Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2733FD0CCC111EF838C76A1762E951A.roa
File: F2733FD0CCC111EF838C76A1762E951A.roa (raw, json)
Hash identifier: FmObroyTpIvlHelLBCSdmgUZzr4+ezMhNZs+waIliIA=
Subject key identifier: 43:4A:3F:85:89:88:61:89:DD:2E:4D:C0:D4:6C:DD:63:A6:6B:CD:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013633
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2733FD0CCC111EF838C76A1762E951A.roa
Signing time: Tue 07 Jan 2025 06:38:04 +0000
ROA not before: Tue 07 Jan 2025 06:38:00 +0000
ROA not after: Wed 12 Feb 2025 06:38:00 +0000
asID: 397630
IP address blocks: 154.202.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79411 (0x13633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:38:00 2025 GMT
Not After : Feb 12 06:38:00 2025 GMT
Subject: CN=677ccbcc-833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:56:8a:79:1a:f5:a4:ba:1c:79:5e:17:1a:
42:40:7f:ac:d8:00:03:1e:07:45:ce:40:3e:ca:ac:
72:10:6b:7b:dd:54:4c:ef:96:4d:28:7f:59:11:23:
68:ac:62:b5:16:a6:0b:d0:a7:a6:e8:8e:b5:5e:20:
94:ed:e8:49:2c:48:7b:38:74:b1:f9:a6:d9:32:13:
d5:ab:a6:9a:f0:a5:9e:31:48:94:d0:c2:47:6c:f1:
d3:22:8d:fc:71:36:16:cf:cd:64:4e:2d:42:da:17:
f2:69:56:7b:c9:c5:bc:85:bd:00:9f:14:e4:8a:33:
21:d0:41:d7:6b:a1:1b:7c:49:d5:ac:07:cf:8e:23:
f6:cd:fe:9f:99:6f:a1:26:80:cc:03:1f:5e:39:f7:
27:cb:a7:80:29:b5:b2:ba:66:f9:29:f4:ff:5e:5e:
ff:ce:2a:4a:85:e7:20:8d:9a:20:6a:fa:4b:19:e8:
77:f9:67:0f:df:35:ef:2d:dd:d6:9b:85:2a:d3:96:
2d:db:eb:86:24:ec:20:d5:a1:05:e5:a7:24:82:85:
7a:b7:23:e7:b1:eb:86:d8:33:f8:27:51:0f:99:e8:
77:a2:d2:cc:66:07:32:78:4c:53:da:fd:64:ad:5d:
78:6d:45:88:e3:b8:de:45:88:d5:d1:58:d9:09:5f:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:3F:85:89:88:61:89:DD:2E:4D:C0:D4:6C:DD:63:A6:6B:CD:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2733FD0CCC111EF838C76A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9b:4c:04:77:92:aa:c0:d2:d6:a0:e2:70:83:b4:2e:08:cd:
74:bc:db:b5:f2:e7:15:3b:d7:9b:02:f2:4e:35:75:fe:46:3b:
07:4d:b6:47:43:6a:c9:6d:ab:65:f4:cc:e4:4d:33:49:f2:7a:
06:40:8e:be:2b:1b:f3:bb:90:d6:1e:8f:b5:ab:6a:a1:12:8b:
92:96:0e:cb:6e:60:b6:91:4c:12:2f:b0:0a:43:fa:7a:4a:a6:
e4:a8:55:df:f2:50:68:69:06:36:d8:e0:bd:08:06:c6:f9:72:
94:44:1c:56:4c:39:ad:0c:e1:16:24:e9:72:7c:bf:5b:eb:86:
eb:31:33:b7:95:85:b5:24:22:98:47:fe:a4:13:30:f0:38:1f:
fb:02:dc:27:37:4d:c7:8f:4b:8f:bc:a1:d6:35:5f:ba:b5:84:
e6:19:a6:47:1d:94:08:b8:a0:a6:5c:61:af:df:27:31:b1:fd:
04:dc:25:e4:c2:a0:c8:aa:cb:d7:91:10:52:45:ab:f3:ed:a1:
55:fa:dd:b0:0d:ab:4b:31:97:d0:86:25:e3:b0:b5:97:eb:a7:
e8:7f:d2:6e:42:1e:65:8b:79:29:26:86:b8:e5:c9:fa:e3:a7:
ee:f0:11:f8:58:97:bb:88:0b:9a:98:8b:32:d0:0e:9e:77:0c:
ee:37:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:16 2025 by rpki-client