Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9070F54DA4111EFA529B972762E951A.roa
File: C9070F54DA4111EFA529B972762E951A.roa (raw, json)
Hash identifier: +di+B+FQLLJwjA1SImCj1H+oF6VntohQdBFcAD3Wik4=
Subject key identifier: E9:BE:69:77:2E:39:C8:20:78:D8:28:B4:94:60:08:61:8D:B7:09:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9070F54DA4111EFA529B972762E951A.roa
Signing time: Fri 24 Jan 2025 10:55:55 +0000
ROA not before: Fri 24 Jan 2025 10:55:52 +0000
ROA not after: Fri 28 Feb 2025 10:55:52 +0000
asID: 62240
IP address blocks: 154.196.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83405 (0x145cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:55:52 2025 GMT
Not After : Feb 28 10:55:52 2025 GMT
Subject: CN=679371bb-591e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:6e:ec:12:8e:d9:8a:a4:c9:6f:c2:d4:07:
eb:ef:f1:0c:71:51:c7:d3:bc:30:6b:95:15:83:1d:
24:d9:23:d8:83:7c:bd:8f:eb:ca:1a:b6:28:93:93:
c6:0d:b8:d3:6f:9e:b5:af:63:08:81:b0:47:76:87:
dc:b2:ff:b6:23:65:37:f4:6d:cf:90:e9:df:13:e7:
a6:e9:2c:3b:78:34:9f:09:c9:4a:42:43:5d:1c:cd:
a6:1e:c1:0e:a6:ce:6a:1a:b2:3b:0e:ac:ee:9d:b4:
46:13:fd:e0:54:65:ca:5d:0c:f0:75:3b:96:fd:bb:
0d:9b:f5:28:81:33:f0:8d:cd:af:c5:27:fb:b2:ff:
db:b2:7d:60:c1:b9:be:f4:87:b1:23:55:73:34:62:
a2:8b:41:77:e3:31:76:79:56:ae:0d:1d:ae:78:90:
7e:56:f7:65:70:58:c4:47:08:27:8d:0d:dd:93:5f:
27:40:80:bb:a1:f1:94:2c:b8:07:ca:08:61:d8:bd:
6e:34:fe:85:6a:54:df:60:c9:8c:0e:42:da:81:26:
86:41:c8:b7:41:b0:33:c2:93:c0:00:72:e3:8c:be:
c6:b7:8e:24:8b:f9:2a:fd:ff:16:83:2f:ee:55:c6:
f5:91:72:75:c1:e3:7e:d9:79:73:bc:72:dd:cd:e6:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:69:77:2E:39:C8:20:78:D8:28:B4:94:60:08:61:8D:B7:09:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9070F54DA4111EFA529B972762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
27:00:9b:d6:17:97:b1:48:a8:75:94:02:ef:ad:0d:a4:fa:cf:
12:cd:de:80:03:47:79:64:d1:22:a1:5d:d9:9c:01:b5:0b:fe:
6c:80:ff:5c:5c:4d:94:e5:29:95:56:82:a3:58:64:e0:2b:98:
2d:f4:ff:7c:4b:d6:a0:e0:9c:5b:a6:6e:8d:30:a6:bf:e4:ad:
a4:6e:42:7b:2b:cc:d5:22:2e:a8:dc:bd:53:88:27:c5:48:0d:
69:f9:ed:cc:46:f6:76:d6:c0:38:5e:b3:01:45:a5:0c:ff:3e:
bd:14:68:7f:3a:95:21:15:ce:08:e8:9e:7a:ed:a6:85:95:d5:
34:2c:ac:5d:70:66:b7:2b:35:f9:c3:f7:78:17:8f:04:8a:60:
33:47:9c:bf:42:ba:dd:17:4f:93:25:55:d7:25:be:bb:0b:82:
37:5d:dd:35:12:02:91:5e:bb:f0:1b:5e:43:43:3a:36:54:5f:
b3:8f:5d:64:73:13:7e:bb:2d:2e:b8:ae:e3:b2:35:aa:ba:c0:
d2:58:66:2a:88:43:ce:6f:63:9d:d8:49:fe:ab:88:90:0a:d5:
79:e6:0e:4b:0c:60:18:4a:2e:b2:ec:b9:8e:b5:c2:68:c7:27:
b2:74:82:8b:d4:f0:4f:a3:3a:18:6a:15:f2:81:e8:b2:fb:e6:
1f:a2:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:27 2025 by rpki-client