a:54:d6:
19:09:a6:23:34:4d:80:30:92:1b:a3:a6:ab:87:61:53:dd:c1:
7e:4b:5c:c4:ae:0b:d4:e4:fe:b0:14:fe:60:bf:88:ac:f2:8c:
2b:dc:48:18:64:8b:95:38:31:ee:b2:59:d6:4c:04:8d:61:5e:
d0:64:91:12:48:65:32:45:3c:1e:47:92:2c:4c:e4:16:35:60:
8f:47:c2:be:c0:70:02:f2:88:ee:7b:e1:c0:4e:ae:7e:70:91:
22:af:9d:54:17:a0:01:3b:c6:e9:6a:50:4f:84:28:cd:47:0f:
07:4c:2c:cb:77:30:90:51:22:e6:ca:6c:ee:7c:3c:dd:6f:25:
46:94:17:4b:5e:35:4e:06:e5:ce:b2:36:62:06:32:e9:62:d6:
23:db:b6:55:44:86:f0:97:44:53:71:0f:9d:29:45:fa:44:47:
31:d8:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:13 2025 by rpki-client