Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E3AEC0CDBD11EF8CDF6867762E951A.roa
File: 44E3AEC0CDBD11EF8CDF6867762E951A.roa (raw, json)
Hash identifier: c5jGqjcoQ2f75uI1t5tWDG56upO0yxcAFyrtdyd+zns=
Subject key identifier: 49:3A:6F:F3:41:11:A8:1C:E9:E3:FF:4E:CF:F4:A7:E1:6D:A3:B7:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E3AEC0CDBD11EF8CDF6867762E951A.roa
Signing time: Wed 08 Jan 2025 12:37:06 +0000
ROA not before: Wed 08 Jan 2025 12:37:02 +0000
ROA not after: Tue 16 Dec 2025 12:37:02 +0000
asID: 984
IP address blocks: 154.200.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79602 (0x136f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:37:02 2025 GMT
Not After : Dec 16 12:37:02 2025 GMT
Subject: CN=677e7172-7b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:46:da:d4:8e:eb:d5:7b:6e:2e:0b:2d:e4:
2a:16:24:96:99:6a:e4:a7:05:00:ca:18:cf:0b:a7:
06:a3:ef:62:44:cd:c5:59:b9:45:52:10:2c:6c:65:
76:8e:28:69:41:52:09:48:7e:a8:10:cd:b7:c9:f4:
86:3a:22:99:0f:7e:36:9c:5a:d8:96:55:1e:b5:72:
2c:3a:3a:2d:25:72:2d:3f:f9:08:40:ba:56:b1:b5:
ee:d5:30:f2:4f:14:35:75:e4:4d:9b:46:c1:66:c6:
95:c5:01:4f:0c:15:9c:b4:7a:7c:49:e7:91:b7:f5:
77:18:cb:cd:d7:ef:b8:e6:bf:e2:9b:54:29:39:8a:
af:0e:92:e6:26:c2:b8:a3:34:8a:92:0b:2c:98:f2:
d8:f4:d6:cd:e4:b2:fb:fe:68:d9:e9:7c:29:a7:75:
54:2a:8a:2b:35:1b:0a:a4:2e:24:26:25:21:73:a1:
48:d2:c1:99:f7:71:7e:1b:2c:43:db:04:b2:c7:68:
74:01:40:4b:56:c6:a9:50:f0:fa:ae:87:61:32:a5:
4d:fe:c4:a6:79:7b:bc:ac:f5:e8:39:d8:c7:a3:12:
04:60:83:c2:fe:75:1d:48:c4:25:9a:5a:93:84:c6:
81:d9:3f:e4:98:f9:4f:e8:e2:98:3a:82:fd:65:f2:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:6F:F3:41:11:A8:1C:E9:E3:FF:4E:CF:F4:A7:E1:6D:A3:B7:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E3AEC0CDBD11EF8CDF6867762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
86:24:db:17:c4:81:ca:7f:00:c5:f6:8c:d4:04:c1:a7:79:a5:
16:32:a5:e1:a8:8a:5c:86:15:d2:54:1a:59:6e:65:c0:74:50:
c4:c4:2c:4e:ea:81:2a:0d:67:ad:4c:69:f0:4e:58:d6:dd:96:
7c:dd:cd:7f:08:33:a9:bf:a0:a0:a1:3d:16:34:14:65:2a:80:
80:56:2c:8c:f9:72:5b:0b:7c:0f:9e:7b:7f:91:a5:cf:5f:d1:
99:5b:db:56:31:42:4d:1b:f5:59:1f:79:ab:02:f7:57:ff:ee:
98:64:cb:a8:98:91:c1:f1:2e:51:3f:e3:92:8a:b7:e0:1c:18:
43:bb:ab:b0:69:b4:f4:78:50:15:3b:ff:d5:c0:e8:6e:78:1b:
03:3e:c0:68:71:ef:0f:d7:e3:c1:12:b1:6f:a5:e0:e2:e1:d2:
b1:ff:84:98:b1:19:b5:4e:1b:b0:f6:5d:97:e4:e2:83:3c:3c:
bf:c6:ee:90:cb:1c:eb:8e:59:29:ad:97:63:7b:d3:43:a0:07:
ff:d1:26:43:5d:a6:31:09:b1:11:f7:a5:a8:74:88:68:73:4f:
75:a9:4a:14:17:22:06:43:f1:db:fa:bc:a0:07:24:c3:95:4a:
cd:2b:a3:a9:c0:4f:6e:4d:4b:f9:99:16:ab:2d:e4:26:ac:4c:
4e:79:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:00 2025 by rpki-client