Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7781156D8A711EF930D1EA7762E951A.roa
File: C7781156D8A711EF930D1EA7762E951A.roa (raw, json)
Hash identifier: 0K9OyHvYhxnjU3+X9hg7A8TbUDkZJcof6WvAmniUoq8=
Subject key identifier: F5:9E:F6:9A:45:B2:38:CC:F1:D5:AF:D8:68:32:A9:46:94:7E:27:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7781156D8A711EF930D1EA7762E951A.roa
Signing time: Wed 22 Jan 2025 10:00:59 +0000
ROA not before: Wed 22 Jan 2025 10:00:55 +0000
ROA not after: Wed 05 Feb 2025 10:00:55 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81574 (0x13ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:00:55 2025 GMT
Not After : Feb 5 10:00:55 2025 GMT
Subject: CN=6790c1db-cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:9c:ae:68:1d:09:3c:7c:b5:db:0f:3a:cb:
cf:f3:b4:5f:7e:0a:bf:f9:9d:12:28:5d:65:77:86:
dc:d3:88:20:90:0b:c2:fd:bd:ad:f9:1c:e0:65:a0:
d0:a6:e3:a0:e3:56:52:e3:1f:de:d6:f5:99:3b:e9:
4e:a6:0c:60:9f:54:56:7a:af:21:3c:59:99:f4:8f:
19:a8:7f:1a:e1:b2:06:6a:5d:c7:28:a4:e9:10:ce:
5f:99:aa:31:a1:73:a3:7b:a0:9c:96:c1:f0:7c:52:
c2:b0:e9:49:62:26:6d:2c:fc:5f:f6:3d:64:86:b7:
59:d0:de:b8:dd:64:10:e1:e4:b1:2f:d5:23:12:8b:
03:18:98:c9:41:05:10:61:38:95:95:ce:99:64:b6:
5b:99:c4:6c:aa:12:39:3f:20:02:87:79:3a:36:df:
a4:69:bc:0f:6e:ac:52:72:4f:b7:fd:65:ea:b5:fa:
6f:a8:16:12:01:95:23:73:4f:77:81:1f:f1:af:32:
4b:5e:28:e6:72:c0:d2:f2:2b:2f:34:b6:42:48:04:
57:6b:c3:26:df:b3:99:6b:1f:b8:30:bb:18:cb:4f:
23:a5:1e:f8:6a:62:ac:7f:47:5e:6e:13:b9:93:c7:
24:e8:a8:ed:c6:81:5e:b6:ad:2d:1c:b2:91:00:f5:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:F6:9A:45:B2:38:CC:F1:D5:AF:D8:68:32:A9:46:94:7E:27:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7781156D8A711EF930D1EA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0/23
Signature Algorithm: sha256WithRSAEncryption
92:f1:1f:55:b5:69:11:d4:ac:a7:6e:cf:16:51:55:0e:7d:4d:
60:89:a7:50:9b:ca:8f:6e:ac:05:63:16:f2:41:18:45:dd:70:
b0:26:34:37:4d:c9:61:2c:ba:45:08:1c:dd:3f:36:6e:00:0d:
5f:69:e9:0b:f5:db:56:64:64:06:f0:ef:cd:aa:28:9d:e6:11:
d8:80:fc:1d:34:e0:90:ea:fb:7b:0d:85:fd:f0:90:b2:38:1a:
c7:d8:1f:9e:eb:09:23:e7:f5:24:80:44:91:0f:a8:81:83:be:
ea:49:28:01:0a:44:cb:7a:7b:35:fb:d1:c6:b8:04:0b:ee:4f:
4e:fb:90:7d:b1:60:fe:9b:6f:89:ee:92:5f:0d:25:ef:a9:d9:
e1:b1:97:93:93:24:7c:02:d9:8a:9e:d5:b4:4c:d3:44:b5:00:
d8:db:e1:a6:61:4d:0a:b6:56:0e:6a:28:f3:ac:68:b4:a2:7d:
27:e4:b5:0e:a2:10:4d:e4:54:6e:e9:09:54:3d:b7:ca:93:38:
1a:98:d6:f7:68:c8:bc:9c:e2:9a:7d:d8:7e:f3:68:78:8b:f9:
59:b6:98:63:90:0c:1a:f4:99:34:4f:c3:c4:e4:9e:63:23:72:
95:33:19:c4:bb:cd:f4:92:b8:fc:09:f6:03:7d:6b:53:f3:8b:
5c:ea:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:50:53 2025 by rpki-client