Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC7F5D3ECEEE11EFBC1F7078762E951A.roa
File: CC7F5D3ECEEE11EFBC1F7078762E951A.roa (raw, json)
Hash identifier: 6zbrUsymwTACU60OA+VgCTt7XuPYHo46zj6b2UFVqmo=
Subject key identifier: BA:80:EF:AC:5C:CD:B1:76:2D:2F:2D:EE:1B:5D:69:C8:6D:68:F1:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC7F5D3ECEEE11EFBC1F7078762E951A.roa
Signing time: Fri 10 Jan 2025 01:04:10 +0000
ROA not before: Fri 10 Jan 2025 01:04:06 +0000
ROA not after: Thu 13 Feb 2025 01:04:06 +0000
asID: 54801
IP address blocks: 154.81.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80247 (0x13977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 01:04:06 2025 GMT
Not After : Feb 13 01:04:06 2025 GMT
Subject: CN=6780720a-ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:1b:b4:fa:5d:9e:ec:89:8b:40:1a:78:a2:
ff:8d:e5:07:5c:1c:04:9f:16:7c:f6:9d:c8:83:37:
9c:68:c9:06:4d:9a:e9:64:ef:3e:e6:42:09:e7:76:
37:6f:f2:d0:8d:d7:6f:3f:fb:3d:67:5c:8f:c8:73:
2b:8a:d0:c6:e4:47:c9:99:ea:d3:77:9f:96:ab:fd:
e3:a5:5d:4a:77:a9:4e:c9:18:81:d6:e1:b0:82:88:
67:08:4d:7d:cf:dd:7f:77:1e:69:6a:bf:c5:c1:c7:
24:7b:a9:73:57:93:ae:db:06:87:ac:87:20:4e:b5:
70:f4:b4:93:f3:5f:6c:01:6d:7e:58:58:57:68:44:
b8:1c:61:98:4a:13:9a:42:86:b1:bf:dd:8d:e3:8f:
95:e5:e9:c2:02:5d:51:09:d4:e0:e2:19:34:69:51:
93:6c:35:1e:0a:80:29:d3:6a:e7:21:87:b3:2d:25:
11:8f:03:46:d0:0c:3b:40:fb:dd:d3:0f:99:de:71:
39:2e:41:54:72:57:0c:57:96:af:75:c2:9a:b4:46:
d3:9c:fa:6f:9b:a2:d2:69:5a:a2:51:bc:b7:ee:2a:
f5:ec:93:55:2d:fd:0c:2e:c1:f9:3a:cf:46:e0:c3:
09:f7:aa:a4:66:c3:de:e9:01:bf:2a:dd:5f:23:9d:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:EF:AC:5C:CD:B1:76:2D:2F:2D:EE:1B:5D:69:C8:6D:68:F1:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC7F5D3ECEEE11EFBC1F7078762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6a:73:ce:c1:08:df:a4:10:53:0b:f8:59:2f:12:fe:15:2c:
65:aa:32:0e:fe:53:18:90:b6:03:91:20:e3:f0:34:f8:c1:dd:
35:ea:d2:32:41:55:df:2f:18:cc:00:e7:df:57:06:12:42:2f:
ae:b7:89:8d:e2:16:4a:12:fb:b2:1f:61:f8:38:e9:1f:a3:67:
5e:40:ae:90:36:ad:08:f8:cb:de:aa:c1:f2:3f:3b:29:4d:e4:
4a:9d:ac:0f:1f:48:6d:cc:98:f7:a6:3a:be:b3:51:e6:ec:ca:
28:6e:db:6c:06:12:c8:7d:02:ac:44:5d:1f:0c:d3:07:66:f9:
70:a9:27:27:d9:1b:8f:ad:a2:79:9f:0f:dd:94:31:58:67:1b:
50:e2:53:34:6c:5f:3f:75:7e:44:80:11:12:2e:6e:f7:05:55:
84:df:b7:c7:2e:34:e1:db:df:e1:da:32:e4:50:4d:a1:72:e6:
bc:94:b3:c1:b3:41:8e:85:b3:af:f6:e1:50:0f:6c:7a:cf:1b:
af:cb:01:90:a5:70:56:23:09:fa:f3:2d:74:c6:a2:d8:06:82:
cd:17:fa:fc:be:ae:c7:a7:50:6a:04:7f:1b:e6:e7:5a:9f:03:
fa:46:e0:b3:7a:92:49:cf:1d:66:33:17:7e:de:34:98:46:63:
e8:df:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:42 2025 by rpki-client