Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E2D18EDE0B11EFB2DE1E8F762E951A.roa
File: D7E2D18EDE0B11EFB2DE1E8F762E951A.roa (raw, json)
Hash identifier: cPqlsKnjsQJ3fAxWZXtZZncN/eZyYgFGvTbun+fOCb0=
Subject key identifier: 7D:2C:D0:CF:2E:85:05:E8:CB:9B:9F:01:0C:64:58:A8:7B:5E:DA:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E2D18EDE0B11EFB2DE1E8F762E951A.roa
Signing time: Wed 29 Jan 2025 06:39:52 +0000
ROA not before: Wed 29 Jan 2025 06:39:47 +0000
ROA not after: Wed 05 Feb 2025 06:39:47 +0000
asID: 35916
IP address blocks: 154.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85285 (0x14d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 06:39:47 2025 GMT
Not After : Feb 5 06:39:47 2025 GMT
Subject: CN=6799cd38-ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:41:d7:21:e3:78:8e:c6:60:cb:8f:49:3a:
17:49:0b:b8:4b:99:62:be:22:04:73:5f:12:9f:bd:
a8:e0:e3:58:20:5f:7e:61:0c:f5:d2:be:11:53:70:
ec:24:38:00:db:b3:18:50:7c:e8:3e:a8:79:ca:8d:
d0:e5:e3:0a:fe:c8:9b:4c:e5:41:ff:da:bf:0a:0a:
85:d8:4b:d4:6a:82:8e:3a:45:51:1e:7f:41:c6:05:
dd:09:df:31:6c:58:99:02:11:01:52:29:a5:fb:0f:
9c:bb:64:ef:f0:23:c7:3a:ff:82:ce:b2:2c:70:e5:
3b:a4:b9:66:7f:90:87:3b:a4:91:87:f0:6e:a4:c7:
d4:71:76:f4:2f:1d:91:89:4c:af:bd:7c:d2:e9:80:
ac:d6:b1:0f:2c:ec:c9:44:1d:c3:af:43:97:d0:da:
83:58:6c:bc:c1:9d:44:60:4d:4d:82:51:77:51:2a:
fc:94:90:a2:5d:e1:c2:3c:49:9f:f5:42:13:f9:06:
d6:43:c6:a3:2d:f5:7f:d8:5e:55:d9:e8:b3:35:d9:
63:84:46:bf:49:0b:71:dc:75:55:25:40:af:d1:4c:
01:43:2f:ac:0d:e5:9c:f5:ac:6f:a9:c1:43:b8:40:
7e:02:f1:46:8c:ab:5d:ca:48:88:83:0c:e8:16:b5:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2C:D0:CF:2E:85:05:E8:CB:9B:9F:01:0C:64:58:A8:7B:5E:DA:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E2D18EDE0B11EFB2DE1E8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:5e:88:89:02:7e:fd:ad:98:c5:c7:0a:f6:a8:db:94:3e:94:
10:8c:db:b3:69:6a:98:93:92:01:84:85:29:6d:b5:59:25:89:
24:0d:86:d5:7e:49:07:bb:bb:18:c1:e0:68:29:e9:16:01:d5:
99:7c:20:0e:4f:c5:3b:76:b2:40:90:31:aa:25:cc:01:3f:f2:
8e:d5:75:5f:86:7d:42:52:54:d4:f1:83:c3:e1:5c:03:6a:08:
25:42:d9:1e:a2:5e:2d:fd:14:80:ac:33:5d:fb:94:ee:d9:1f:
2a:ff:21:9c:48:42:0d:f8:bb:c9:93:c0:66:46:08:2f:da:db:
60:69:13:88:72:eb:fd:d2:50:e6:d4:be:2e:54:81:c6:4c:49:
c7:0b:63:7e:30:22:44:ff:96:0d:06:01:c3:f4:8c:2e:89:36:
e4:a4:3f:6a:b1:20:e1:b3:73:23:c4:57:ec:69:b8:12:44:08:
74:c8:73:d0:cb:ee:bc:54:29:ba:29:3a:e6:51:13:8e:b5:b2:
68:3e:35:53:a1:bd:c7:6a:f6:42:df:e7:0b:72:84:aa:79:44:
46:31:bc:de:9b:97:ad:00:2c:84:22:8b:9e:29:49:4b:8e:9b:
ce:ca:b8:6b:1a:3d:f6:c5:aa:46:ff:e4:83:31:a3:69:00:d4:
14:ed:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:53 2025 by rpki-client