Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC710A6ADB2811EFB58FC38E762E951A.roa
File: AC710A6ADB2811EFB58FC38E762E951A.roa (raw, json)
Hash identifier: lMR7XjIJv44whGPzkqjYlhB6jHSaU9kgf6h9VTADly4=
Subject key identifier: B0:65:F1:2F:14:34:FD:B3:51:16:64:85:F0:39:A3:05:9A:4D:AE:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC710A6ADB2811EFB58FC38E762E951A.roa
Signing time: Sat 25 Jan 2025 14:28:41 +0000
ROA not before: Sat 25 Jan 2025 14:28:37 +0000
ROA not after: Wed 26 Feb 2025 14:28:37 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84446 (0x149de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:28:37 2025 GMT
Not After : Feb 26 14:28:37 2025 GMT
Subject: CN=6794f519-7750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:f2:fe:58:92:35:39:d4:cf:1d:1a:3b:0d:
5b:c5:bc:53:53:23:e9:4b:59:d6:94:db:13:ae:7c:
4f:2d:55:5f:95:5b:7a:9e:cb:c1:7f:53:c0:f5:fd:
98:05:2d:f3:65:29:b1:96:b6:68:70:f5:98:97:5c:
e5:2a:30:c5:0d:69:3f:75:3d:9e:60:ec:0d:43:0e:
5e:35:9f:13:4c:cd:72:28:3c:aa:d0:72:d3:09:66:
36:56:30:86:c0:0a:9b:10:2f:96:d9:1c:49:ff:5b:
c7:60:c2:ea:80:51:f0:70:61:89:4a:20:7b:7f:41:
fe:65:69:02:d5:4b:26:71:ce:64:16:d4:bf:fc:ee:
1d:09:1c:8f:cb:67:e3:0c:6c:43:17:26:45:71:40:
bc:17:81:b5:ab:3b:8a:ec:7f:5b:5c:f8:66:8f:12:
12:34:79:57:fb:f3:e6:f6:50:c8:56:a5:88:f8:e0:
ef:f5:0f:11:79:7b:25:46:ec:b1:fd:b1:06:8b:38:
36:74:58:c1:f9:c9:58:e5:50:a2:8a:f5:4f:56:98:
90:b2:e4:fc:a9:ad:4a:29:7a:05:7d:73:52:58:12:
4d:a9:5b:6d:97:25:35:33:35:76:81:37:c6:9b:a3:
27:8f:5b:83:be:30:07:97:d0:76:fd:b2:d1:ed:e5:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:F1:2F:14:34:FD:B3:51:16:64:85:F0:39:A3:05:9A:4D:AE:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC710A6ADB2811EFB58FC38E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
87:a6:5b:75:bc:55:e2:2c:fe:c7:bc:e1:53:f1:3e:1d:01:ff:
2c:6a:12:ec:da:17:b2:5b:b2:bb:30:4b:5e:6a:ee:fb:2d:ae:
a0:e0:35:53:d0:ca:f1:0e:dc:aa:9a:45:2e:ca:e5:b8:f7:ea:
20:e7:a4:b9:e9:89:c5:c3:ec:75:6c:ae:dd:df:f9:a4:28:7c:
8c:50:e4:96:44:67:e8:65:83:cb:fa:d5:41:82:13:38:51:50:
04:38:19:77:b2:d1:6d:ed:9a:0f:8e:d5:8d:0f:72:6b:31:9b:
b2:ab:6e:65:32:44:d1:f5:1f:f0:72:b9:1e:7a:de:a8:ce:dc:
cc:6d:9e:1e:a5:bc:fe:0c:69:23:56:f4:96:35:b7:1d:45:de:
d6:ba:b2:30:49:2b:53:e4:f9:be:08:0a:39:03:16:bb:f8:b4:
98:a3:1c:a7:6c:eb:08:4c:89:22:0e:99:cc:5c:84:d4:87:fb:
81:22:81:86:03:4d:9b:45:be:11:24:aa:5f:ae:36:c6:b0:ed:
10:4c:81:a5:00:ff:34:14:92:04:2f:37:12:d5:d5:20:63:3c:
e8:06:98:ae:a1:47:55:8a:05:0e:ad:f9:a8:a4:d2:8d:cd:df:
d5:74:9f:e2:7c:7e:bd:f1:6c:ad:ca:db:4f:83:94:94:5d:25:
01:58:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:18 2025 by rpki-client