Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E631FE82DD6A11EFBBE60650762E951A.roa
File: E631FE82DD6A11EFBBE60650762E951A.roa (raw, json)
Hash identifier: U7JWY6zYt0cpqkHo//YRJohRnIcNiS3O7qsKn/QrmBA=
Subject key identifier: 6C:86:2A:D6:A4:62:F1:51:FD:43:95:93:D2:18:2E:84:B7:3F:7D:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E631FE82DD6A11EFBBE60650762E951A.roa
Signing time: Tue 28 Jan 2025 11:27:47 +0000
ROA not before: Tue 28 Jan 2025 11:27:43 +0000
ROA not after: Wed 12 Feb 2025 11:27:43 +0000
asID: 5065
IP address blocks: 154.94.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85214 (0x14cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:27:43 2025 GMT
Not After : Feb 12 11:27:43 2025 GMT
Subject: CN=6798bf33-753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:d1:e6:df:09:69:72:0f:9d:6a:cc:df:cf:
e3:4c:29:03:69:fd:ed:5a:78:80:d8:11:49:d8:6b:
c6:8d:fd:a4:9e:7f:7f:3b:d5:ba:16:c4:d3:1a:4d:
8c:94:2b:31:da:0c:15:a5:77:0a:5f:6e:12:21:80:
09:8b:fa:bf:28:fa:c1:68:ec:e9:d5:24:9f:ec:57:
e3:95:7b:1b:2a:3e:2a:0f:28:22:62:69:e9:6a:f5:
ed:39:07:7b:b5:58:d5:7c:40:83:ec:0b:21:cf:b7:
40:d6:b9:29:b3:1f:db:0f:7f:ac:33:ec:5b:3c:4f:
15:ed:af:03:9c:20:32:f7:c2:99:1f:55:a9:22:72:
3a:10:a8:65:41:a7:30:30:a6:18:86:1f:df:25:5d:
43:c3:0b:c7:15:fe:49:02:55:68:a8:e9:28:c9:e3:
fb:c8:f5:c7:6b:8f:6d:9c:41:02:46:fd:1f:ae:1b:
29:20:48:d9:3b:41:1b:15:e6:9e:07:ee:a2:bf:18:
a3:7e:35:4b:a8:e7:53:22:d9:ac:68:9f:7f:3c:52:
9b:b1:5f:b3:48:61:df:a8:80:e3:ea:af:b8:4c:dd:
e7:53:3b:a1:d9:66:df:09:0c:cf:94:0c:7c:ad:6e:
62:c8:13:50:54:57:8b:a0:a6:b7:d0:06:e7:62:98:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:2A:D6:A4:62:F1:51:FD:43:95:93:D2:18:2E:84:B7:3F:7D:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E631FE82DD6A11EFBBE60650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d9:aa:d4:ed:a0:39:ae:14:2d:a5:99:99:f5:34:b0:0a:7e:
bf:45:f3:4e:f5:e0:3d:f6:68:2b:a1:ae:4a:d8:ec:26:ba:de:
6e:1c:61:1b:ed:b2:0f:e5:9a:3d:a6:09:0e:d6:81:b5:46:31:
68:c7:f7:09:e7:a0:d7:53:53:af:60:2b:fb:8f:e4:ce:c0:ec:
de:a0:1e:24:58:c2:00:55:15:18:08:9c:75:45:94:69:0c:d0:
94:c7:12:e3:63:d7:22:c5:b3:33:ec:18:6a:d1:56:14:e5:ea:
63:63:fb:95:43:48:fb:b0:46:07:96:43:5a:82:d8:6f:6b:0d:
3b:af:69:be:98:50:79:60:4e:3d:f3:75:a4:41:48:ef:98:22:
43:f9:76:85:74:5e:d9:bd:90:2b:ba:23:08:d3:80:01:31:80:
21:6d:db:b8:d9:56:bb:bc:27:47:3d:1e:a3:ae:e5:cd:1c:94:
b3:e6:7f:c2:c6:16:bc:fa:5f:24:ac:9a:38:ad:75:db:7f:c4:
4e:ad:60:34:81:d0:45:f0:7e:79:40:61:6e:c2:de:db:63:bc:
85:d2:3f:19:ef:33:4d:e6:18:ec:28:1a:79:f1:4f:8f:6e:5b:
a6:75:b2:e0:8e:c4:c4:e2:48:64:6f:0f:ef:a7:54:a2:ac:d9:
31:53:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:28 2025 by rpki-client