Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502329ACC40B11EFA18ADE4B762E951A.roa
File: 502329ACC40B11EFA18ADE4B762E951A.roa (raw, json)
Hash identifier: tUqiDov5J7NwGfDC3dxX35v0A81EkI+ppcRzaQytmv4=
Subject key identifier: 8B:DF:10:17:02:B1:97:04:44:68:32:F9:60:01:0C:48:42:B1:92:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012917
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502329ACC40B11EFA18ADE4B762E951A.roa
Signing time: Fri 27 Dec 2024 04:30:34 +0000
ROA not before: Fri 27 Dec 2024 04:30:30 +0000
ROA not after: Fri 12 Dec 2025 04:30:30 +0000
asID: 984
IP address blocks: 154.196.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76055 (0x12917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:30:30 2024 GMT
Not After : Dec 12 04:30:30 2025 GMT
Subject: CN=676e2d6a-cfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:21:c1:a2:72:bd:7f:ea:6f:4a:4d:d9:df:
44:43:d4:f3:95:87:96:63:7f:1d:bb:54:95:ac:a0:
72:9c:ee:56:89:e5:8f:db:12:bd:7b:38:8d:d3:3e:
ec:30:16:f4:4a:1b:7f:f0:84:c7:2d:1b:72:f4:83:
b0:c4:84:75:ac:3f:a7:e9:cc:63:17:b3:c2:d6:72:
96:f6:ba:fe:82:b3:3b:ef:01:4f:1f:bd:3f:2d:7d:
63:4f:41:e1:a8:b8:2b:bc:7f:3e:72:40:bd:69:55:
40:93:ca:e2:e4:d2:d9:73:01:ed:bd:35:24:c2:a0:
fd:83:e8:79:7a:f5:b3:4e:af:ca:6e:58:6c:26:ec:
43:a7:48:97:93:1c:15:b6:99:f5:38:fd:21:05:43:
b7:36:11:fa:cd:6a:94:41:c7:db:de:1b:df:8d:23:
7c:a8:2c:18:e3:5b:d5:d9:c4:be:71:aa:db:1c:8e:
57:ce:b2:64:9a:8d:58:cc:cb:8b:08:38:b6:c8:68:
ce:d9:3c:16:20:b2:0f:13:42:57:1b:02:98:9f:c4:
a2:51:ae:9b:57:f0:d6:45:93:32:a2:ed:f8:75:40:
c1:af:e5:f1:07:d7:df:48:46:c0:7b:93:71:2b:21:
a2:7e:4a:eb:61:c5:ff:b4:d7:f5:7e:56:d5:8f:1c:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DF:10:17:02:B1:97:04:44:68:32:F9:60:01:0C:48:42:B1:92:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/502329ACC40B11EFA18ADE4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:65:83:73:b9:f6:7b:13:33:96:b1:0e:6f:cb:0f:a8:5d:8f:
5b:e6:00:f2:c4:f3:e7:e0:26:f4:a0:a8:25:b4:8b:17:0d:b5:
2c:89:b2:ad:ed:b1:7e:9c:e3:92:3b:67:cc:86:0e:74:20:04:
c2:88:5d:89:ff:b8:19:5f:f9:40:1c:6c:4d:9a:59:33:4e:6b:
f0:55:c5:ab:4b:d5:1a:9f:a9:46:be:3e:0a:6f:2b:2d:6a:2e:
77:d4:b6:82:81:95:e3:a6:9e:64:e1:2e:3d:45:bf:ff:26:01:
fe:2e:ef:60:48:ae:8c:cc:42:96:50:82:a8:4e:53:5b:d5:e0:
ee:ac:a0:33:3e:be:a0:6e:e4:f4:3f:06:6e:8d:cb:a4:f7:1a:
61:bc:6a:32:6e:56:33:fc:ac:38:3c:d6:a5:3d:5b:21:0f:7e:
ab:b5:72:b3:37:d3:1e:12:ee:c7:87:aa:82:7f:a4:96:a4:68:
7a:f6:78:12:98:d2:29:12:33:42:38:8a:0c:e7:a1:31:ec:fa:
54:56:e2:ee:10:a9:ea:d0:2d:78:4e:2d:09:0a:e5:1b:6e:be:
4e:51:cf:e4:b8:98:fd:46:3f:89:06:3d:33:50:8b:f8:6d:83:
95:33:d5:65:f4:a4:46:94:d8:1d:c1:2d:71:96:9e:ec:23:05:
e6:46:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:43 2025 by rpki-client