Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71EB449AC5E411EF966B1378762E951A.roa
File: 71EB449AC5E411EF966B1378762E951A.roa (raw, json)
Hash identifier: E2kDqczXh9lU66kOLXTw/5NrHL0C2h8gvYBKzoS4UOs=
Subject key identifier: 87:48:49:C5:06:31:FE:DB:7D:AD:CA:8C:B0:E0:ED:5B:48:6D:16:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71EB449AC5E411EF966B1378762E951A.roa
Signing time: Sun 29 Dec 2024 12:57:23 +0000
ROA not before: Sun 29 Dec 2024 12:57:19 +0000
ROA not after: Fri 12 Dec 2025 12:57:19 +0000
asID: 984
IP address blocks: 154.210.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77164 (0x12d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:57:19 2024 GMT
Not After : Dec 12 12:57:19 2025 GMT
Subject: CN=67714732-592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:1f:d1:69:16:13:54:c8:0a:d8:8a:cb:5e:
e6:22:65:79:91:dd:5b:31:c6:df:1a:69:2c:7b:55:
b9:e7:29:aa:a0:52:8f:a0:66:60:b5:27:15:0e:53:
ea:22:ef:f0:f6:08:5b:b6:31:68:1a:9e:e3:bd:54:
0a:dd:73:1e:87:53:f8:cb:70:a6:87:f5:6b:1c:f0:
50:d2:db:b6:f4:fe:ca:e7:a5:bd:20:d8:86:db:fe:
6a:f9:48:91:e4:e6:52:12:49:4e:c9:29:dd:ba:06:
0c:80:ea:07:ef:81:91:cf:c5:01:00:fa:8d:97:32:
7f:df:5e:e3:99:cc:b1:af:ee:2b:f6:02:f9:0d:90:
ae:d7:a8:20:fd:6a:08:3b:f1:2e:4d:b5:51:c5:4a:
da:16:83:cc:59:04:cf:85:35:ad:f5:d0:d2:d9:78:
84:bd:13:09:78:31:4b:ee:96:3c:c9:a9:53:bd:5b:
91:42:28:7a:49:3b:e6:55:5c:50:d4:61:61:8b:fe:
c6:61:71:fb:d9:2a:c0:b4:16:b0:f8:f7:62:88:38:
a9:10:16:18:cd:12:ef:94:4d:a5:4a:22:d5:7d:f6:
d5:f0:9f:0a:1e:79:71:7a:98:fb:78:dc:e2:e5:0c:
ab:47:7d:09:9b:a5:43:eb:52:de:79:80:cd:96:d4:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:48:49:C5:06:31:FE:DB:7D:AD:CA:8C:B0:E0:ED:5B:48:6D:16:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71EB449AC5E411EF966B1378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:74:fb:10:08:51:d6:d6:e7:f5:fa:e2:e1:ee:fa:76:71:d5:
77:bc:b9:29:db:27:35:e7:11:d6:0a:f9:53:07:5b:b5:6b:d0:
b8:05:c3:89:17:ae:37:ee:18:37:30:2b:02:0a:8d:62:cd:99:
90:1a:39:86:75:c0:55:09:1d:e0:0d:23:10:fc:a3:bd:11:9e:
d0:6e:ac:95:ef:77:97:84:71:9d:98:f0:7d:8b:23:fb:ff:70:
af:4f:e1:08:05:2d:a4:ec:77:86:ce:67:1f:74:b4:32:99:18:
cd:74:76:d9:99:b1:99:42:1c:d6:a9:48:dc:0e:a2:79:42:0e:
b3:38:72:cc:30:c7:97:e2:5c:c2:0d:ff:af:61:fa:7d:3b:60:
ae:c1:0e:26:01:07:0c:1f:82:a0:41:ae:c6:f3:f4:74:b9:29:
13:9d:0e:fb:29:22:5b:d8:34:55:74:c6:52:c0:83:bc:20:92:
8e:66:58:3b:b9:f3:6b:91:c6:52:3d:7a:80:58:75:27:e4:20:
0f:b6:9f:48:99:99:a2:6b:ea:5e:c3:bc:80:27:b3:4d:71:18:
09:e7:da:90:6e:db:19:a0:3c:6e:4d:62:c0:f4:fa:3b:d4:99:
58:03:e8:95:38:8f:d9:64:60:67:7a:e9:2f:9d:1a:19:b7:0d:
f6:f1:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:05:19 2025 by rpki-client