Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1B85F8DB5E11EFB7B3A574762E951A.roa
File: CC1B85F8DB5E11EFB7B3A574762E951A.roa (raw, json)
Hash identifier: ZB7Bplwdvrh4JD++2/xcN3QqEuuOKM4+rmi3iniXTIQ=
Subject key identifier: 01:4D:03:53:C5:1D:B8:94:0D:CB:F5:91:DF:F8:5A:C3:35:9D:04:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1B85F8DB5E11EFB7B3A574762E951A.roa
Signing time: Sat 25 Jan 2025 20:56:07 +0000
ROA not before: Sat 25 Jan 2025 20:56:03 +0000
ROA not after: Sun 28 Dec 2025 20:56:03 +0000
asID: 139805
IP address blocks: 154.201.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84558 (0x14a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 20:56:03 2025 GMT
Not After : Dec 28 20:56:03 2025 GMT
Subject: CN=67954fe7-d136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:84:8a:5c:e3:0e:fa:7b:fa:ec:d0:ec:27:
78:4e:74:89:0d:41:97:0d:ee:96:29:9e:12:4b:c9:
4c:9e:8c:b9:db:6c:45:ee:dc:5d:a1:e8:7b:82:b0:
90:db:69:01:fb:19:fc:a9:69:34:5e:2a:ff:fe:45:
58:66:cc:89:b0:6c:c5:f7:17:ec:12:bf:5d:b8:a8:
30:62:36:7f:5e:53:48:a5:d4:05:0f:9a:43:06:26:
41:6f:51:62:89:c0:32:59:a5:4d:cd:76:ea:5d:cb:
53:bd:1f:4a:da:8b:0f:ee:62:ba:78:e9:88:04:63:
e8:5a:d1:cb:a7:d6:1f:4e:c1:45:85:c7:fe:a7:18:
ff:69:e6:2b:8a:88:16:fc:d1:a6:93:ea:ef:2f:ee:
3c:cc:4c:e5:d3:ce:57:3f:f3:c5:4e:1d:c9:25:6f:
c1:21:5c:02:c2:d6:6e:9f:22:93:f5:b1:18:54:82:
3e:3d:fa:22:d1:71:64:1b:ab:c8:e8:dd:7e:4c:39:
f0:6f:97:71:ea:0a:ca:44:d6:0d:91:47:e9:63:68:
55:11:b8:9e:49:71:05:10:c8:68:14:75:d2:0f:c8:
e2:76:a2:d2:b2:09:d0:37:85:a7:4f:61:77:d7:00:
c3:7b:94:e3:0a:f4:9d:54:d7:16:0d:e2:c5:5b:8a:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:03:53:C5:1D:B8:94:0D:CB:F5:91:DF:F8:5A:C3:35:9D:04:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1B85F8DB5E11EFB7B3A574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5b:30:9a:35:98:18:f6:24:aa:83:03:7a:ea:08:77:61:88:
5b:5e:6a:e6:bc:bd:93:0a:bd:6b:57:e7:e8:14:3b:85:b5:92:
b7:5f:85:ab:39:57:13:a3:ed:38:ee:f8:7d:8f:5b:ce:90:d9:
68:3f:15:32:78:16:b9:2d:55:be:2a:b1:ca:a1:f1:6a:ec:33:
0b:99:ee:e9:89:79:f1:2c:95:f0:05:37:0a:ce:98:11:2c:fd:
49:01:3e:ec:c5:32:43:f1:f7:49:0f:8a:e5:01:e2:31:65:f0:
9d:13:62:78:61:9d:45:12:6a:70:2e:65:3a:ab:b2:87:9d:40:
b1:3e:9e:c7:9e:64:6f:f9:a1:6c:e0:5a:f8:90:53:2d:be:66:
a6:28:fa:9e:ed:6f:0f:2b:7d:f5:46:22:c7:e4:d6:65:a8:97:
ab:eb:28:9f:89:2d:67:41:4b:de:4e:b5:7e:f4:5e:6b:63:d9:
cd:92:9f:c0:29:46:37:ab:dc:f8:8e:8b:00:8b:a8:24:90:cd:
5d:65:f3:a7:99:c7:f6:bc:7d:5d:e0:a5:41:1e:36:b4:ea:71:
53:0a:bb:e1:66:4d:b2:65:46:04:d8:2d:39:d0:40:97:bb:41:
94:08:4b:8d:9b:a8:4a:41:31:2b:41:24:d5:eb:f9:80:9f:5f:
51:e1:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:37:20 2025 by rpki-client