Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7293104D9D211EFA236E678762E951A.roa
File: C7293104D9D211EFA236E678762E951A.roa (raw, json)
Hash identifier: PxXdMxYD6pxAdn57o6+MbL8cMrfnSjphPD5Fof0NBrE=
Subject key identifier: 03:EC:7F:AB:79:F6:27:79:1F:DD:4C:8F:31:11:80:CF:68:21:14:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01431D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7293104D9D211EFA236E678762E951A.roa
Signing time: Thu 23 Jan 2025 21:41:18 +0000
ROA not before: Fri 24 Jan 2025 21:41:14 +0000
ROA not after: Fri 28 Feb 2025 21:41:14 +0000
asID: 62240
IP address blocks: 154.196.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82717 (0x1431d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:41:14 2025 GMT
Not After : Feb 28 21:41:14 2025 GMT
Subject: CN=6792b77e-28aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:ea:d2:50:f5:f2:13:64:86:ac:9a:78:ee:
8d:8d:3f:a6:d2:f7:b3:46:f7:01:25:4d:85:1d:65:
43:27:42:89:61:16:9d:ab:27:5e:69:56:03:5f:31:
3c:13:d3:6a:3b:04:98:be:49:b7:68:54:a0:9a:41:
b8:c9:32:40:0c:a0:42:c7:de:3c:6a:8f:50:2f:be:
48:ae:bd:46:6e:b7:a9:b1:db:8d:82:89:9a:06:ab:
90:72:1c:60:9c:9f:3d:05:4f:69:4e:9f:f3:7a:51:
65:ef:6e:1e:3f:d8:dd:ea:74:f9:35:0e:8f:6b:84:
7a:3e:44:b0:31:9d:59:dc:66:45:fb:36:53:ba:94:
6b:dc:1a:5e:c2:7b:56:cc:94:0e:bf:11:11:05:2f:
73:fd:ee:dd:b5:7a:c0:ae:c3:be:a6:e3:95:2f:4a:
a2:7e:f4:a1:ff:88:c5:94:a1:e2:8c:41:e8:66:8d:
bd:38:ad:34:48:b0:80:ab:c3:29:ca:46:90:fc:3d:
1b:62:f1:81:fe:9c:99:37:86:64:1f:bb:f9:85:88:
2b:99:71:b3:27:83:9c:48:22:8f:c4:5a:66:ca:ea:
d0:2f:85:26:f5:85:9e:02:c5:bb:cb:0f:0b:79:40:
55:47:f7:5f:f4:ee:2b:3a:49:47:08:74:00:4b:a4:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:7F:AB:79:F6:27:79:1F:DD:4C:8F:31:11:80:CF:68:21:14:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7293104D9D211EFA236E678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.90.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ba:4a:bb:ad:ba:03:88:f1:05:7c:a7:cd:45:77:b1:3d:0b:
07:da:a2:4f:e4:a9:31:4d:2d:94:ad:df:f0:ca:7d:04:ed:8d:
03:be:63:50:8e:90:8f:31:3a:33:8c:14:9a:8b:64:8b:d6:f3:
b7:e9:ee:f0:9c:4e:64:09:4f:5c:61:ac:ad:04:ed:4f:5a:7a:
c0:f9:30:9c:78:a2:78:78:b3:ee:b2:d6:9b:56:fb:7e:b9:9c:
81:72:a0:a3:b3:8e:5a:a5:c2:89:c3:d4:55:31:96:4f:f3:a7:
05:81:81:6f:d4:1a:07:8c:4d:55:62:87:92:67:cd:4c:66:ab:
74:3a:41:0c:17:d9:cc:c7:5e:61:4d:48:79:92:28:a0:5f:06:
28:75:bc:1d:bd:3b:1f:d2:66:3c:6b:e5:51:b4:ea:fa:39:35:
28:b0:66:6f:2c:2a:1c:09:1a:d4:c5:b7:ef:5f:e2:76:f3:3d:
27:95:6e:05:d5:fc:ed:e3:a8:e3:04:fb:81:f5:7b:b4:42:8c:
f6:5a:20:52:cf:4b:ac:8d:5e:d6:d0:7b:64:d9:b2:1a:66:0a:
3f:95:17:4a:b3:70:2d:5e:fc:2a:5b:72:c2:53:23:dc:f8:2d:
0e:69:be:79:4e:24:d6:b5:69:c8:89:00:89:26:bc:06:73:52:
6d:05:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:03 2025 by rpki-client