Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2D340AD97111EFBBDC3478762E951A.roa
File: BC2D340AD97111EFBBDC3478762E951A.roa (raw, json)
Hash identifier: hHFESUFrJFITjRc1lwHJa7zcciIds8faRo1J0svo8rI=
Subject key identifier: 23:14:8A:27:EE:97:DE:32:FF:BB:9C:81:3F:4C:F3:A8:21:DF:6F:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014112
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2D340AD97111EFBBDC3478762E951A.roa
Signing time: Thu 23 Jan 2025 10:06:38 +0000
ROA not before: Thu 23 Jan 2025 10:06:35 +0000
ROA not after: Fri 28 Feb 2025 10:06:35 +0000
asID: 62240
IP address blocks: 154.194.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82194 (0x14112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:06:35 2025 GMT
Not After : Feb 28 10:06:35 2025 GMT
Subject: CN=679214ae-ed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:40:7c:e2:4e:4d:82:1e:de:d1:69:20:01:f1:
58:cf:b7:b3:22:eb:75:21:53:49:35:32:1d:75:77:
1c:27:80:03:42:27:32:8d:9b:d1:77:cb:e1:d9:1f:
9f:4a:4d:61:0c:fd:5e:64:8b:cd:b5:91:c0:5c:18:
55:84:02:b0:c2:ed:80:69:d5:2e:e2:76:8d:bb:74:
d7:f3:93:e0:13:c8:d0:00:cd:28:02:9d:5c:1f:e7:
d7:15:f3:49:4b:48:30:05:52:85:2c:de:ea:27:18:
9d:8a:7c:0d:7c:77:fd:a0:77:3b:1d:7e:84:17:12:
f5:84:c7:84:1e:f4:6c:b4:4f:8e:b8:d5:6d:89:40:
eb:14:9e:4b:9f:c2:0e:b7:1d:4b:23:93:b7:10:ab:
bf:bd:97:05:7f:ad:0a:0d:b0:31:ce:64:38:94:ff:
7d:1f:18:46:cc:5b:1d:0a:bc:61:41:5e:bd:16:ba:
df:22:50:f7:2f:46:cd:49:07:42:64:90:a6:d8:eb:
20:17:bf:f4:73:6e:68:7b:6f:4a:e9:ab:96:94:d6:
ca:6b:a2:b0:13:3a:66:36:62:51:b5:27:62:ee:8d:
ca:49:d6:b3:0f:bb:7c:06:b6:fb:55:6c:2f:ac:ff:
d7:0e:51:8b:c1:45:33:b8:79:d5:7a:9e:b0:6c:17:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:8A:27:EE:97:DE:32:FF:BB:9C:81:3F:4C:F3:A8:21:DF:6F:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC2D340AD97111EFBBDC3478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.7.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d0:14:d0:c7:a6:13:24:ea:d6:b8:8f:cc:e1:4f:ab:85:21:
f3:43:cd:fd:3f:ac:aa:fb:e8:1f:f3:39:32:47:8d:0c:0e:fb:
a4:37:75:0e:ae:64:37:69:55:da:81:ae:a9:79:39:bf:e6:9d:
8f:53:cb:39:eb:9b:b3:99:ba:f0:58:ef:7a:e7:de:b9:1f:82:
ea:03:2e:e5:20:8e:83:0c:14:14:57:20:bd:3f:c5:e3:99:a4:
b3:61:05:00:f2:7c:69:34:8a:fa:f4:03:92:6d:41:c2:19:05:
b3:ec:e0:9b:9c:65:e2:8c:65:c1:3e:96:f4:1a:b0:e8:6b:dd:
0e:c4:2d:5d:54:b5:6a:b1:4f:98:97:aa:d6:da:94:60:04:b9:
a8:b0:6a:ae:5a:66:3f:9b:02:84:4d:1b:75:93:fc:46:d0:19:
7f:81:af:05:7f:12:21:f7:2e:89:c3:21:69:a5:8f:8f:e6:fa:
d9:ad:c7:93:3a:60:fc:04:94:99:95:f1:75:0b:f2:41:62:05:
15:11:c0:81:c1:0e:16:5b:13:16:72:ae:0e:89:0c:f8:d6:08:
51:72:02:2b:56:f3:56:e6:2f:a8:f9:6c:8d:d0:a6:58:9a:ca:
6b:a2:a6:85:f0:96:a8:7e:c1:8e:28:00:19:79:ea:86:15:d6:
43:e3:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:54 2025 by rpki-client