Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4C4DE8DFE711EFBCC8538E762E951A.roa
File: BA4C4DE8DFE711EFBCC8538E762E951A.roa (raw, json)
Hash identifier: OkoTyp09xEAQ5MEtvP3YpKCdQJk0bl9xMHNEZcqTl3E=
Subject key identifier: 1E:BF:68:C5:65:5C:C5:64:D3:87:35:C4:91:D4:D4:94:0C:36:81:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4C4DE8DFE711EFBCC8538E762E951A.roa
Signing time: Fri 31 Jan 2025 15:26:23 +0000
ROA not before: Fri 31 Jan 2025 15:26:19 +0000
ROA not after: Wed 05 Feb 2025 15:26:19 +0000
asID: 39600
IP address blocks: 154.84.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85470 (0x14dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:26:19 2025 GMT
Not After : Feb 5 15:26:19 2025 GMT
Subject: CN=679ceb9f-d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:80:78:7d:b8:16:f7:2d:f8:a9:74:9b:30:
c7:9c:02:3f:74:a5:b0:2f:9f:87:c3:9e:ab:0c:c2:
ff:56:fe:09:5b:3a:68:d6:70:36:7a:c6:79:2d:dd:
ac:08:f4:70:94:ea:26:cc:83:25:3f:63:97:4c:6a:
a1:62:e4:fd:71:8b:de:45:15:7c:63:00:bb:4e:1d:
40:c9:4a:ae:b4:1f:23:e7:72:f7:2d:12:56:fc:e8:
58:29:06:d4:2f:56:99:17:7f:75:c8:42:88:35:12:
e2:a8:11:80:ae:b1:ff:df:60:ff:81:38:3b:04:a6:
0a:fa:b5:ac:51:94:d9:01:8d:c5:78:0b:6e:b7:7f:
82:73:0b:5c:83:62:13:38:fc:c7:ae:0c:69:a6:b4:
0c:0b:10:66:45:86:da:45:16:07:c6:de:2b:53:d0:
e2:f6:7e:dd:88:bf:ca:24:2f:86:d2:b0:cb:37:51:
df:c5:c1:d8:cc:9f:c3:01:41:98:5a:8b:6f:1d:4c:
96:b6:2e:09:8e:76:77:39:9a:ae:6c:36:e4:a5:64:
c9:95:51:0f:a6:82:83:84:d0:51:2b:b5:a1:06:08:
55:b4:93:fb:40:66:dd:f1:3a:bb:d9:8e:f7:14:42:
1b:68:b5:1d:80:7e:4b:30:74:34:bc:24:0b:b9:64:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:68:C5:65:5C:C5:64:D3:87:35:C4:91:D4:D4:94:0C:36:81:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4C4DE8DFE711EFBCC8538E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:db:79:3b:3b:ad:ab:10:59:12:21:54:ce:74:cb:d8:08:92:
5e:d3:0c:2d:48:fa:de:4b:2c:33:0f:27:c2:ac:14:26:9c:af:
2b:3a:f7:1e:01:a0:fc:25:e4:02:1f:c8:1f:b5:fd:fb:18:10:
2a:bf:c5:bf:e9:93:4d:d0:26:be:89:ef:25:d0:2d:15:8c:1c:
b3:5c:7f:49:f0:2e:64:9c:d0:38:b9:22:7c:dd:c4:54:5a:ed:
7d:49:0d:77:36:f9:3c:b6:e4:84:44:39:52:3a:68:0a:24:97:
06:50:74:62:48:74:47:3d:88:7f:99:d4:ee:b4:38:79:56:fe:
88:8f:a9:5f:94:1f:29:9a:bd:26:59:62:5b:0f:70:df:50:68:
17:29:33:a0:c9:e9:b6:83:56:a3:34:05:83:df:e4:5b:ca:7d:
23:e7:fc:fe:ef:a1:c4:b4:c3:3d:e9:7f:be:6d:09:5b:6d:a7:
7e:a0:e0:cf:db:f4:a7:ff:f4:ef:72:9d:ae:df:8f:bc:78:b2:
d1:71:4d:c2:56:38:07:19:c6:33:56:56:b7:1b:57:ee:ba:e3:
7d:0c:f1:ad:69:02:5b:47:3e:f1:3a:fb:bf:c7:5b:b9:bb:0a:
89:0b:23:7c:36:e1:5d:39:0f:1b:c2:2d:0b:0c:87:3a:25:1e:
8d:05:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:46 2025 by rpki-client