Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9056D04CBE911EF98524B46762E951A.roa
File: C9056D04CBE911EF98524B46762E951A.roa (raw, json)
Hash identifier: DQgNjlX5JGBhcLPHwzyAvmMCmFEubc5MhBhRooAKWE4=
Subject key identifier: C7:FC:C5:50:D5:10:AF:26:82:A7:97:E6:38:12:56:7F:44:53:98:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01359F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9056D04CBE911EF98524B46762E951A.roa
Signing time: Mon 06 Jan 2025 04:50:43 +0000
ROA not before: Mon 06 Jan 2025 04:50:40 +0000
ROA not after: Tue 04 Feb 2025 04:50:40 +0000
asID: 17557
IP address blocks: 154.198.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79263 (0x1359f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:50:40 2025 GMT
Not After : Feb 4 04:50:40 2025 GMT
Subject: CN=677b6123-2fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:f0:de:02:4b:53:4b:5a:7b:0c:2f:e4:d5:
49:18:c2:83:a7:4f:5e:49:ab:32:fe:34:a7:89:b5:
0f:9e:4f:e3:18:4d:6c:70:2d:30:2a:ed:d0:47:a5:
86:6f:29:0f:61:b5:6a:eb:77:01:7d:be:3f:2c:6c:
86:02:e4:b7:eb:c1:eb:b9:85:9f:db:f0:4b:94:9b:
1a:52:77:5a:26:87:d9:3f:ca:86:1e:ad:26:99:42:
5d:39:67:91:38:f0:0f:16:f1:39:89:a4:0a:37:fa:
54:55:bf:37:4f:56:0a:ff:07:b5:bd:5f:3b:c2:2b:
ea:a8:45:f6:7c:cc:66:39:61:e1:57:2f:f6:40:e8:
f9:7f:f5:5e:68:5b:74:b6:8d:3a:d6:f3:48:c6:5f:
b5:29:c4:96:e6:67:6c:a6:f0:8d:2e:d2:aa:7c:c2:
d4:af:51:03:8c:3c:ee:43:d4:db:fa:56:a1:e4:49:
08:1e:1f:50:0c:2b:3d:6f:11:04:93:dd:14:fb:e0:
7c:78:78:63:b4:16:f1:6b:88:71:fc:67:ff:78:a5:
4a:ca:8a:11:49:d3:d6:c7:ec:ac:5d:f6:f5:be:fa:
ca:79:72:33:71:48:cd:90:31:99:9c:f9:c5:5b:d9:
42:45:5f:af:35:56:c2:d9:0d:4f:53:7b:74:17:be:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FC:C5:50:D5:10:AF:26:82:A7:97:E6:38:12:56:7F:44:53:98:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9056D04CBE911EF98524B46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:44:94:30:66:62:d6:3b:c8:bd:45:20:0c:e5:71:ff:75:88:
7e:ec:e1:29:2a:ef:a8:1a:d0:5b:bb:20:69:73:8a:0f:d7:f0:
36:13:87:52:a3:3b:d6:68:68:ae:03:e6:68:83:1c:d8:7d:df:
b1:5c:7c:2b:f1:1d:28:75:4d:cd:19:77:ae:f8:d7:64:87:35:
b9:9c:4d:e5:63:74:f7:63:36:e1:c7:50:9b:7a:30:5d:8a:86:
c6:52:34:c6:e8:dc:59:17:85:04:83:64:d0:f5:09:23:6a:0b:
ae:14:39:17:a1:2c:65:88:b9:59:ed:ea:59:79:05:75:c7:f8:
7a:f7:e0:45:4c:bd:e3:02:f0:b7:4d:c8:71:3f:27:fe:a5:73:
83:32:4a:c6:85:cc:90:4b:b5:81:65:85:26:6b:45:cf:68:53:
65:5a:81:8f:da:b5:79:13:d4:94:d4:1d:32:c8:9c:06:11:31:
ce:0e:02:2e:6b:88:4e:79:29:63:5c:95:09:65:91:c6:e6:b8:
e9:de:f7:83:28:cf:79:69:ce:82:07:85:98:97:89:de:d3:fc:
28:a1:37:7d:e6:e0:10:67:fe:c2:b7:22:b1:6c:60:ee:31:7e:
8e:1d:07:7d:ca:5d:59:f8:46:89:21:21:73:7e:1c:26:06:61:
36:a2:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:28 2025 by rpki-client