Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7D9C748D57011EF8269519C762E951A.roa
File: F7D9C748D57011EF8269519C762E951A.roa (raw, json)
Hash identifier: tA6mVaw4qyWsOS0tRv0jy/FWGp+hnvPq7Qzae9NFFWM=
Subject key identifier: 60:3A:AF:C2:EA:E0:7C:B1:80:79:2E:50:B5:CA:73:01:6D:C9:43:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7D9C748D57011EF8269519C762E951A.roa
Signing time: Sat 18 Jan 2025 07:51:04 +0000
ROA not before: Sat 18 Jan 2025 07:51:01 +0000
ROA not after: Sat 22 Feb 2025 07:51:01 +0000
asID: 55020
IP address blocks: 154.202.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81322 (0x13daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:51:01 2025 GMT
Not After : Feb 22 07:51:01 2025 GMT
Subject: CN=678b5d68-8a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:df:fe:3c:c4:74:34:73:08:86:dd:5f:e6:
aa:21:3f:c1:b3:00:2b:03:0e:04:28:e9:dd:ef:fa:
cd:be:27:18:49:21:fd:57:e4:3b:c9:30:84:50:79:
25:92:66:e0:dd:8c:7f:47:42:48:8e:b4:29:cf:ec:
5f:16:83:c4:7a:6d:e9:13:69:97:c2:52:a1:40:ef:
09:ca:f4:9e:19:02:91:a6:c9:9e:ba:6f:b3:e0:24:
55:e2:0f:84:03:59:e6:06:83:ae:d9:a6:79:20:fb:
81:21:75:8f:23:38:f9:63:ad:6b:d4:a6:3a:7d:79:
ce:46:c9:b2:c6:8c:54:14:72:11:f2:95:22:16:b5:
4a:7b:98:11:1a:c1:41:2c:9a:f4:b8:de:e6:f5:02:
99:01:1f:01:a7:90:7c:9e:26:61:bf:42:f5:3a:aa:
df:81:92:c3:b4:50:15:33:ba:3d:76:22:a3:0d:c0:
92:72:ef:4b:26:12:84:8c:ce:0d:62:5f:39:c1:43:
7e:74:c0:7a:17:02:82:f1:9d:ff:cd:af:b8:75:ec:
cb:d6:06:e5:ca:7a:6c:95:e0:6b:02:b4:a1:2a:a8:
1f:1a:31:7f:57:f5:f9:86:9d:73:2c:66:84:d8:79:
ee:2a:eb:a5:dc:e9:f4:8b:00:c4:4d:af:cb:a7:52:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:AF:C2:EA:E0:7C:B1:80:79:2E:50:B5:CA:73:01:6D:C9:43:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7D9C748D57011EF8269519C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:fd:4d:e6:f6:89:28:d4:d0:1c:4c:19:4f:1e:32:de:c4:33:
34:61:f1:f6:08:8e:68:b1:65:d1:6d:75:d2:55:97:7b:7d:2a:
ab:aa:49:8a:a3:00:8d:80:46:42:ec:57:10:41:b4:14:06:f9:
3f:4e:27:bc:e7:39:9a:d8:09:32:28:8d:2f:54:b6:d5:dc:bc:
76:98:ca:56:00:c2:20:c0:05:c8:5d:75:02:69:fe:9e:19:c3:
3b:d8:bd:cc:97:7d:7b:81:53:77:4f:95:84:0d:d8:6b:c0:dd:
d3:95:ab:92:e6:ab:5e:a0:4e:28:43:2f:e4:d0:e6:75:a8:21:
85:e9:62:65:19:1b:79:ea:cc:a5:2e:72:14:63:2c:c6:00:32:
95:35:2b:2b:a9:fa:fd:eb:70:a2:ba:b6:a4:ca:44:fd:98:87:
38:d3:ec:a5:55:4f:4f:a1:8d:59:37:0e:72:db:9a:58:7e:60:
00:a3:d7:cc:79:ab:2d:dc:99:a2:ca:05:58:ee:31:29:a6:d0:
ea:b9:08:31:9b:78:4b:4a:57:b3:42:2f:76:c1:a8:10:85:19:
a8:53:37:65:b8:c7:e9:7c:fb:be:04:7f:6d:ca:5e:9a:2b:79:
a7:0f:91:fd:96:d0:52:7e:5e:2c:9c:cd:46:e7:6e:e9:ca:74:
10:6f:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:59 2025 by rpki-client