Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5AC6C4DA5611EFBA539882762E951A.roa
File: DE5AC6C4DA5611EFBA539882762E951A.roa (raw, json)
Hash identifier: AeGUemS20dRGr4B2P6aL6UG++YbmdJV8UanCY3UdDN8=
Subject key identifier: 24:B1:FC:64:E0:FE:9F:26:E6:AA:59:1B:97:73:E0:B3:DC:1D:B0:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014773
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5AC6C4DA5611EFBA539882762E951A.roa
Signing time: Fri 24 Jan 2025 13:26:51 +0000
ROA not before: Fri 24 Jan 2025 13:26:47 +0000
ROA not after: Fri 28 Feb 2025 13:26:47 +0000
asID: 62240
IP address blocks: 154.194.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83827 (0x14773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:26:47 2025 GMT
Not After : Feb 28 13:26:47 2025 GMT
Subject: CN=6793951a-69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:82:a2:37:42:71:78:14:b9:af:89:bb:34:
c8:a2:e4:57:7c:33:d4:77:e4:b2:9a:ee:1e:7d:84:
94:8f:62:bb:12:0b:28:d2:74:9f:58:b6:6c:e4:3f:
43:07:33:a8:a3:94:1c:e9:a9:de:e8:b7:b1:6a:0a:
06:20:15:4a:b9:51:a9:2b:b9:05:c4:4e:40:61:0b:
06:e4:86:ad:88:97:cf:bc:ee:9a:24:c5:24:5b:56:
1c:44:c2:68:70:64:86:ec:e0:7b:c2:6e:35:42:e5:
42:ff:28:ec:d6:17:0a:a8:a9:71:d4:0f:60:d1:4d:
b0:7b:65:2f:b6:27:dc:65:23:8c:c6:a9:77:1d:68:
a8:11:46:8e:fc:eb:7b:b5:23:7b:17:13:70:2a:e5:
76:6f:6b:c4:c7:b8:66:6c:69:8e:ac:f2:6a:22:96:
49:41:cf:90:ba:66:65:48:78:0f:51:19:3b:e0:89:
d9:c3:6f:ea:c6:9d:19:30:1f:8f:d7:26:b5:4c:ee:
51:ca:92:1f:af:67:99:de:5c:13:1d:23:5e:fb:0a:
3d:63:ec:02:37:74:6c:6d:82:49:c8:19:4f:89:4f:
5c:1b:b7:7c:20:77:e4:2e:4c:2b:b0:07:f2:ab:ec:
49:c0:b9:f3:ca:43:c0:7f:9d:ec:63:b5:09:34:6f:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:FC:64:E0:FE:9F:26:E6:AA:59:1B:97:73:E0:B3:DC:1D:B0:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE5AC6C4DA5611EFBA539882762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.96.0/19
Signature Algorithm: sha256WithRSAEncryption
22:f7:fc:93:fb:0a:db:5d:c2:a1:a4:cc:72:e1:13:49:b7:e0:
cc:73:d7:90:0a:29:70:75:4a:96:7b:3d:80:18:99:41:f2:d6:
10:6d:54:2c:24:fc:29:4e:73:90:60:b8:e7:09:62:b2:25:2e:
40:96:43:b4:d3:17:26:ed:c6:47:56:7f:b6:91:e4:b5:0e:8e:
a4:30:f5:e2:34:3c:69:3f:5a:1c:f3:0b:4b:2c:ef:9e:0d:b4:
d9:bd:5c:9c:c2:15:ab:7e:6d:2e:37:a9:d6:b3:95:d4:33:f1:
87:38:88:66:79:e1:b2:82:e3:e4:ec:4f:cd:5d:1c:d7:22:ed:
0c:e0:28:7d:be:23:4b:84:40:52:d9:87:8c:d0:c4:a0:d4:b4:
67:d6:04:e8:32:0a:1e:d7:8f:0d:25:f5:b0:a0:72:c0:a6:68:
47:59:09:82:c9:fc:45:ec:3e:01:de:2f:dc:65:66:76:c9:23:
a6:b9:52:e1:20:8a:0d:33:46:72:07:51:c0:f5:a3:b4:c8:f8:
05:fb:41:d4:9c:35:39:2a:86:52:ff:28:f2:67:02:41:29:9d:
78:fa:f5:31:3b:11:f5:fb:c6:6b:5b:58:fd:56:99:f3:7e:db:
b1:64:46:9f:bb:e1:c2:8a:3b:a3:cd:5a:99:f1:35:ba:71:a8:
67:68:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:28 2025 by rpki-client