Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C262FEDD7411EF93B7C492762E951A.roa
File: C0C262FEDD7411EF93B7C492762E951A.roa (raw, json)
Hash identifier: 8JeL2bThZ5SCwjk8NtTkyL3uApbwRTbLp/0xCY8Yz0c=
Subject key identifier: 22:54:B8:BC:0C:A7:05:73:7F:A5:3A:88:72:E5:BA:5F:29:0E:95:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C262FEDD7411EF93B7C492762E951A.roa
Signing time: Tue 28 Jan 2025 12:38:19 +0000
ROA not before: Tue 28 Jan 2025 12:38:16 +0000
ROA not after: Tue 25 Feb 2025 12:38:16 +0000
asID: 5065
IP address blocks: 154.206.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85264 (0x14d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:38:16 2025 GMT
Not After : Feb 25 12:38:16 2025 GMT
Subject: CN=6798cfbb-7b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:c8:2a:d3:c3:44:82:7c:ed:76:c8:c3:cb:
dc:4e:ed:a7:72:87:55:7c:97:57:80:36:49:82:87:
60:f4:0d:e5:e9:b6:39:00:e5:b5:fa:08:02:b1:87:
78:ff:8a:d6:f3:cd:84:03:ee:b9:42:b1:53:8e:5a:
5d:5a:26:e4:7b:84:31:10:9d:d7:83:0e:7f:a5:66:
7c:9d:cd:91:bd:e4:ef:71:4e:c5:50:a2:14:ed:cc:
02:ce:98:aa:89:7f:67:9a:b5:12:e9:61:2d:48:fc:
ed:db:7e:1e:74:6e:4c:2e:49:29:ea:57:4b:62:35:
cb:39:a2:19:42:28:c9:6a:70:c6:8d:08:48:65:c2:
80:5c:0f:35:2c:6b:c0:cd:f5:4b:6b:b4:3c:3c:8b:
e6:b2:a6:06:41:a3:95:95:56:60:47:fc:f5:e5:3c:
f2:e3:ef:a9:e0:94:db:61:e5:f5:62:9c:46:b9:2b:
a4:c0:ca:37:ac:f2:f0:5a:59:e4:b2:60:21:9a:5e:
1c:9d:1f:d5:61:d4:c4:32:13:e7:b8:39:1b:9d:1f:
8b:9f:3a:a2:6c:d8:8e:f3:4c:6e:6e:ba:2b:fe:9e:
72:27:17:f6:63:1d:58:33:e1:0f:03:f1:47:9e:03:
f5:30:ac:11:bb:e0:2a:be:92:7a:2e:0e:e7:41:90:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:B8:BC:0C:A7:05:73:7F:A5:3A:88:72:E5:BA:5F:29:0E:95:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C262FEDD7411EF93B7C492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.45.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c2:90:68:55:14:bb:54:39:c6:14:dc:84:e6:80:e8:3e:fc:
f6:ab:57:3b:4f:d4:11:4a:49:f9:cc:92:9e:97:03:29:bb:03:
48:07:31:b2:50:20:cb:1b:26:dc:9d:10:21:1b:d8:a7:bd:36:
ad:87:47:f2:43:2f:2b:7d:f2:5f:13:94:3c:95:3f:71:d1:96:
65:57:9a:60:db:55:72:eb:9c:8a:1b:f5:13:ed:75:8a:3c:0a:
56:41:fb:68:66:c0:66:7f:1a:ab:cb:fd:73:a9:56:a7:5f:f7:
f4:99:7e:6f:e6:e4:ef:38:8d:d1:88:a3:a0:fa:ea:b7:59:da:
2a:5b:15:05:c2:16:ee:79:8b:47:3c:eb:ae:17:c9:0d:6e:dc:
ab:91:90:81:ec:90:5c:a3:fe:a2:ef:b2:08:b5:37:76:84:64:
b6:5c:05:e3:7c:b3:84:f9:87:d7:1a:ad:39:8d:04:88:b5:e2:
79:a4:cc:e2:b9:3e:d3:86:e9:c7:35:94:7f:62:34:cd:51:3f:
c6:ab:ac:3b:7a:2c:9a:ed:e9:fb:92:ca:6e:ae:5f:89:a7:90:
ec:3e:5c:cc:e7:36:83:4d:fb:46:01:25:22:e9:5e:97:36:6b:
4c:cc:e3:59:bb:5a:aa:e6:32:9a:80:1b:4f:73:ef:5b:d6:47:
1e:f3:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:20 2025 by rpki-client