Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C178D9E6DB2411EF8477B773762E951A.roa
File: C178D9E6DB2411EF8477B773762E951A.roa (raw, json)
Hash identifier: WjllMB5dOdRTsfzXLlV8I/bteTbAox4cJw1clKCEboY=
Subject key identifier: CF:75:4F:D4:39:49:C2:EE:21:BA:CB:60:66:2B:33:44:34:5A:A4:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C178D9E6DB2411EF8477B773762E951A.roa
Signing time: Sat 25 Jan 2025 14:00:38 +0000
ROA not before: Sat 25 Jan 2025 14:00:35 +0000
ROA not after: Tue 04 Feb 2025 14:00:35 +0000
asID: 5065
IP address blocks: 154.207.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84404 (0x149b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:00:35 2025 GMT
Not After : Feb 4 14:00:35 2025 GMT
Subject: CN=6794ee86-76dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:cf:ec:19:fe:d2:e4:8c:fb:90:a7:53:5e:
79:2c:d0:ec:25:67:c8:e5:3c:34:15:c4:ea:bc:e3:
37:1f:79:c8:81:de:0b:73:66:7f:76:ba:10:12:5e:
82:7e:26:3e:b0:dc:be:30:ef:21:24:4d:18:a7:f2:
b3:e2:9a:fc:0e:8e:dd:1d:a8:ff:ca:4a:ae:c1:47:
37:cb:c3:83:87:72:5e:dc:06:3c:7c:a9:c2:6f:47:
33:c3:10:5d:61:29:45:ee:81:5a:03:c7:41:86:70:
d8:fc:80:b7:cd:1a:a4:f9:a2:03:56:da:9d:6f:bf:
b3:46:f0:e4:4d:4d:da:98:e0:3f:a0:3b:e9:03:02:
46:59:e0:11:47:24:21:13:e0:75:f1:84:b3:aa:79:
0e:b3:39:84:25:5b:c9:77:aa:43:1d:b9:43:1c:08:
e2:d2:a3:c6:94:74:25:94:fa:44:ee:3b:72:71:b2:
30:68:e8:f3:d1:ef:6c:7b:ee:3c:30:86:46:46:67:
44:37:26:9d:d5:c1:81:0e:46:79:1e:53:a0:c2:fc:
e8:ef:46:8a:4f:4c:28:9c:7c:7b:95:3c:88:e0:9c:
b6:41:17:2a:3f:99:b5:6e:0e:87:c0:c1:53:fa:52:
ae:9e:ca:8b:8b:9e:e8:df:2e:a9:5b:28:c3:62:fb:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:4F:D4:39:49:C2:EE:21:BA:CB:60:66:2B:33:44:34:5A:A4:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C178D9E6DB2411EF8477B773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8d:a5:55:2c:07:bb:a5:b7:9b:d0:12:38:2b:e3:06:82:5b:
c7:1a:b1:bb:87:69:f5:a2:7f:0d:ab:0c:63:65:a7:9e:aa:ea:
0b:d6:97:0e:d4:f4:61:6d:10:6f:04:e2:25:12:a3:9d:2b:f1:
91:59:f3:f3:d7:95:8e:00:65:ba:8c:0f:6e:f8:83:0e:c1:8b:
09:02:3d:7c:de:7a:dd:35:1a:e9:33:be:f0:3f:f3:3a:95:3d:
be:e8:39:36:93:08:d2:73:70:a0:e3:2a:ac:dd:1d:09:5f:11:
06:2f:d6:c0:61:2f:95:35:40:af:5a:e2:26:2c:dd:81:7f:7f:
85:73:40:df:ae:1e:a1:41:48:d0:3a:a9:8c:4c:4e:56:9e:b9:
40:af:6c:20:8f:5e:77:c6:15:8e:e3:c3:c3:ab:dc:cc:13:e4:
71:c5:31:d1:0e:75:2e:ef:19:c9:1b:25:a6:d5:80:5f:88:10:
ce:7f:3e:f7:d0:93:c5:93:eb:ec:1b:eb:28:ea:e4:6b:c1:9e:
23:d8:5a:47:80:25:04:11:35:f3:d1:ad:e2:cc:4b:8c:76:c7:
b4:30:aa:b6:dd:1b:c4:68:e9:ec:8d:a8:dd:5a:1c:32:1e:d4:
8b:7a:ee:91:0f:1c:48:c8:c4:f8:7d:98:b6:c4:1b:70:97:69:
f3:5a:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:46 2025 by rpki-client