Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC4F724CEF411EFBD6D16A5762E951A.roa
File: DDC4F724CEF411EFBD6D16A5762E951A.roa (raw, json)
Hash identifier: IP1G8rychc656jE7d8VX6zPargxnKMLbj8vafO7AWXQ=
Subject key identifier: 2A:AC:33:38:07:9D:43:6A:67:18:19:5B:E2:95:51:35:1F:95:CA:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013983
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC4F724CEF411EFBD6D16A5762E951A.roa
Signing time: Fri 10 Jan 2025 01:47:36 +0000
ROA not before: Fri 10 Jan 2025 01:47:32 +0000
ROA not after: Wed 12 Feb 2025 01:47:32 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80259 (0x13983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 01:47:32 2025 GMT
Not After : Feb 12 01:47:32 2025 GMT
Subject: CN=67807c38-7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:38:91:c5:de:07:bb:a4:5a:07:2b:9e:d1:
a4:24:de:79:d1:43:1e:0b:8e:56:4e:70:0d:fa:ec:
66:fc:aa:a7:bc:f1:a6:e5:3b:55:bf:7a:41:f5:2f:
9b:2e:c4:48:63:2d:24:13:4f:3a:e9:b9:f4:8b:46:
67:29:38:2f:02:31:0f:43:a5:5e:82:76:36:79:bd:
57:f7:c3:8f:3a:64:40:ae:67:b4:a5:a8:77:19:98:
55:04:94:33:95:b5:30:98:7b:39:bd:3b:b7:99:97:
eb:f9:cb:9c:e0:b7:b7:b6:8e:82:c3:51:bb:d6:93:
92:06:1d:f2:8c:17:28:93:8c:a1:5e:ac:cc:7b:60:
46:b5:56:a0:7b:02:7e:c9:d2:41:52:c9:d9:8d:51:
09:c5:94:ec:7d:0b:34:8f:93:85:a6:e1:cb:67:fc:
ab:d2:bb:09:e3:46:7e:6e:2a:b6:7e:15:93:7d:1b:
94:23:54:42:4e:21:b1:a1:ab:64:84:02:c1:7e:e8:
78:1c:59:2b:70:e1:09:88:cb:b8:2b:3c:4d:e3:ea:
68:83:9b:95:61:b0:9e:97:98:92:02:b5:38:3a:cd:
cb:4c:fc:6b:68:a0:b8:7a:c1:a1:73:11:51:bd:0e:
b2:d9:02:b7:04:48:b7:68:f1:18:5b:1d:31:f5:fe:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:33:38:07:9D:43:6A:67:18:19:5B:E2:95:51:35:1F:95:CA:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC4F724CEF411EFBD6D16A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:32:a5:cf:ec:05:0e:bd:f8:68:b5:82:52:93:38:86:19:ee:
e9:d9:e1:d1:4a:b2:42:40:45:86:e6:d8:02:5d:9d:83:fa:78:
58:6e:22:ee:9b:03:53:20:06:fd:7b:fe:8b:50:31:49:03:cc:
f4:73:d9:3d:cf:ec:26:7d:cd:b4:ce:77:36:e2:c2:5d:ee:3a:
de:b6:46:8b:50:6d:05:b8:d5:d0:61:2d:59:92:73:23:5c:a4:
94:bb:b4:56:d4:25:a8:23:ee:82:cb:ef:ee:da:6e:74:f7:78:
92:0f:9b:e9:52:0f:96:6d:54:bb:bb:27:b3:29:8c:cb:6b:a6:
78:97:95:cf:37:e3:3b:5c:51:24:ce:d9:48:44:4b:49:be:f6:
92:63:77:36:d0:eb:64:14:74:53:4e:95:3c:1a:54:66:86:30:
8a:a3:9c:53:7f:62:00:c6:2e:03:b2:a7:e0:5b:6b:f6:89:fc:
78:40:86:7d:ff:45:3e:e7:1e:f6:ea:92:88:0b:5d:a4:07:ac:
20:8c:5d:1b:07:1d:6d:b5:6c:c8:56:02:fa:80:df:a7:4b:1d:
18:37:05:c4:6e:0a:f0:c5:ad:f4:be:51:51:8a:e0:ec:7a:52:
84:4d:f6:c2:c9:8d:74:ef:ae:62:6e:e9:26:b3:7a:2b:4c:4d:
ab:44:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:40:02 2025 by rpki-client