Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F88542CCC811EFB6A57A4E762E951A.roa
File: F4F88542CCC811EFB6A57A4E762E951A.roa (raw, json)
Hash identifier: hvV+r/tUhhVyQvAWEAQ8pHF0aFK5Nefdm1v1AOOqf4E=
Subject key identifier: 6D:C8:8C:7D:7E:D0:4C:EA:7D:E3:07:D5:F0:55:F2:24:D9:04:C3:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01364D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F88542CCC811EFB6A57A4E762E951A.roa
Signing time: Tue 07 Jan 2025 07:28:15 +0000
ROA not before: Tue 07 Jan 2025 07:28:11 +0000
ROA not after: Thu 06 Feb 2025 07:28:11 +0000
asID: 200373
IP address blocks: 154.94.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79437 (0x1364d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:28:11 2025 GMT
Not After : Feb 6 07:28:11 2025 GMT
Subject: CN=677cd78f-5be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:dd:88:6b:c0:71:2f:40:d7:6b:ca:8d:bf:
90:d7:71:c6:6a:26:4e:7b:0d:43:59:d0:ca:fb:9a:
82:8c:b3:d9:4d:74:24:e5:96:c2:b6:a4:a2:5f:d6:
66:b8:ac:25:40:62:28:3e:58:d5:f1:28:c5:f0:9c:
bb:c9:fe:ad:a0:1a:8c:d5:3b:66:93:33:b3:12:82:
3c:b3:07:61:d3:6c:27:34:07:d8:e1:99:0c:0d:8f:
3f:09:35:52:2a:a7:dd:82:67:74:3d:a7:ae:26:7e:
ef:30:19:fb:d8:2f:1d:e4:66:89:54:d7:4b:71:35:
49:d9:f4:74:b8:64:18:f7:30:8b:0e:d6:75:db:c6:
90:1d:a9:d6:bb:c8:9e:6b:5b:8f:d5:4a:d3:a4:58:
5e:e8:8e:9b:ef:6b:ae:9c:6c:29:58:6c:4a:36:67:
42:b9:b1:f6:67:4e:8d:b4:07:5a:e5:86:fd:6d:4f:
6e:21:03:77:2d:3c:b4:61:44:05:0c:1c:13:ec:6b:
ee:27:33:03:cf:b9:0b:fa:cc:55:13:d7:81:a9:28:
4f:bd:4c:65:24:d5:a8:21:b5:e2:7a:7f:ce:a1:ce:
bb:01:9c:0e:88:6c:48:9b:e3:e1:cc:5d:4f:fe:ce:
31:d5:e0:af:73:da:31:b8:02:e7:bc:53:be:94:b7:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:8C:7D:7E:D0:4C:EA:7D:E3:07:D5:F0:55:F2:24:D9:04:C3:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4F88542CCC811EFB6A57A4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.14.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0c:ed:7d:ab:1e:6a:04:ea:b6:67:b0:7c:d7:1c:3f:01:99:
99:8d:49:91:cc:ff:9a:40:22:21:ea:69:de:16:07:6a:f8:e9:
70:f3:9c:e6:29:71:e6:c9:a0:1e:d2:1f:12:35:c1:4c:ed:9a:
8e:ab:42:c1:2f:f1:4e:7a:5e:07:61:ec:fb:c6:ec:bd:eb:a8:
53:3b:4a:62:32:5f:01:b4:ac:84:f3:de:53:9c:73:f3:29:cb:
c4:d0:05:fd:76:2f:9f:64:a2:8a:1a:1f:f9:dd:20:bf:89:56:
45:60:1b:de:a6:f0:d4:e3:73:4b:cc:83:fe:51:10:ef:be:0a:
38:fc:0f:c7:bd:65:f8:a9:20:b5:22:1e:53:42:3e:1d:70:96:
c2:31:64:65:68:65:43:88:b0:6a:b2:83:5b:ab:81:c2:84:fe:
49:82:2f:c7:ea:9a:de:16:0b:c9:ac:92:a2:bf:4b:9d:84:ca:
5e:2e:98:ae:71:a2:ae:f5:4a:04:3c:75:a2:40:29:35:cb:9c:
06:df:e9:1a:4c:9f:f1:4f:95:56:d0:c8:c2:63:ac:17:8f:9e:
d3:03:51:ce:2f:6c:2c:73:ac:4e:f9:6a:93:0a:7f:ed:fa:3c:
f4:84:53:20:a2:91:79:0f:44:3f:c3:35:76:bc:4c:d0:44:c8:
3f:74:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:33 2025 by rpki-client