Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1288359AC5F711EF911A106E762E951A.roa
File: 1288359AC5F711EF911A106E762E951A.roa (raw, json)
Hash identifier: YOvDj1GwPTt6so5+tk1S+NIusOmu4ky6y0dl9Xg8lcw=
Subject key identifier: D3:CA:E2:9A:1C:45:C5:29:D2:E8:9C:A0:10:EE:09:6D:B9:FD:0D:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1288359AC5F711EF911A106E762E951A.roa
Signing time: Sun 29 Dec 2024 15:10:43 +0000
ROA not before: Sun 29 Dec 2024 15:10:40 +0000
ROA not after: Fri 12 Dec 2025 15:10:40 +0000
asID: 984
IP address blocks: 154.213.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77322 (0x12e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:10:40 2024 GMT
Not After : Dec 12 15:10:40 2025 GMT
Subject: CN=67716673-3c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:05:d8:e3:6f:91:e7:e0:9c:51:9e:1e:21:
83:d8:e4:3f:f2:c0:29:ca:eb:de:d4:a7:45:60:bb:
ef:bf:a1:c2:6c:2a:a3:7e:0d:11:ef:de:b1:bc:bf:
3b:ed:71:7c:47:c3:50:57:21:2d:94:bd:ef:3c:d8:
5c:cc:5e:3f:11:3c:fe:08:97:da:26:2b:c4:e9:c0:
a7:a5:27:d6:56:dd:64:f3:81:69:4a:3d:7e:50:cb:
5c:d5:08:78:51:0b:d3:30:05:99:c1:13:05:bd:22:
ea:c9:40:76:9a:15:10:16:2e:b0:56:bb:d5:a1:c3:
6d:7d:a8:3d:d4:7a:8d:a3:be:19:72:2b:f9:ba:93:
68:80:82:21:77:87:61:1b:68:63:77:23:6a:88:54:
84:62:33:4d:bc:e5:81:fc:e1:ab:c3:0d:12:fa:bd:
38:d4:f1:4f:ec:02:9f:82:b2:ce:bb:3f:53:fd:e8:
fb:4a:46:de:59:61:9a:8e:a3:96:3d:3a:af:55:d6:
dc:b5:63:72:45:f7:37:81:69:51:6d:11:3d:ab:c5:
ef:6c:03:6d:80:dd:6c:96:b6:cd:cb:29:fb:ef:0f:
55:9b:66:b7:d1:6b:f4:86:4a:36:35:a5:b7:2f:3b:
6a:ba:f3:e8:44:64:70:2e:5c:30:e9:55:2b:02:56:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:E2:9A:1C:45:C5:29:D2:E8:9C:A0:10:EE:09:6D:B9:FD:0D:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1288359AC5F711EF911A106E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:67:c5:f7:d3:d5:21:d8:50:1a:a6:50:57:0a:c6:89:8d:93:
20:d8:50:2b:c9:b6:45:a0:72:b3:27:4e:26:75:54:13:84:26:
96:14:f5:5c:74:58:dc:05:ab:7e:e1:dc:a0:d2:47:45:87:13:
f9:02:bc:62:c8:61:d1:db:ce:c2:34:5e:ab:7e:60:cd:b4:72:
83:93:3d:7b:b9:10:4f:3e:a6:6f:45:be:e8:ea:c3:e3:64:50:
6c:f0:11:50:53:7d:18:11:5b:83:9e:f7:47:4e:6a:e8:28:45:
4d:f1:81:5c:a0:21:02:be:79:17:11:10:35:9d:07:37:a3:30:
27:2a:b4:8b:88:9f:a9:65:7f:5e:0e:89:fe:ee:fe:24:a0:65:
d5:05:c4:da:08:ca:df:cb:70:dd:ce:d6:fb:44:f1:3d:74:dd:
7f:98:11:ef:d2:fd:c0:f2:ea:74:6e:85:51:2d:e7:fc:06:98:
83:12:73:89:90:f8:c8:bf:93:d3:d4:59:15:f6:28:44:f2:97:
af:6f:2f:e1:ad:7d:a9:9c:37:ad:29:19:82:48:d8:3f:46:7e:
79:67:f3:a8:f2:d0:7e:53:47:10:0b:c1:7b:5e:9a:56:c7:c7:
de:21:05:66:ed:8a:6b:57:00:95:6f:35:02:7b:0d:5a:a5:05:
77:0b:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:26 2025 by rpki-client