Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3242086D98411EF86359278762E951A.roa
File: B3242086D98411EF86359278762E951A.roa (raw, json)
Hash identifier: VIyvsWay1Wr1FzU1DajiEqHQf2UxrhLiq9UL5PMna1E=
Subject key identifier: A6:0A:7D:0A:15:84:9D:D1:B7:57:BD:56:57:9B:B7:C8:77:F8:86:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014209
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3242086D98411EF86359278762E951A.roa
Signing time: Thu 23 Jan 2025 12:22:24 +0000
ROA not before: Thu 23 Jan 2025 12:22:20 +0000
ROA not after: Fri 28 Feb 2025 12:22:20 +0000
asID: 62240
IP address blocks: 154.195.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82441 (0x14209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:22:20 2025 GMT
Not After : Feb 28 12:22:20 2025 GMT
Subject: CN=6792347f-42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:fb:60:9f:d9:14:e4:a9:d4:37:b9:d7:49:
39:68:59:e4:db:96:5d:20:bd:28:14:2f:f1:fb:4e:
2e:b8:11:c7:2d:de:0e:75:6e:e8:35:0a:91:02:3c:
c4:5d:fb:07:30:7d:df:8b:94:a4:a3:f5:f2:18:17:
7d:39:4e:39:a0:61:b6:a3:ee:82:0d:72:9c:16:20:
b6:73:0d:13:25:72:e9:a7:58:24:b4:f9:d7:60:53:
18:c7:ab:d9:e1:d6:32:1a:12:cd:6c:5d:4f:dd:29:
33:a3:a6:65:92:10:e6:30:1f:05:0b:37:8c:19:0c:
75:49:35:19:3d:9b:78:89:61:31:8f:27:ae:9f:86:
1f:f8:1c:df:62:83:e6:0a:b0:2b:3a:f3:6b:af:85:
31:3f:f7:e3:55:83:f3:7f:14:e6:3b:dc:78:6e:22:
ca:83:c7:27:cf:f7:56:33:8f:48:79:7d:99:03:77:
a6:57:c9:cc:fe:5a:60:ce:75:91:37:e7:e3:be:b0:
22:b7:bc:bd:c1:09:16:12:ce:3d:0c:7a:9c:50:1c:
f5:be:a1:e1:eb:d1:2f:ce:f6:63:d3:96:c9:25:cb:
4e:fb:3c:24:1e:c9:da:04:3e:66:fe:3a:e9:05:f8:
d8:7b:00:a4:22:1a:81:bd:1a:c4:11:75:38:5d:90:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0A:7D:0A:15:84:9D:D1:B7:57:BD:56:57:9B:B7:C8:77:F8:86:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3242086D98411EF86359278762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d2:64:3b:9f:b0:80:76:af:af:60:a6:fd:f0:f9:04:20:63:
30:a6:14:8b:cd:e6:f2:28:43:a1:34:fb:be:dc:d3:af:ab:75:
33:e8:88:dc:60:5a:40:1c:f3:9a:eb:11:eb:fe:11:77:7a:3b:
d9:75:b8:35:98:54:0a:94:bc:2a:e9:76:ff:77:4b:0b:b5:71:
90:3b:cc:ef:0a:f1:6d:5f:79:18:21:df:4d:22:b6:27:dc:af:
d9:bd:21:18:b0:89:48:e3:96:7e:93:71:43:f8:4d:53:65:cd:
a2:33:62:a7:10:2f:04:7d:10:9d:25:5a:33:b7:a7:6f:e2:29:
ab:4f:0d:fb:e3:84:07:76:f7:4f:ba:a9:03:db:0f:60:d1:7c:
58:10:7c:6b:08:79:76:7d:68:28:b5:ad:51:06:c7:63:7d:9c:
62:e0:2c:41:9d:2c:be:eb:ad:5e:7e:2d:c3:f1:2b:c6:8e:b7:
14:67:51:0b:ef:ae:53:2c:6b:c7:30:fb:3f:df:7b:47:b2:ce:
06:b0:f6:e5:74:74:5b:42:9c:2e:64:0a:0e:8e:93:9b:ee:86:
c8:cc:bc:fb:40:ac:54:2d:08:1a:4c:22:5e:e7:91:85:f6:5a:
5c:b3:80:7e:b2:d2:b7:5f:8e:f6:a2:66:c9:03:3c:14:7d:79:
c5:85:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:18 2025 by rpki-client