Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3894D96DCA211EF8A5EC482762E951A.roa
File: B3894D96DCA211EF8A5EC482762E951A.roa (raw, json)
Hash identifier: LMONYBAPwOPkgl8CtVEL8sufVyZ3h+CEw+ZQQ9d365Y=
Subject key identifier: B6:B2:68:3F:B7:01:E5:E8:F5:73:22:60:E5:79:29:FD:CE:CE:A5:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3894D96DCA211EF8A5EC482762E951A.roa
Signing time: Mon 27 Jan 2025 11:34:43 +0000
ROA not before: Mon 27 Jan 2025 11:34:35 +0000
ROA not after: Sat 08 Feb 2025 11:34:35 +0000
asID: 7018
IP address blocks: 154.195.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84953 (0x14bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:34:35 2025 GMT
Not After : Feb 8 11:34:35 2025 GMT
Subject: CN=67976f53-bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:66:41:c3:19:7d:b6:02:9b:e5:8b:74:f9:
5c:6b:b0:d1:73:2f:92:0f:20:b7:a5:7a:6d:2f:b1:
ac:ac:63:89:90:cc:1e:05:d9:87:15:f7:5f:dc:eb:
6a:14:e4:ec:35:b5:1c:4f:f8:cb:0d:b2:6c:0e:b8:
2c:17:0a:6d:c8:99:22:49:1c:45:4e:10:44:cf:bb:
8d:6b:21:4b:00:b8:a0:d2:e0:ec:b3:c3:e9:3e:2c:
f9:4f:d2:c9:1b:99:3d:8e:51:8f:48:1c:e7:01:79:
00:31:12:95:5a:6b:b6:ef:57:b6:7c:ee:82:24:27:
cb:84:f6:ad:db:29:93:e4:41:f6:9b:50:05:ed:8e:
7e:34:23:26:02:5b:cb:0c:df:42:96:8a:e5:37:53:
c8:f3:ed:d9:a1:a8:77:b7:64:26:d7:ad:08:0a:10:
e9:81:0f:10:7a:d1:50:2e:6d:79:8d:5e:66:8d:a9:
5f:3a:c0:c8:3c:b2:c4:14:5b:b4:c6:77:1c:37:97:
6f:02:71:c2:f6:90:34:b8:a1:41:52:68:20:90:ac:
a3:ad:e6:95:ae:88:46:ac:3c:89:4b:d4:3e:d9:df:
cf:84:78:a3:35:09:2c:66:17:0a:e7:19:88:a4:5d:
16:c1:b4:e3:cb:3f:6f:85:6e:f3:db:11:a1:58:c6:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:68:3F:B7:01:E5:E8:F5:73:22:60:E5:79:29:FD:CE:CE:A5:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3894D96DCA211EF8A5EC482762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a6:66:d2:01:c4:3e:3d:fd:dd:2b:08:bf:09:0b:3d:2b:aa:
d6:dc:bf:7e:9e:32:91:33:83:36:58:9c:b4:32:e1:57:9c:6b:
a6:25:f3:56:e2:b2:c2:85:58:62:a1:4e:5d:3e:ac:7a:f9:0e:
d7:8d:bd:a8:28:09:ce:cf:c2:11:bd:05:8b:94:2b:e6:fd:88:
ac:f3:a0:04:9b:9f:72:10:76:11:2d:c3:75:74:2b:3a:fa:a0:
90:f8:27:06:71:1e:30:41:b5:e0:9a:1b:e3:d1:47:b4:90:24:
83:aa:06:44:49:49:f5:33:21:67:2a:bd:7a:0e:40:3b:e6:35:
24:f2:e5:dc:a1:b1:94:7c:24:a3:6c:fb:05:24:d0:8d:5d:44:
f7:6b:8a:52:0c:d2:8e:00:f6:5c:e4:6f:18:e9:87:d1:a5:ce:
19:3b:c6:bf:55:67:73:f5:81:dd:dd:47:d0:6c:8e:59:0a:2d:
a7:89:da:54:ba:b5:7a:c0:82:7e:85:80:a1:4f:02:fd:7f:6c:
bf:b3:9d:40:a5:d5:0d:53:fc:91:3a:26:0d:36:75:9c:fd:ef:
cf:49:ff:fe:c3:0c:b9:ca:be:43:36:93:b5:e2:e2:9a:e7:5f:
c3:84:f6:88:81:52:56:0f:fb:44:7b:2b:f8:27:0e:8d:6c:df:
61:41:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:41 2025 by rpki-client