Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B318A104D9C311EF88F14F96762E951A.roa
File: B318A104D9C311EF88F14F96762E951A.roa (raw, json)
Hash identifier: 0C77FbKAvu0/JIZT6OrbD9b5FS/l1kx4oeTMhfJdeqA=
Subject key identifier: 12:21:46:DE:B1:9E:34:DE:9A:F2:4A:C5:F8:A1:7E:AE:73:05:1C:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B318A104D9C311EF88F14F96762E951A.roa
Signing time: Thu 23 Jan 2025 19:53:22 +0000
ROA not before: Fri 24 Jan 2025 19:53:18 +0000
ROA not after: Fri 28 Feb 2025 19:53:18 +0000
asID: 62240
IP address blocks: 154.196.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82606 (0x142ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:53:18 2025 GMT
Not After : Feb 28 19:53:18 2025 GMT
Subject: CN=67929e32-3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c8:2b:5a:e0:bf:4d:df:87:0f:b8:86:98:c7:
a0:5e:dc:85:fc:e1:d4:9f:b7:0c:07:b8:20:2f:7f:
66:ec:58:e9:f1:4d:6e:29:71:f4:d9:49:a5:eb:e8:
c6:af:df:c4:ae:77:8a:6d:3e:b1:45:69:51:2f:1e:
72:aa:18:6e:f6:ad:72:56:46:13:4b:6b:fb:77:0c:
3d:55:48:c6:ac:24:b7:7b:c5:7a:d8:42:34:49:e8:
9b:59:10:e6:c5:36:b5:df:d4:97:ae:11:86:8e:82:
c0:67:11:e5:5e:7b:66:8c:82:58:22:26:1d:1f:b8:
5a:87:03:32:33:a0:c7:9e:4e:49:97:7f:36:40:ca:
70:52:0e:18:5f:8b:49:ff:df:d6:af:1a:6e:9b:cf:
d4:86:49:1b:63:15:d2:b0:4b:38:3e:37:67:c2:80:
a2:dc:05:aa:86:5e:1b:f4:ff:99:73:48:8e:bb:5e:
76:1b:9f:90:4f:29:b0:f8:34:d1:2e:d8:91:84:14:
6e:5d:b0:a4:a5:73:86:de:68:24:64:d7:d7:07:3d:
11:cb:be:5f:25:c0:41:fb:ce:35:22:cd:27:85:29:
80:49:9b:ba:f6:39:99:6c:af:ba:d9:3a:6c:01:c3:
90:46:32:8c:08:4e:fe:da:43:1f:bd:1a:ea:3b:95:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:46:DE:B1:9E:34:DE:9A:F2:4A:C5:F8:A1:7E:AE:73:05:1C:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B318A104D9C311EF88F14F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.35.0/24
Signature Algorithm: sha256WithRSAEncryption
99:af:e1:57:aa:5e:0f:04:8c:c5:cd:be:77:94:96:d2:6d:44:
e7:a4:a0:21:27:21:cf:3b:99:f4:61:0c:24:f4:5c:b1:eb:8d:
b1:c1:2e:5b:6a:60:53:78:15:88:c5:33:97:06:66:76:80:14:
85:fd:cb:33:b2:e3:43:d7:8a:8f:31:33:f2:2f:51:93:e7:07:
7f:d6:76:1f:85:5e:2c:99:2c:06:1b:bc:d0:b0:d7:dc:8c:cf:
f1:86:94:30:78:26:43:ea:75:d9:73:25:0c:aa:c8:5c:59:30:
e7:8e:27:c5:21:80:d2:2e:94:65:39:11:f0:f7:1f:61:44:35:
61:cd:eb:1f:ca:13:70:ed:e1:30:7c:77:0d:4a:13:66:4e:fa:
db:e3:4f:29:03:2b:90:83:15:de:9b:6a:96:dc:57:46:0c:78:
02:50:40:eb:14:49:fe:33:59:d6:58:60:d1:49:23:b8:83:06:
ac:ea:db:37:ff:5c:c1:32:9e:d9:ec:a0:29:f2:b2:9f:5e:4d:
f2:89:f4:2b:fe:84:58:fa:c7:15:ae:53:c3:f8:0e:1f:2f:24:
2e:b3:bd:88:13:19:1f:ef:2f:11:99:a5:2c:13:4a:8c:24:44:
0f:6e:f7:c9:6e:44:97:af:55:47:0e:99:56:80:86:a5:9a:fe:
f5:aa:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:07 2025 by rpki-client