Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF384784D96F11EF898A9E6C762E951A.roa
File: DF384784D96F11EF898A9E6C762E951A.roa (raw, json)
Hash identifier: XL7lGPYNJsjmpnJvvAVCL2jvmWvJYOf2CesS/RYVJGg=
Subject key identifier: 1C:46:A7:C5:4F:0F:46:84:A2:74:FD:28:9C:73:50:D4:E5:CE:9D:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014104
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF384784D96F11EF898A9E6C762E951A.roa
Signing time: Thu 23 Jan 2025 09:53:18 +0000
ROA not before: Thu 23 Jan 2025 09:53:14 +0000
ROA not after: Fri 28 Feb 2025 09:53:14 +0000
asID: 62240
IP address blocks: 154.194.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82180 (0x14104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:53:14 2025 GMT
Not After : Feb 28 09:53:14 2025 GMT
Subject: CN=6792118e-9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:8b:1b:bf:dc:a9:43:6a:e6:f8:19:2f:84:
3d:3c:5e:5a:62:eb:fa:1a:e9:05:96:81:f7:fd:e6:
80:c2:b9:56:85:66:16:c4:77:0b:5d:d1:37:91:06:
eb:30:b6:a2:60:63:d1:e5:1c:8e:a1:28:20:37:7f:
70:4c:16:76:88:4a:8a:90:ab:95:a3:a3:ac:75:e3:
df:38:bc:ee:fc:64:aa:13:0a:5a:02:5b:9d:ab:27:
04:cd:d2:00:ae:98:40:c1:24:b1:c2:2f:c9:c7:c3:
99:2f:57:02:b5:37:33:6f:9c:2b:57:e2:18:a6:7d:
12:53:39:0d:de:af:55:1c:f4:05:de:57:93:70:d4:
7b:d9:2c:cd:64:9c:f9:b3:39:b8:08:0d:0d:8d:c1:
7e:27:f5:18:82:0f:16:80:31:d7:53:51:ef:62:33:
45:b8:83:7f:30:f3:e6:bc:0d:1d:c1:1f:90:69:a9:
67:19:27:8e:e4:23:50:02:c7:b0:51:dc:6e:e2:58:
4f:e2:ae:44:4c:d2:9b:3b:2d:f2:82:71:59:d1:21:
10:e3:2a:28:30:19:a6:e8:ff:ae:8d:37:7a:fb:a7:
40:de:ff:c8:98:5f:8e:76:93:ed:b2:6b:97:77:db:
7a:de:8c:8c:1a:39:46:5d:14:27:c1:89:cb:d1:89:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:A7:C5:4F:0F:46:84:A2:74:FD:28:9C:73:50:D4:E5:CE:9D:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF384784D96F11EF898A9E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.124.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e5:71:5c:d4:b8:7e:b1:b7:d7:1c:c8:df:7c:e0:26:2d:13:
55:66:cd:d5:2e:4d:5e:df:45:cf:28:14:19:34:14:4e:28:9f:
5e:72:2f:ce:dc:c2:7f:29:6b:99:06:aa:f3:4e:19:2e:81:f7:
92:a9:39:f1:5f:91:68:e2:96:a9:4c:d3:9e:97:44:04:3b:71:
71:49:5a:b9:c3:f2:ef:3c:a6:40:f6:68:2b:49:2b:d4:89:ba:
61:0f:74:38:21:44:25:2c:54:14:fe:58:09:e0:21:4b:b5:43:
28:53:8f:50:7e:67:1c:a1:0a:d6:42:d8:2d:68:1c:4c:88:7a:
bb:01:b5:fd:e6:96:2c:04:bc:50:c3:26:7d:d4:0d:b7:3c:e5:
fa:6b:da:46:f3:93:62:b8:1b:f3:02:ec:fe:9a:46:8d:7d:26:
72:85:0b:b2:f0:80:66:34:15:f6:7d:6a:ea:70:c1:25:db:95:
0b:ae:4c:11:64:22:da:1a:3c:40:1e:b7:60:0b:a4:82:54:89:
46:1d:39:aa:50:98:d5:24:e3:df:73:4f:b9:12:00:15:e7:72:
ec:85:21:47:9f:f1:bc:b0:cd:84:9b:92:e1:ff:6f:2c:c7:93:
2e:ea:b0:e4:a9:0f:6e:bf:35:d7:21:2e:e5:af:07:85:fe:e7:
6a:6c:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:01 2025 by rpki-client