Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1669334D97A11EF8C2AC3B3762E951A.roa
File: E1669334D97A11EF8C2AC3B3762E951A.roa (raw, json)
Hash identifier: QFEWFirS3RfkIcSuLjcpLOCQ5EPOaP+buOS6CE/SxbI=
Subject key identifier: 07:27:C0:5D:05:23:82:10:63:B1:E6:EA:71:28:2E:0B:26:F3:B4:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014182
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1669334D97A11EF8C2AC3B3762E951A.roa
Signing time: Thu 23 Jan 2025 11:12:06 +0000
ROA not before: Thu 23 Jan 2025 11:12:03 +0000
ROA not after: Fri 28 Feb 2025 11:12:03 +0000
asID: 62240
IP address blocks: 154.195.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82306 (0x14182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:12:03 2025 GMT
Not After : Feb 28 11:12:03 2025 GMT
Subject: CN=67922406-fd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:6e:50:c2:ed:df:7e:3a:19:2a:f9:6f:6e:
60:58:3d:ac:bc:ff:ec:b3:b6:17:18:8b:c8:88:b3:
f1:81:b8:fe:66:17:e1:e3:aa:46:07:dc:fb:07:c9:
81:ae:66:1f:f4:2f:d7:da:6a:4c:4c:b5:7f:53:2b:
23:42:18:81:92:36:23:5f:f7:f0:a7:50:57:7e:ab:
56:20:2e:76:19:c1:9e:40:a9:60:34:16:f9:b6:ce:
bc:e3:ce:e8:2e:6d:0b:45:0e:62:7c:41:a9:f9:47:
af:83:d5:69:67:c7:7b:d2:6b:f1:c2:71:38:af:f2:
69:3d:ff:4a:52:c3:d5:2e:e4:59:ea:d8:c4:56:9d:
c1:50:7a:9c:64:60:7d:92:87:b5:e7:ed:00:d0:e9:
4f:0d:46:77:56:73:87:4d:28:39:47:7d:ae:ed:f0:
0c:81:9d:66:3c:6b:17:c6:90:fb:97:84:36:5b:7b:
e3:a1:26:93:5b:66:f2:ed:32:3e:32:0d:9a:c8:6f:
89:4e:31:38:07:3b:ec:5e:9d:da:63:04:c8:3f:c0:
1f:ee:b9:e0:38:c5:44:01:ce:ab:6f:f3:56:d2:fe:
b5:91:5f:9d:8a:ea:4c:8f:38:ca:0d:9f:fe:5d:06:
0e:89:3e:a6:55:8f:f3:a7:9a:90:a2:52:0f:58:b7:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:C0:5D:05:23:82:10:63:B1:E6:EA:71:28:2E:0B:26:F3:B4:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1669334D97A11EF8C2AC3B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e6:63:61:ba:25:c1:35:07:ca:e4:ca:6e:41:1f:cd:b8:63:
a9:86:05:f6:c9:29:20:ed:45:65:1f:fe:7f:d7:fd:b6:b4:0f:
de:fd:53:a1:a5:c7:0a:a8:b9:dd:d7:4c:3e:e2:7c:0d:ce:59:
ac:a4:8d:dd:35:de:30:06:f2:f4:26:5e:ce:18:1e:b8:96:81:
70:53:cf:49:20:8b:22:41:6e:36:00:5a:e8:cc:fc:06:3f:b0:
eb:1a:23:29:bc:af:d6:ad:b7:c4:09:d6:40:13:91:b0:d7:be:
ff:89:af:8b:db:1f:b0:ff:53:4d:32:20:53:74:c0:b4:91:ae:
64:0c:f8:3e:f7:1e:02:d6:bc:53:43:d4:ad:c8:b2:0b:fd:f8:
e4:87:b7:97:a2:7c:b2:bc:19:d9:54:1f:d8:a1:93:47:37:04:
b7:89:2c:7b:3e:43:45:0c:4b:dc:db:f4:55:67:6a:fe:68:79:
90:bc:5b:0d:4b:69:2d:72:09:b4:44:5c:a4:85:7d:0e:6b:d8:
f4:74:50:7d:18:69:42:04:6a:4b:18:cf:73:75:1c:f6:dd:e8:
84:77:b9:c6:ab:e9:0e:0c:40:96:fa:65:c8:fc:e8:40:16:53:
d5:59:2d:30:e9:e7:85:1a:7f:ce:cf:a8:58:f1:96:c2:cb:4b:
aa:50:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:37 2025 by rpki-client