Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE1DE1CD96C11EF81EB2155762E951A.roa
File: BEE1DE1CD96C11EF81EB2155762E951A.roa (raw, json)
Hash identifier: wjT+qygXLkZhPIOrDLKB+F3nw8nysaSoPhpOSjKVRlc=
Subject key identifier: 9A:0A:1D:60:13:B8:73:80:32:FC:73:C1:82:A7:71:BE:DB:92:AB:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE1DE1CD96C11EF81EB2155762E951A.roa
Signing time: Thu 23 Jan 2025 09:30:55 +0000
ROA not before: Thu 23 Jan 2025 09:30:52 +0000
ROA not after: Fri 28 Feb 2025 09:30:52 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82156 (0x140ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:30:52 2025 GMT
Not After : Feb 28 09:30:52 2025 GMT
Subject: CN=67920c4f-0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:3c:92:51:b2:57:d1:8c:6c:c5:61:84:19:
cb:3a:4e:66:84:6d:cb:a0:b6:43:1c:d8:38:92:b6:
3b:dd:b5:24:56:dc:ba:47:de:e2:07:2d:06:cf:72:
d8:4b:90:cc:9e:51:b3:91:9e:71:51:c4:2a:fe:60:
1f:6e:9e:fd:22:7b:3f:83:9b:d6:22:40:81:a6:ce:
73:c2:42:5a:d6:a1:91:da:ee:a5:05:ea:4c:db:fe:
d1:64:cf:89:dd:a3:71:ae:10:be:5b:f3:cc:79:d7:
ae:97:74:56:a2:32:57:b5:1a:7a:99:a6:45:17:e3:
7d:e6:05:06:c7:74:74:9b:79:8f:4c:77:5a:ec:82:
68:47:f2:27:39:9d:1b:d6:da:12:ce:73:9e:54:c5:
f6:89:b9:ff:06:49:dd:20:27:ed:f4:f5:9f:d4:96:
5f:6d:ad:17:b4:94:ba:28:8d:d2:8a:13:48:83:cc:
c2:9b:6b:ea:49:0f:27:74:e1:34:58:bb:f4:55:c6:
7e:3f:27:8f:e0:92:a0:45:a7:53:53:fe:0b:f4:05:
2f:55:ef:c0:3f:34:12:6d:cf:47:b5:74:ef:fe:47:
1b:cf:d8:e8:25:3a:f1:dd:ee:d7:14:91:72:ba:11:
4f:c4:38:c0:2d:14:46:a0:dd:c4:e6:a6:a0:a3:dc:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:1D:60:13:B8:73:80:32:FC:73:C1:82:A7:71:BE:DB:92:AB:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEE1DE1CD96C11EF81EB2155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b1:ca:b1:b9:b2:3e:11:95:6b:85:ea:18:1b:2b:b3:bf:c4:
18:6c:20:06:ce:95:f9:95:fb:c2:8e:0b:c4:50:4d:35:a7:af:
90:dd:e5:38:13:81:69:22:4d:ef:62:26:d4:ad:52:bc:e5:9f:
07:d0:75:ca:9f:9d:fb:87:24:2a:42:f7:e0:29:77:2a:ba:30:
d6:f4:90:c9:66:f6:07:ab:f5:3c:72:19:48:ab:ae:d5:02:1e:
ae:bb:1d:29:d8:ea:9a:0a:e0:45:b3:99:ef:cd:55:e1:62:a3:
4e:0f:26:59:6e:08:f4:4b:56:af:50:aa:3e:59:f7:d0:0f:64:
c2:40:f7:e5:2a:e1:16:30:65:03:14:b7:b1:ce:ca:a3:05:44:
f9:c7:1b:fe:69:a2:e4:01:0f:4f:62:90:3a:8e:a1:1f:42:b4:
b5:84:12:7d:a4:e7:7b:d7:fc:a4:aa:73:fd:ec:f3:ee:cd:d1:
a6:b0:5b:cb:5c:5c:4d:5a:64:58:16:15:b1:59:0c:0e:4c:b8:
06:f7:d0:a0:4b:1a:70:22:e8:d2:8c:49:80:37:38:c9:07:c2:
86:55:75:86:84:ee:f2:08:c9:42:30:06:f8:80:43:67:58:48:
3c:75:bf:3b:f4:d9:50:d6:0d:94:dc:d4:f2:39:1d:42:87:08:
c6:7d:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:05 2025 by rpki-client