Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C8360ADA3311EFB6503293762E951A.roa
File: C0C8360ADA3311EFB6503293762E951A.roa (raw, json)
Hash identifier: nrToVbs1g57nQ4ViEjPQRtOUbNFXkcTrVkrrAS2p8Gw=
Subject key identifier: CA:45:F9:32:0F:01:62:62:44:79:AC:94:82:37:D6:7F:C3:8F:DA:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C8360ADA3311EFB6503293762E951A.roa
Signing time: Fri 24 Jan 2025 09:15:28 +0000
ROA not before: Fri 24 Jan 2025 09:15:25 +0000
ROA not after: Thu 13 Mar 2025 09:15:25 +0000
asID: 63139
IP address blocks: 154.203.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83150 (0x144ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:15:25 2025 GMT
Not After : Mar 13 09:15:25 2025 GMT
Subject: CN=67935a30-c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:ac:ee:d4:1a:53:1d:34:0b:1a:fc:6a:ea:
90:66:2a:c0:4e:74:59:0e:a1:e6:99:e3:76:0d:43:
74:da:54:94:de:50:1a:04:8d:9e:c9:c9:a6:94:3d:
ea:7c:95:66:b3:77:13:97:b0:ec:c3:7d:51:0c:f2:
0a:79:5c:b5:4c:2a:dd:30:f0:63:a5:e9:1c:bc:b6:
36:d8:37:f4:a0:af:e7:16:bc:c5:11:c6:3d:9d:eb:
c2:09:2c:8e:de:60:67:56:aa:a9:a7:e0:f7:0a:e1:
74:8d:a1:12:be:e8:76:f6:8b:02:1d:06:a6:d7:72:
6b:ab:f3:61:fc:36:7b:4c:cd:38:17:57:b8:92:b0:
5e:9c:fc:38:83:4b:90:51:dc:5c:c8:55:96:16:34:
7e:bb:f1:41:14:6c:80:02:4c:5c:bc:59:9d:20:7a:
64:77:7c:94:37:f9:28:bc:0a:70:6b:6b:b5:fa:56:
13:d3:75:1a:0c:34:7c:05:7e:e0:85:ff:aa:01:34:
6d:d0:28:55:a3:ac:b9:7e:56:1f:10:b6:2c:31:b3:
77:53:9d:48:d0:4d:0d:65:44:2b:c4:80:a1:72:c1:
32:4a:16:31:86:a2:07:23:15:e1:12:a5:af:e6:cb:
a4:32:c4:c2:3e:ac:f9:05:d2:4f:06:2d:29:95:f2:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:F9:32:0F:01:62:62:44:79:AC:94:82:37:D6:7F:C3:8F:DA:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0C8360ADA3311EFB6503293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:76:84:bc:0f:b1:2c:91:f2:db:89:cd:ce:99:5a:61:b0:26:
82:ec:9d:5e:0d:5c:6f:51:4a:b3:53:69:92:7d:a9:ce:17:8f:
7f:9c:cd:da:0d:d5:b2:dd:b8:02:e1:8b:f8:c1:dc:de:2f:09:
e0:46:a7:b6:aa:b2:75:95:f0:8b:59:ed:8c:40:34:97:16:b5:
df:21:59:2b:4e:06:20:9e:6e:53:e5:f2:7d:91:5a:e9:7a:42:
63:1e:fb:a0:5f:f9:df:3d:83:41:fd:e8:3d:13:18:6c:30:67:
b7:0b:c2:75:47:99:84:4a:6e:a3:8c:ac:ce:d5:e6:fd:5a:d2:
5b:f9:4f:af:be:c0:bb:f3:af:b4:27:e5:1d:1e:12:d1:51:6c:
93:dd:b6:81:00:e2:11:4a:a3:8d:57:de:e9:62:e0:56:29:d2:
28:4c:c4:69:6b:a7:bc:0c:d0:bc:1f:6d:77:01:d6:e9:2d:18:
04:4d:4b:4d:67:24:6e:82:d3:9f:37:34:16:4c:a3:e7:6c:ad:
27:2b:b5:16:08:f9:d8:3f:3a:13:75:cb:44:dd:17:a9:11:12:
16:e1:27:61:50:09:12:a9:4d:ee:fd:47:aa:34:8f:27:6d:3d:
89:44:ff:d3:b3:10:8b:03:d1:c5:d3:1d:71:e4:65:8a:c6:d1:
b5:df:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:52:02 2025 by rpki-client