Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6C1610CFFA11EF8792E8AC762E951A.roa
File: CA6C1610CFFA11EF8792E8AC762E951A.roa (raw, json)
Hash identifier: uc1kT4Jm8wjHHGXiWWPiDADgF43AYWT+nuuGvDlWfXM=
Subject key identifier: 78:CE:65:0D:47:A3:57:F2:7B:09:59:CA:BD:7B:FA:32:17:00:86:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6C1610CFFA11EF8792E8AC762E951A.roa
Signing time: Sat 11 Jan 2025 09:02:32 +0000
ROA not before: Sat 11 Jan 2025 09:02:28 +0000
ROA not after: Thu 06 Feb 2025 09:02:28 +0000
asID: 45194
IP address blocks: 154.84.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80475 (0x13a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 11 09:02:28 2025 GMT
Not After : Feb 6 09:02:28 2025 GMT
Subject: CN=678233a8-dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:eb:c5:c8:84:af:9f:f8:3a:79:e7:1f:3d:
72:98:7a:09:76:d6:5a:00:4f:20:14:6c:aa:3f:20:
d5:56:01:b6:09:4e:72:2e:bd:cc:f0:c7:b8:46:47:
fe:3a:4f:37:dc:0a:95:ca:dd:23:4e:c0:a1:1a:c2:
45:1f:a7:10:20:1a:ea:ff:42:d4:f0:65:b2:ff:f4:
e6:93:fe:4a:60:ad:3e:1e:84:b0:3f:75:d9:9e:cb:
dd:29:c0:95:1d:f2:fa:7f:9d:4a:ff:e4:8a:b8:eb:
9f:ce:5c:39:35:62:85:79:4d:31:58:56:ff:d6:fc:
2f:ff:f0:57:3f:aa:53:bd:0b:4b:ea:39:64:dd:c4:
d1:2c:29:48:99:96:d2:d2:1a:ef:a7:4a:55:14:3c:
0a:cf:26:b9:f1:4c:6b:e0:07:2c:d1:d9:ce:08:23:
80:51:6e:8b:3c:e7:cc:68:4b:56:88:5c:4d:ac:9e:
8e:18:37:aa:71:3a:64:71:e8:00:be:58:a5:41:84:
e5:ca:de:08:a3:be:3e:b6:7d:64:3c:e0:ba:c7:43:
25:22:68:b8:ab:0b:2f:b9:39:25:50:8b:04:0c:4b:
11:6d:01:63:5b:39:8b:bf:22:ba:69:ce:fa:7f:1d:
5c:1a:65:d5:95:87:33:b0:14:1c:65:f5:ba:a9:b4:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:65:0D:47:A3:57:F2:7B:09:59:CA:BD:7B:FA:32:17:00:86:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6C1610CFFA11EF8792E8AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:df:0e:27:72:92:74:fe:c3:98:61:d6:79:5a:fb:17:08:f3:
cc:22:3e:78:e2:97:fe:26:4f:93:28:7b:84:b9:10:61:d3:10:
7a:32:81:e1:d2:55:6f:c6:2b:ea:a0:8f:93:68:d7:f9:82:48:
bf:b1:bb:ae:a6:d2:e4:ad:8d:30:4c:24:19:05:5f:66:a2:d7:
94:3b:f4:dc:b6:59:42:92:b3:f2:c5:c1:ee:d8:fe:d4:02:95:
eb:21:5c:c6:df:0a:8e:d2:77:92:9e:f0:61:ea:3c:32:7d:4f:
41:da:c6:52:7a:e2:20:c3:c4:53:d9:9e:a8:28:29:9e:8e:88:
ca:b5:2f:d1:7a:c6:87:47:0e:20:d1:ec:a6:57:79:8e:51:5d:
2b:5a:d7:58:f8:10:53:ba:88:27:bd:62:8d:eb:13:e7:34:62:
fd:ac:b7:03:10:d3:a5:99:aa:3e:12:cf:cf:00:db:2f:46:24:
8a:80:25:ef:5f:a5:9a:7f:b5:fd:e7:70:b1:af:79:c0:f0:ff:
94:4f:c5:85:27:94:e1:3e:60:d2:38:fc:89:15:2d:91:b4:e1:
a5:51:a2:6c:83:7d:54:df:27:c1:74:5c:97:40:e6:0b:94:e2:
e1:67:f4:5c:db:b3:e1:20:d5:8d:c2:85:02:7c:6d:a2:59:f8:
a5:5c:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:32 2025 by rpki-client