Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E01CA2D9C311EF9F4CDA96762E951A.roa
File: F9E01CA2D9C311EF9F4CDA96762E951A.roa (raw, json)
Hash identifier: wFlShqxcYW2snpkzV53uQv4A9W020Hh6aQ+TChk0zeg=
Subject key identifier: 84:90:9D:73:96:09:CB:0C:26:70:AD:4C:44:C0:93:BE:B6:F1:7D:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E01CA2D9C311EF9F4CDA96762E951A.roa
Signing time: Thu 23 Jan 2025 19:55:21 +0000
ROA not before: Fri 24 Jan 2025 19:55:16 +0000
ROA not after: Fri 28 Feb 2025 19:55:16 +0000
asID: 62240
IP address blocks: 154.196.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82608 (0x142b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:55:16 2025 GMT
Not After : Feb 28 19:55:16 2025 GMT
Subject: CN=67929ea8-a6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:5c:6b:3a:9b:e8:24:23:50:0f:9a:ad:93:
d7:b4:b5:a1:c0:86:d1:ff:e7:33:b5:de:f5:aa:3e:
9a:96:f6:9a:0d:44:ea:ff:a4:6a:03:1b:e0:e8:90:
fb:80:00:0b:76:c0:08:2b:9b:38:80:89:e4:35:23:
da:d9:68:32:ce:98:47:f5:13:75:bf:97:de:f3:cb:
8b:c7:e8:3e:f2:ef:6f:e3:05:22:14:1f:74:40:f6:
84:00:9d:c3:d5:7b:fb:77:5b:33:e3:12:6e:e3:34:
1a:20:71:60:b7:19:cc:81:e0:bf:e7:08:79:0b:22:
89:f0:fd:7f:ba:6e:11:f4:33:e5:f9:ca:58:90:a8:
42:2e:21:e2:a6:7d:66:a1:00:da:5c:6f:b3:51:15:
0d:3a:ff:9d:d4:cd:a3:7c:63:35:e8:1e:c5:69:43:
5a:75:ff:d7:d9:05:6b:ef:de:fb:e9:8b:a9:9d:b4:
ce:27:d8:4b:f0:21:0e:56:ff:5f:ce:c7:34:1a:c1:
20:1f:f6:c0:bf:02:89:8a:ca:a9:4e:79:57:9d:4e:
3d:31:2c:fc:5f:5d:1f:f7:00:7c:da:75:04:5f:7d:
16:7a:81:71:10:9b:85:78:79:a2:b8:d0:13:27:1e:
e3:ed:ef:7b:45:3b:09:85:3f:d2:23:29:23:02:5b:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:9D:73:96:09:CB:0C:26:70:AD:4C:44:C0:93:BE:B6:F1:7D:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E01CA2D9C311EF9F4CDA96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.36.0/24
Signature Algorithm: sha256WithRSAEncryption
92:26:85:c9:ef:3e:8d:8b:61:60:bf:2e:68:5b:86:30:f2:8c:
fa:13:3c:42:f8:98:1d:d8:59:cf:fe:38:dc:9b:58:52:8d:24:
c8:63:3d:66:e4:b5:08:b2:21:53:bd:8a:82:6d:51:35:99:93:
7f:44:eb:bb:4f:73:d9:98:af:18:d7:12:05:9e:89:ac:e5:24:
e8:43:a3:eb:88:0b:e9:b3:9e:7d:02:8d:0f:52:e9:f3:e1:41:
79:83:e1:e6:9a:df:a7:c5:6b:1f:c8:51:82:9d:79:bd:fb:fb:
89:e4:ed:14:70:31:58:02:9c:d3:d1:4b:c5:e7:d4:e7:12:86:
91:5b:99:1a:97:e7:59:16:22:93:36:1d:d8:58:e1:ab:f5:89:
02:99:d4:bf:77:85:98:ab:41:79:39:a3:ac:91:06:c1:61:bc:
65:e5:30:99:c3:e0:2d:e2:ba:1a:19:91:ff:75:06:c5:0a:82:
f4:0f:3d:5b:2a:8e:36:9b:9c:9a:61:27:2c:b5:fa:b8:4a:99:
b3:8b:97:d4:39:72:fa:06:8d:40:9c:92:b7:9e:f5:05:36:4c:
62:8c:74:43:6f:9f:39:56:35:0d:5a:47:83:f2:96:21:49:ff:
c9:c9:e9:0e:ce:7c:46:16:5d:d3:fa:ee:f9:53:3b:10:bc:26:
6b:36:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:49 2025 by rpki-client