Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B0E356D9C911EFBFA5F4BC762E951A.roa
File: C6B0E356D9C911EFBFA5F4BC762E951A.roa (raw, json)
Hash identifier: Go9Vg93M6IT51b1TGJhRXLVDJiCmTXDfdJld4lF8MP8=
Subject key identifier: 6D:B6:BD:1D:9A:CF:15:4D:1C:3D:E8:E7:AC:92:88:BB:DA:FC:B6:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B0E356D9C911EFBFA5F4BC762E951A.roa
Signing time: Thu 23 Jan 2025 20:36:52 +0000
ROA not before: Fri 24 Jan 2025 20:36:44 +0000
ROA not after: Fri 28 Feb 2025 20:36:44 +0000
asID: 62240
IP address blocks: 154.196.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82650 (0x142da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:36:44 2025 GMT
Not After : Feb 28 20:36:44 2025 GMT
Subject: CN=6792a864-a232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:b5:4f:da:50:8a:8a:08:35:21:75:3e:81:
94:bb:5f:23:0d:2e:4a:3c:4f:b3:4f:65:0a:39:0c:
a9:c8:b8:33:10:2f:a3:fa:72:86:58:50:8c:4b:6a:
94:c8:db:39:a6:44:f6:7b:f4:4d:39:cf:21:c8:ea:
9f:08:a4:e4:af:63:30:46:52:09:7d:a3:52:e2:d9:
e4:f0:08:d2:eb:6e:b8:c0:51:0e:c1:5f:b1:11:aa:
67:5c:5a:d9:fe:48:87:d8:4f:f7:fd:94:d5:9e:36:
69:22:74:ba:e8:44:d3:5f:0f:b6:23:90:4a:b3:a6:
88:f3:f2:f4:aa:66:3b:76:aa:55:d9:73:ab:64:60:
22:98:ab:e3:28:bf:01:62:5f:4a:d0:5f:57:73:35:
ca:93:7e:50:94:92:5c:64:32:5b:57:e2:a2:40:a5:
c9:80:86:ec:c0:8b:93:6c:fd:93:45:9f:b0:7b:f4:
87:c0:ed:4c:d3:30:d3:96:db:41:fc:f2:03:8a:e6:
34:44:58:22:ca:41:0e:40:e8:ab:32:b2:34:d4:a9:
c1:34:38:b3:ab:6a:88:44:5b:6d:b7:f7:36:4e:ba:
af:f7:bb:a3:04:84:a0:38:0b:4f:79:57:b7:cf:54:
2c:3f:fb:8f:b2:02:b3:0a:4c:be:3d:2b:1b:a3:b6:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:BD:1D:9A:CF:15:4D:1C:3D:E8:E7:AC:92:88:BB:DA:FC:B6:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B0E356D9C911EFBFA5F4BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b5:21:0f:64:6e:45:36:6f:47:1f:d4:f9:04:e1:a7:6b:87:
7f:13:c2:13:dc:c9:53:5b:15:fa:20:fe:f3:58:95:e0:89:ed:
37:e3:93:bd:14:09:79:6c:42:38:3c:de:bd:26:c4:9c:5d:4a:
41:ee:18:23:eb:26:86:2c:dc:ca:9e:b6:5f:23:de:9d:05:a6:
11:ec:07:ca:20:01:4e:9d:a3:8b:fb:33:8b:98:a4:b1:8f:d2:
23:d6:52:41:ad:97:8a:15:7e:1c:0a:4d:a1:70:65:87:08:66:
7f:ba:44:61:e0:00:4f:2c:89:1c:e6:be:8a:06:81:fc:46:d3:
93:a1:55:6e:a2:dc:4c:05:9b:11:44:70:d2:45:95:0b:08:0a:
4c:25:24:03:4c:1b:14:cc:d0:a3:f5:b3:a5:4c:30:a1:16:91:
88:2f:ad:59:d7:48:16:4c:fd:03:21:78:97:b9:cc:cb:ef:b7:
fd:cb:10:e9:30:b6:4e:90:a2:4b:9f:a2:f7:b9:b6:8d:fb:14:
ea:f9:93:16:80:68:78:61:4a:87:9f:de:3a:fb:67:7e:7e:61:
11:5f:2d:79:68:fc:9e:ab:6c:ab:4f:b4:98:2e:85:2b:cc:01:
21:86:60:26:88:91:94:b3:f6:45:6c:68:3a:7d:10:00:4a:07:
d8:fa:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:13 2025 by rpki-client