Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B96DD0CE5111EF8ACBD09D762E951A.roa
File: 10B96DD0CE5111EF8ACBD09D762E951A.roa (raw, json)
Hash identifier: eoZZ4nmVi2ws9Cx6XHXGty4pYLhpuCCJ84j47HEok4k=
Subject key identifier: DD:A4:01:B5:0C:8E:3F:71:8C:83:C2:E2:D3:A9:5E:7E:2B:92:29:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013846
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B96DD0CE5111EF8ACBD09D762E951A.roa
Signing time: Thu 09 Jan 2025 06:15:04 +0000
ROA not before: Thu 09 Jan 2025 06:15:00 +0000
ROA not after: Fri 09 Jan 2026 06:15:00 +0000
asID: 17561
IP address blocks: 154.220.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79942 (0x13846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 9 06:15:00 2025 GMT
Not After : Jan 9 06:15:00 2026 GMT
Subject: CN=677f6968-c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:1d:e7:24:95:c7:fb:61:ca:7c:f0:27:e3:
a4:93:d4:0c:2f:15:5f:f0:c9:06:56:78:ee:51:77:
52:d9:a8:73:fe:1d:df:b9:f5:34:88:71:ce:56:c6:
a1:76:c4:27:70:b3:d8:f2:36:c5:7f:c6:28:c4:88:
f2:d5:41:44:b7:8d:66:95:db:10:eb:f4:7d:4b:be:
97:48:43:94:e7:be:0b:82:f0:e4:ca:b0:50:ff:a7:
72:f3:65:f1:45:44:c4:86:72:cf:41:e3:3c:f4:97:
39:b4:8d:ef:a5:3c:b6:15:c1:dd:44:c7:be:3d:66:
80:7e:f0:12:e2:09:7d:a1:21:ef:37:0b:fb:85:4b:
d6:00:20:70:77:ed:98:d8:9e:72:d1:7f:6b:a2:17:
1b:ac:0e:e2:63:5c:b5:7d:e1:58:98:c0:83:16:da:
b0:b3:29:9a:5c:1f:30:b6:84:72:64:f3:42:b2:b7:
d5:47:ad:f5:d6:a1:a4:0e:30:3d:fb:e7:c2:27:bb:
46:b3:3c:61:a9:fc:d8:35:b3:1b:34:2f:e3:d4:7d:
77:b5:89:39:b7:ab:df:9b:b6:0e:0c:fb:ad:27:3c:
b7:65:ac:07:cc:7e:b8:da:fe:c2:95:36:72:58:64:
d9:9e:26:b4:a8:6e:d2:ae:be:53:9a:7b:c7:44:ea:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:01:B5:0C:8E:3F:71:8C:83:C2:E2:D3:A9:5E:7E:2B:92:29:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B96DD0CE5111EF8ACBD09D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:43:2d:f8:e2:b8:00:b4:7a:ed:5b:d6:44:9d:23:30:4e:8d:
54:86:56:ee:47:2c:15:ac:29:3e:14:b9:03:43:9d:6e:c5:e8:
9b:bf:71:34:da:36:ac:e0:2e:b8:07:2f:47:0b:91:b8:91:9a:
ce:80:9e:d5:87:6d:25:76:58:91:ea:85:e5:c7:d3:ef:85:29:
ea:1a:d4:98:91:b8:7f:6d:e8:7e:58:1e:d3:ef:82:91:83:3f:
d3:66:b3:27:f6:40:d7:ee:fc:23:f3:4e:82:11:2d:f6:15:21:
c0:7d:96:cc:7f:c3:ed:1e:2b:5c:f3:62:fe:3c:2f:42:e3:1f:
d9:ce:48:ad:3f:76:45:42:be:b8:4e:e0:e2:66:45:d0:74:74:
14:0c:3f:b7:89:83:38:29:ca:b1:77:d1:81:f7:a9:ad:9f:31:
bc:a4:82:f7:4c:23:45:45:7f:57:5c:6c:d7:28:86:af:f3:e3:
25:0a:d0:79:22:fc:88:03:a1:4b:1e:f7:a0:2d:3c:30:5f:e7:
a5:23:d3:ae:a4:30:34:4c:27:d8:c0:65:16:a3:4d:d6:13:b4:
bd:df:0e:0a:3c:72:72:8c:13:6f:2d:5d:3a:b0:23:89:11:e4:
a5:3a:cc:ec:4e:ed:72:5c:50:dc:aa:33:60:51:43:d2:d1:ca:
65:b3:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:43 2025 by rpki-client