Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5038EA34CDBC11EF9B0AD862762E951A.roa
File: 5038EA34CDBC11EF9B0AD862762E951A.roa (raw, json)
Hash identifier: h8/c9iItHjdFSFWV/MG4nhWjy3n6zTsgSiHAlw9EtLQ=
Subject key identifier: A1:86:46:0E:DA:53:B4:D4:40:17:32:91:D8:B7:B6:36:D3:CC:4E:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5038EA34CDBC11EF9B0AD862762E951A.roa
Signing time: Wed 08 Jan 2025 12:30:16 +0000
ROA not before: Wed 08 Jan 2025 12:30:09 +0000
ROA not after: Tue 16 Dec 2025 12:30:09 +0000
asID: 984
IP address blocks: 154.200.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79594 (0x136ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:30:09 2025 GMT
Not After : Dec 16 12:30:09 2025 GMT
Subject: CN=677e6fd8-c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:97:ab:8d:bb:d7:ff:bc:a5:9b:f3:8b:f3:
19:cd:c7:dc:9e:03:48:33:88:fd:28:08:67:3b:c7:
3b:ad:58:7f:ac:16:c0:cb:4d:5e:9b:86:fa:39:a1:
4e:77:39:62:3f:51:ce:18:fc:0c:44:fc:3e:20:4e:
9f:04:86:00:c9:56:54:16:d8:4a:03:d5:a4:5c:4b:
68:eb:31:5b:15:b9:be:db:b7:75:8d:d7:cf:39:4e:
87:28:49:14:90:fb:90:8c:12:e3:79:cf:65:e7:50:
ff:87:0c:26:1d:7a:e1:f0:d7:21:aa:92:0a:f7:ca:
30:5b:41:c5:7e:85:27:56:00:b0:7e:c6:05:fc:df:
0e:62:ff:34:bf:83:a6:30:3d:22:0d:33:2b:6b:0a:
98:21:d2:fd:c5:f7:d6:3a:d0:5d:97:c4:9b:f9:2d:
e1:b0:66:e9:75:0c:e4:ca:95:2b:ed:ac:e7:7d:9d:
78:2b:67:af:1f:11:ee:06:0a:83:b2:49:7e:f0:9d:
cf:15:39:64:77:bb:d6:24:1f:d8:3b:5e:0b:7d:32:
2a:59:7f:1c:f0:0c:cf:68:1b:0f:0c:65:9f:eb:ef:
d7:4f:cc:2e:bf:08:ee:86:02:c2:05:ae:ce:da:13:
23:80:cd:af:84:a6:70:32:03:92:c7:d1:63:20:96:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:86:46:0E:DA:53:B4:D4:40:17:32:91:D8:B7:B6:36:D3:CC:4E:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5038EA34CDBC11EF9B0AD862762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3c:67:ff:25:7f:7a:0a:2d:bd:60:e5:9f:0a:79:2e:87:64:
c7:55:36:45:bb:74:e3:3f:ee:7b:84:f1:eb:d4:a2:27:3a:f8:
38:82:1b:f9:02:ee:90:b5:18:e0:fc:8e:a7:8e:ff:80:89:87:
18:06:56:23:f4:41:b5:8b:1c:8c:f0:43:a6:3f:16:1a:f0:dd:
d3:77:e5:aa:1a:f2:df:c1:64:ad:ab:c1:52:7f:69:9f:e7:38:
9c:b7:c3:08:4b:ba:27:40:f2:52:89:fe:90:7f:a7:0f:cb:d1:
59:5e:35:1d:8a:a4:aa:50:72:a6:3f:f7:47:0a:0d:c3:5e:f3:
51:2c:2b:d4:1f:b4:d6:b8:26:27:7a:a0:4a:27:09:11:4d:d4:
a9:26:b8:84:a1:35:03:7f:55:5b:11:77:1f:c8:91:ae:a8:ec:
7c:3b:26:43:81:93:a1:f4:e6:47:1b:50:60:28:c2:3c:9b:82:
96:2f:1f:18:85:79:9c:9d:e9:dc:67:41:1a:0c:94:d0:c8:f8:
15:50:9a:b7:43:e1:9d:1f:31:ed:f0:1a:fb:d5:61:50:06:05:
35:af:4f:7c:be:fc:32:67:f9:fd:a4:58:3b:af:98:01:88:49:
1d:35:00:33:5d:7a:27:22:4f:a4:43:ea:a0:29:13:58:c7:37:
cd:b8:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:03 2025 by rpki-client