Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81119E0DA3D11EF915E8E59762E951A.roa
File: C81119E0DA3D11EF915E8E59762E951A.roa (raw, json)
Hash identifier: C5jFHfd3CXoSYgvrbkW0rCgMgeZpDcy3q2sgoCeAKn4=
Subject key identifier: A0:88:49:04:08:3C:77:E4:A6:71:34:7C:25:EF:DE:14:0A:1D:E2:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81119E0DA3D11EF915E8E59762E951A.roa
Signing time: Fri 24 Jan 2025 10:27:16 +0000
ROA not before: Fri 24 Jan 2025 10:27:12 +0000
ROA not after: Fri 28 Feb 2025 10:27:12 +0000
asID: 62240
IP address blocks: 154.196.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83337 (0x14589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:27:12 2025 GMT
Not After : Feb 28 10:27:12 2025 GMT
Subject: CN=67936b04-a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:0d:ce:c3:f3:65:e7:9c:05:28:78:21:fe:
40:9c:6d:62:71:55:21:84:f6:5a:88:93:9a:a0:12:
6f:71:49:8e:66:6f:ae:1e:25:43:6d:8b:80:da:8c:
3f:23:7e:e6:d3:0c:4d:72:21:b5:6d:40:2f:e7:51:
b2:c0:22:2e:4d:b5:2e:f5:08:5a:c9:1b:83:8d:f9:
fe:0d:ca:6c:c1:e7:2c:12:9b:38:61:16:2d:54:11:
57:4a:3d:25:3f:3e:95:bd:68:57:1c:b2:aa:26:42:
7b:8e:15:cb:53:8e:10:c2:46:8d:84:df:03:85:b3:
76:0c:2a:27:98:a9:e5:e8:e3:94:70:dd:46:33:df:
38:81:c8:5d:8e:fb:7e:ae:ac:24:38:57:33:49:2f:
40:fa:51:6d:90:e6:5c:fe:83:8e:b9:8f:f8:01:74:
fb:8f:0c:ea:17:7b:4e:ed:01:74:2f:96:33:a9:a9:
98:b1:34:d0:81:3e:3c:6b:eb:30:36:c7:c6:be:18:
c5:a8:b9:10:83:48:a1:e3:84:43:fe:7b:05:e2:02:
53:a9:0c:0c:db:31:5e:e0:24:b5:02:0a:de:96:80:
21:e6:ec:88:76:c0:a1:1a:e3:77:85:5a:21:d4:58:
41:7b:a0:e9:01:69:2d:32:86:f4:96:b2:44:ec:39:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:49:04:08:3C:77:E4:A6:71:34:7C:25:EF:DE:14:0A:1D:E2:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81119E0DA3D11EF915E8E59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:14:94:ef:b4:f1:57:ab:6a:55:10:60:69:fc:00:ea:f5:d9:
f2:52:72:4a:21:2c:a5:7a:53:a4:27:a1:85:ad:a0:fd:fc:d2:
8a:bb:49:3d:83:1b:f9:33:ec:bc:ee:53:c7:14:73:b2:c0:b2:
68:78:25:4b:ab:e9:5f:09:8d:ff:fb:73:80:d2:c2:43:05:47:
fb:5d:85:65:90:da:c5:39:7a:a1:c4:fd:ba:a5:60:e6:07:33:
16:ab:03:ce:8c:ff:8b:64:4d:a2:cb:b4:61:ea:0a:0f:bd:f8:
25:1f:f3:bf:d8:77:de:e2:91:0d:81:49:16:6d:3e:93:05:87:
aa:c7:c1:a1:4e:1f:28:89:79:4f:03:3a:ea:4b:b5:99:29:58:
8c:79:0b:0f:d4:29:96:7f:6b:6e:30:44:28:cc:3e:ab:fb:5a:
9c:1e:cf:50:f9:06:01:8e:00:3b:1a:88:fa:ed:4f:e0:fe:c0:
d5:03:bc:91:0f:76:44:7c:9c:95:d1:80:ef:8d:80:c2:7d:46:
80:0b:96:fb:4f:3d:9f:1a:99:b6:1a:ea:8b:31:88:58:fe:13:
c2:ba:23:f5:85:1b:3a:4a:f6:dd:2c:2a:8d:95:ec:17:22:f4:
aa:fc:0e:af:d5:1b:19:f3:02:13:26:76:bb:a3:fa:50:5c:3a:
a1:d3:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:21 2025 by rpki-client