Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7716FDCDA3A11EF8D6CED42762E951A.roa
File: D7716FDCDA3A11EF8D6CED42762E951A.roa (raw, json)
Hash identifier: BUJAlXKvshTyCQ+ZFL97tOeAHGSkKV8TUHrYxpAXe+E=
Subject key identifier: EF:14:01:EA:9E:BD:68:F9:18:02:F6:BE:81:71:60:71:65:7A:FF:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7716FDCDA3A11EF8D6CED42762E951A.roa
Signing time: Fri 24 Jan 2025 10:06:13 +0000
ROA not before: Fri 24 Jan 2025 10:06:09 +0000
ROA not after: Fri 28 Feb 2025 10:06:09 +0000
asID: 62240
IP address blocks: 154.196.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83280 (0x14550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:06:09 2025 GMT
Not After : Feb 28 10:06:09 2025 GMT
Subject: CN=67936615-2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:fa:29:1e:1b:39:53:84:d7:c6:d4:2a:76:
88:0a:17:26:6f:1f:f5:00:be:4c:33:b1:85:b8:07:
1a:ee:e1:54:0e:fa:56:a8:9f:03:02:73:2b:a6:b7:
98:6d:82:c4:ea:97:2d:cd:8c:c5:58:d8:f3:8a:6e:
da:89:10:a6:7d:01:51:c4:34:7b:05:f8:56:d3:dd:
92:55:2b:c8:0e:7f:1b:b2:bb:c2:5a:15:73:22:e8:
ed:22:35:23:fe:af:22:63:c2:78:31:5f:d3:f9:90:
33:2d:64:af:d5:49:07:49:a8:93:d9:80:2d:59:1e:
2c:15:51:83:8e:19:79:7d:b7:e5:94:1d:53:5c:a6:
22:43:cc:36:64:5f:e4:e7:ae:b7:c3:82:95:95:b2:
43:2e:7d:c0:ba:f7:cc:30:ab:5d:2c:ed:94:05:6d:
ab:21:74:e5:4b:6f:df:de:55:f5:55:f6:72:b1:bb:
1d:45:15:5e:5d:aa:26:50:bd:f8:c9:e6:9f:e4:72:
ef:9f:8b:e5:83:4c:22:ea:dd:71:e7:d7:fb:de:fe:
ef:9d:71:5f:e1:e8:b3:55:4e:be:c4:00:c9:a3:77:
3b:89:52:f7:67:a3:90:4e:36:60:0d:5f:e0:3c:12:
cb:cf:b0:3e:3e:b2:c4:ea:77:48:73:56:99:79:be:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:01:EA:9E:BD:68:F9:18:02:F6:BE:81:71:60:71:65:7A:FF:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7716FDCDA3A11EF8D6CED42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:3d:69:d0:60:fd:fa:cf:4f:ac:41:47:b9:1a:f5:88:8a:f2:
ef:7a:92:17:fb:b8:f4:9c:16:38:91:06:ea:70:10:48:52:06:
f9:24:ba:69:6d:ea:d7:4b:b5:76:44:24:72:5e:55:89:70:26:
c8:5c:66:d5:9c:1d:17:52:22:b2:7f:cb:f5:00:23:b7:24:4e:
eb:b8:ee:20:0c:7b:21:67:98:1e:93:40:29:9a:47:bf:fa:63:
27:97:06:31:88:d0:8d:e7:8a:b4:3b:bf:3d:a3:4a:48:e0:2a:
06:84:46:87:13:b2:b1:2c:4c:83:30:9f:0c:5f:92:5b:b3:85:
95:b5:3a:8b:fe:e3:41:15:f4:06:6d:56:f2:5b:9c:7c:f7:ac:
12:39:ae:ba:db:db:56:be:d5:64:bb:38:6b:7d:74:3f:8d:25:
b2:ae:a5:80:c7:06:db:2b:4e:8a:5a:6a:d1:d5:52:24:fe:ad:
31:95:f0:0e:c8:91:0f:c5:65:a5:84:64:c0:d6:e4:9a:ed:a2:
70:c9:cf:79:6d:82:1d:5f:d4:8e:47:d3:9d:c5:5f:af:45:6e:
ef:30:fc:d7:b9:45:c5:a3:5a:9b:6f:9d:d0:13:d2:60:fd:c3:
38:da:3f:a5:e9:3f:48:05:41:f3:9e:2c:79:f5:4e:a0:93:1e:
77:44:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:17 2025 by rpki-client