Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E322A2DA3811EF9E2A32B7762E951A.roa
File: E9E322A2DA3811EF9E2A32B7762E951A.roa (raw, json)
Hash identifier: sBXGxg//6XNJV4c0nBfnyqAiceuYAae6mHY9Zz1qb3s=
Subject key identifier: E6:17:D4:3B:91:50:B7:34:20:F4:0D:6D:07:91:9B:4F:96:3B:C7:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01452A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E322A2DA3811EF9E2A32B7762E951A.roa
Signing time: Fri 24 Jan 2025 09:52:25 +0000
ROA not before: Fri 24 Jan 2025 09:52:21 +0000
ROA not after: Fri 28 Feb 2025 09:52:21 +0000
asID: 62240
IP address blocks: 154.196.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83242 (0x1452a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:52:21 2025 GMT
Not After : Feb 28 09:52:21 2025 GMT
Subject: CN=679362d9-3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:af:7c:5a:cb:08:ea:16:a0:df:ab:bb:4d:
05:23:01:e6:97:cf:14:e9:d5:0d:1b:4d:11:ae:4e:
83:61:cb:de:fd:08:38:ec:a7:b4:be:e2:f7:6e:bf:
47:35:9f:24:8b:50:08:a7:0a:fe:ab:30:39:61:92:
80:63:1d:e6:a6:93:52:01:bd:0c:ce:bf:54:f0:23:
f4:9f:96:c5:e4:a1:70:1b:cb:a6:49:4f:6d:56:83:
70:39:ee:7d:ba:c6:18:da:26:a7:e4:e0:28:ff:5d:
ff:9e:99:36:7a:ff:e6:b2:10:c9:b2:5f:59:5b:da:
a4:87:c1:32:a3:cd:f0:04:9b:84:19:13:55:1b:eb:
71:a4:9c:33:00:14:d1:91:fa:c3:d9:55:95:50:40:
68:08:2c:58:3a:f9:f4:ab:20:c0:fe:d3:81:84:5f:
c5:55:88:a5:81:13:8b:ac:ec:9d:96:4b:11:57:11:
b5:57:00:4b:64:07:83:06:2e:dd:5d:16:af:23:c9:
cb:77:b8:a9:97:55:63:c3:16:52:95:46:11:bd:d4:
4b:87:c6:5d:3c:cb:66:78:c0:bc:c1:db:9b:47:52:
d7:fd:c8:47:82:83:04:84:cd:fb:e5:b7:20:66:3b:
1d:2a:22:8b:f3:74:c7:29:13:c6:ff:be:3a:e3:de:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:D4:3B:91:50:B7:34:20:F4:0D:6D:07:91:9B:4F:96:3B:C7:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E322A2DA3811EF9E2A32B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.36.0/24
Signature Algorithm: sha256WithRSAEncryption
45:44:1b:67:1f:b7:8f:2c:d4:a3:cb:6c:8c:ab:cf:94:3c:c0:
8b:24:83:50:0e:56:a7:99:6c:af:7f:06:44:c3:75:cc:de:5c:
1d:dd:77:50:f7:39:e8:7f:92:e1:09:1e:6d:31:08:01:a4:58:
bd:74:f5:ec:dd:15:8b:d0:1f:9a:fd:fc:62:69:df:a7:60:b2:
55:ba:40:3d:4d:83:86:2f:f4:24:86:bc:fd:63:96:bc:35:05:
a8:37:12:04:31:62:35:4b:90:23:75:a4:0e:76:45:be:dc:ed:
47:f9:1f:03:b0:7d:24:c5:21:65:02:77:da:f6:17:d5:57:84:
da:0a:d0:79:eb:41:65:4d:a1:c9:b7:d9:42:45:9b:cd:31:9e:
2c:da:e5:ca:98:49:2f:42:a0:01:d2:d6:c1:95:9a:d8:6f:1e:
94:ab:f7:cb:77:6b:b7:44:14:22:1a:10:2c:da:47:20:50:81:
3f:df:99:56:fe:6f:6d:1b:1f:d2:79:26:f6:66:38:bd:c0:3d:
a7:64:5a:08:59:c7:e4:02:28:8f:65:4c:f9:d1:85:04:48:9d:
76:7a:2f:fa:dd:5f:08:1b:62:9e:a4:79:7c:78:67:47:01:ab:
f8:7a:15:a8:47:7a:b7:83:be:5c:6e:dc:79:3e:15:f7:22:0b:
5e:81:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:00 2025 by rpki-client