Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC728FADA3B11EFB11BF44B762E951A.roa
File: FEC728FADA3B11EFB11BF44B762E951A.roa (raw, json)
Hash identifier: pdJ+LdccBg8M7j90yOvGUb5ab7s8Kb7V8KMBM7Aoftc=
Subject key identifier: 94:D3:4A:99:6B:2E:03:1E:A1:AD:CB:B4:FD:2E:FE:8A:43:D9:14:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014565
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC728FADA3B11EFB11BF44B762E951A.roa
Signing time: Fri 24 Jan 2025 10:14:29 +0000
ROA not before: Fri 24 Jan 2025 10:14:25 +0000
ROA not after: Fri 28 Feb 2025 10:14:25 +0000
asID: 62240
IP address blocks: 154.196.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83301 (0x14565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:14:25 2025 GMT
Not After : Feb 28 10:14:25 2025 GMT
Subject: CN=67936804-34d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:35:6f:64:85:9a:28:06:02:d9:04:93:38:
6d:39:e9:4d:75:df:61:04:e2:58:03:33:0a:78:01:
c2:01:0c:d6:72:bd:2a:01:ec:77:9c:c6:a9:6d:9b:
ea:cc:66:ec:b2:f4:11:ea:43:56:4f:27:4d:d7:f5:
5b:5b:7f:e5:14:68:ea:2f:75:d5:06:4f:45:a3:1d:
6d:17:ce:cc:93:f2:23:31:d2:33:96:04:d4:f9:f5:
3b:97:59:04:85:19:ee:a6:e7:36:29:85:f1:55:92:
39:f9:dd:fc:2e:8c:ef:26:75:67:49:8e:b1:a6:ad:
7d:46:1d:fd:4c:a4:1b:09:d0:de:f9:3d:d8:91:bd:
0a:d9:81:52:71:72:ec:03:af:13:f1:0e:0d:f2:e7:
a8:51:92:f4:a6:fc:2c:d5:07:28:96:fa:33:a8:39:
56:23:27:72:ad:2d:73:6b:a2:d9:17:1d:32:ea:39:
6a:37:fa:fa:fb:0d:2c:d2:4f:ca:77:b2:3a:53:94:
cf:d2:b1:79:f3:d8:80:9b:a2:9e:62:b5:d1:d9:b9:
aa:3a:a7:d8:cf:1f:d9:80:77:27:3b:80:ca:b3:21:
c6:26:72:1e:2b:32:76:35:d0:1f:ae:f1:fc:f7:8a:
28:b3:a5:7d:ba:30:6b:6d:d6:a4:f8:d5:7e:d2:1f:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:4A:99:6B:2E:03:1E:A1:AD:CB:B4:FD:2E:FE:8A:43:D9:14:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC728FADA3B11EFB11BF44B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a6:e6:97:b5:9e:51:ba:6a:a6:67:ac:91:1a:42:6e:3e:7b:
4c:22:57:50:1b:da:09:2d:8c:8b:74:41:7d:dc:1d:03:1b:81:
6a:f0:36:fd:64:66:31:dc:d0:5f:87:4c:bb:54:6a:e0:e8:d7:
d9:67:b4:e6:3d:cb:05:21:3b:0d:47:90:9d:72:65:8f:fb:5a:
a7:e5:47:f6:64:4f:b6:c3:2a:fa:c6:ef:91:bb:29:46:76:ff:
c1:03:43:ab:fd:70:07:62:7a:f5:49:7c:e6:82:ee:da:fa:92:
af:cb:fb:f6:f1:85:df:0d:21:a4:c4:83:d8:08:4f:7e:fc:87:
88:af:51:de:0f:d4:a4:ac:65:ba:96:f7:d1:23:47:84:04:34:
0e:0c:30:02:62:28:95:e4:09:9d:43:85:3d:0e:55:df:d5:fc:
83:f5:41:1b:2a:dd:a1:09:bd:9d:eb:e1:b2:75:bb:61:98:9f:
0a:d6:e4:13:dd:0d:09:75:98:7e:a8:8d:bb:e6:5d:d4:d7:4d:
a2:c3:ef:c6:8e:d7:3d:1d:2c:63:e8:1a:2e:9f:b2:0a:13:48:
37:d4:4c:35:4d:85:a1:5a:f0:4f:23:14:b2:c1:66:f2:c8:b5:
23:be:60:89:39:52:2a:4a:87:52:6a:c6:02:99:85:e2:0b:70:
d7:e6:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:58 2025 by rpki-client