Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A34DC2C05911EFA4963B43762E951A.roa
File: 87A34DC2C05911EFA4963B43762E951A.roa (raw, json)
Hash identifier: oIvwvT+BeO4Ejmr839O74pFL/nwBCXv6r/4l90fAv5c=
Subject key identifier: E1:88:F4:30:4E:C5:F5:2A:7A:07:47:EE:02:B5:1F:7B:77:8E:65:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A34DC2C05911EFA4963B43762E951A.roa
Signing time: Sun 22 Dec 2024 11:40:23 +0000
ROA not before: Sun 22 Dec 2024 11:40:20 +0000
ROA not after: Mon 22 Dec 2025 11:40:20 +0000
asID: 150706
IP address blocks: 154.211.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73136 (0x11db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 22 11:40:20 2024 GMT
Not After : Dec 22 11:40:20 2025 GMT
Subject: CN=6767faa7-bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:fc:e9:1b:0d:ba:32:4c:2c:f6:4d:cb:17:
dc:e5:29:8a:e7:07:56:99:7e:5f:f3:a1:30:84:dc:
dc:c0:bf:fe:4a:fb:9f:cc:70:07:ac:84:e6:0a:92:
08:b5:04:5d:24:b7:b9:c5:39:4f:58:1f:ec:d2:45:
8f:02:32:cd:56:74:b0:b2:ba:fe:c8:51:92:0c:31:
b9:13:db:d3:bf:e7:17:8c:a8:e3:c1:71:8f:91:00:
ba:36:02:c3:34:42:73:43:80:99:0a:4b:69:89:92:
93:a4:cf:df:7f:96:05:54:fd:aa:15:d4:99:9d:8f:
8a:d8:c1:ae:8d:34:a3:59:47:1a:dc:c2:75:6a:07:
a0:b2:2a:9c:1e:b3:2d:62:94:43:56:d6:97:1a:8d:
aa:dd:6c:fc:1e:e4:16:3b:fc:23:6b:e7:ae:a6:db:
14:1e:86:81:6a:f4:3c:d1:a2:5d:18:a2:9d:1a:5e:
e9:11:bc:27:66:83:5a:95:9b:32:f5:c1:5b:c1:34:
d1:7a:63:ba:64:87:a1:63:9c:08:86:6c:94:6d:64:
5b:f9:f9:3d:b4:4f:17:19:c9:95:8b:60:a6:55:a4:
d9:6b:18:a8:a5:db:e0:c6:2c:d2:5f:86:92:24:ef:
3d:a7:f2:c1:c9:68:fc:66:a8:60:be:15:4a:fa:ba:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:F4:30:4E:C5:F5:2A:7A:07:47:EE:02:B5:1F:7B:77:8E:65:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A34DC2C05911EFA4963B43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.20.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b5:56:82:eb:2b:bb:67:73:c8:43:45:03:1d:2c:81:8c:1f:
95:f7:9a:ed:b9:bb:4c:7b:c3:bf:dc:f7:9d:d8:34:88:d0:4f:
5b:fa:be:76:d8:c3:87:65:7b:de:d5:96:af:e1:8d:07:13:2b:
80:af:de:52:f8:1e:7d:8b:74:5a:a6:3b:cf:01:a8:fc:35:e0:
8e:2a:79:7e:72:46:4e:34:2b:cc:7c:3f:75:99:56:8e:2e:84:
3e:0f:a0:76:27:04:da:eb:fa:97:41:b3:09:b2:89:87:b3:4c:
c7:25:79:0e:24:14:8c:4b:33:2d:c9:79:63:75:e6:0b:4c:2b:
14:13:4b:a6:7f:0a:ec:fd:4a:43:e9:dc:59:9d:56:8f:86:9c:
67:92:16:db:3d:4e:84:6e:a7:d3:a5:a2:7c:93:4e:bc:65:fb:
fa:1b:00:e9:5f:e7:b9:8c:0b:70:81:b2:cb:67:8a:b4:15:29:
e0:23:dc:6e:2a:35:60:c2:be:7c:e0:a6:0a:fe:72:1f:71:69:
ae:bd:e0:73:31:ac:0d:14:fa:39:95:4e:f4:f3:35:a0:1e:c4:
67:f7:45:2f:e0:79:1c:72:16:78:cf:ff:48:d8:e4:44:90:2b:
3a:4e:1e:8f:49:af:62:20:13:0c:ba:96:74:62:45:66:e2:2e:
be:88:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:21:07 2025 by rpki-client