Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC756EBED9D111EFB633C973762E951A.roa
File: AC756EBED9D111EFB633C973762E951A.roa (raw, json)
Hash identifier: dxoIoGlFaGk+W+mi5FR+WitLh/uGmr9fXIEd6NSfwnc=
Subject key identifier: 83:20:E0:7F:AE:61:94:58:7C:28:69:0D:D1:ED:24:91:B1:93:70:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014315
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC756EBED9D111EFB633C973762E951A.roa
Signing time: Thu 23 Jan 2025 21:33:24 +0000
ROA not before: Fri 24 Jan 2025 21:33:20 +0000
ROA not after: Fri 28 Feb 2025 21:33:20 +0000
asID: 62240
IP address blocks: 154.196.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82709 (0x14315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:33:20 2025 GMT
Not After : Feb 28 21:33:20 2025 GMT
Subject: CN=6792b5a4-8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f3:a0:58:54:71:b2:73:92:a3:b3:7d:f2:35:
3d:99:93:3b:b6:10:06:ef:5b:c0:1f:4d:b1:e6:c8:
02:91:c9:f7:64:67:12:f0:84:26:e0:e4:a0:5a:76:
2b:75:9e:c9:2a:4d:3a:65:db:ad:04:6b:67:35:84:
3d:2f:77:f8:12:fd:25:a1:c9:ad:2f:6d:53:94:76:
e7:0e:dc:36:d1:f4:30:ce:16:70:b1:4c:a7:ca:ec:
8c:a5:93:71:14:67:d6:ce:1a:81:81:ef:2e:ff:1e:
01:ec:fe:8e:b1:96:17:f8:6d:0c:67:e1:7d:c2:60:
86:bf:c6:6e:80:5f:0c:ab:34:e9:0e:2a:de:f4:03:
3d:de:a1:07:1a:5e:33:74:f8:90:2f:6c:f8:67:67:
2f:03:dc:8d:d8:f4:d4:17:de:22:b3:f2:1a:2c:05:
25:42:51:02:f9:92:93:36:b7:be:39:89:ff:56:67:
5d:0c:16:67:f3:1f:ff:58:14:e8:25:41:e8:0c:6e:
09:f9:fa:3a:1f:1e:af:80:e4:29:1d:bd:4b:d0:75:
01:c3:1b:5d:5c:ec:13:53:67:a6:3e:61:a8:4f:5f:
9e:7e:10:6f:e9:1e:ab:1f:9b:3d:ce:25:c6:29:9f:
16:fa:8f:42:4a:89:73:f9:ab:0f:04:2b:e2:d3:0d:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:E0:7F:AE:61:94:58:7C:28:69:0D:D1:ED:24:91:B1:93:70:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC756EBED9D111EFB633C973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.84.0/24
Signature Algorithm: sha256WithRSAEncryption
46:50:22:79:72:9a:e0:07:b3:6f:c0:f1:a1:06:2a:15:82:9a:
be:a4:97:ab:07:f8:0f:74:24:ee:0c:4a:fb:3e:60:72:f2:67:
a0:b6:02:23:3c:f4:f6:e0:86:69:51:07:14:ca:98:5d:4f:1d:
f1:e7:3b:f2:40:92:7c:dd:06:2f:45:0e:b1:b7:bc:32:40:42:
d2:c3:6d:dd:b7:85:09:7a:a6:d1:c0:aa:a1:0d:94:71:42:41:
73:57:98:36:75:8e:37:fe:67:12:54:57:7a:f8:ae:07:15:eb:
64:fd:82:13:b1:a4:b4:2d:be:48:48:17:5d:7c:90:5b:6c:fa:
e6:6d:a7:ab:42:a0:14:fe:31:61:19:5c:d8:97:d3:7e:a7:de:
3c:02:b7:e7:7a:76:22:58:4f:d5:76:d3:97:3b:03:33:70:d3:
a8:3d:35:bd:ea:7a:5d:b9:51:13:62:90:53:94:3b:aa:06:91:
6b:f6:65:1c:56:d1:f0:35:dc:60:1d:56:02:94:cb:b5:0f:2e:
5a:b3:c6:71:06:c3:0a:dc:23:3c:6e:b4:20:c8:ac:d6:8a:7c:
cf:ee:24:40:bd:96:98:7e:e5:5c:34:19:40:db:7e:c6:a2:4b:
26:9d:d3:09:72:56:e6:9d:d6:9a:49:65:76:9c:fd:96:83:c4:
64:2b:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:08 2025 by rpki-client