Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AC2964CE5011EF9E81BD99762E951A.roa
File: 88AC2964CE5011EF9E81BD99762E951A.roa (raw, json)
Hash identifier: u7m7kIMTbwNycMstdYb30PK3Fm71fIG/V05esBy2KuI=
Subject key identifier: 3A:B6:0F:47:D9:A0:7C:33:34:A1:82:19:05:EA:C8:CB:74:56:E8:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013842
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AC2964CE5011EF9E81BD99762E951A.roa
Signing time: Thu 09 Jan 2025 06:11:16 +0000
ROA not before: Thu 09 Jan 2025 06:11:12 +0000
ROA not after: Fri 09 Jan 2026 06:11:12 +0000
asID: 17561
IP address blocks: 154.220.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79938 (0x13842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 9 06:11:12 2025 GMT
Not After : Jan 9 06:11:12 2026 GMT
Subject: CN=677f6884-bcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:74:b5:39:d8:40:c8:f0:bc:75:10:77:ea:
24:88:05:97:b2:34:a6:81:9b:9d:d1:3c:e0:89:95:
ed:98:db:ce:7e:e9:ef:5f:3e:34:db:75:ec:1c:48:
0f:4f:e3:b5:c5:0c:f4:4a:d3:11:ad:fa:e4:a1:23:
05:21:7a:c9:34:fb:ae:23:7f:61:e3:f8:de:ad:6a:
1a:a4:67:33:aa:6b:1e:ab:85:98:7b:cf:02:cd:9e:
c4:96:7c:45:63:22:be:9f:37:11:b2:08:4c:61:b6:
43:18:7a:d3:e2:cd:49:f2:76:aa:89:40:00:ea:af:
71:82:d5:1e:49:fe:52:1a:6e:cc:ad:b3:53:1d:9a:
f4:2e:7f:0e:ad:9a:59:c2:f6:b5:99:e7:c5:30:38:
e7:de:e5:2f:2f:6c:e8:50:33:73:13:2b:b1:39:86:
6a:29:97:33:5b:50:c9:d4:23:c8:0c:74:9c:2e:e2:
3b:7b:bb:36:d7:61:91:37:e5:90:6f:47:f9:e0:98:
40:c9:34:dc:bb:44:1c:57:fe:d4:aa:64:eb:96:77:
5b:60:fb:ac:97:c8:b8:0e:fd:03:b6:1f:4f:d0:61:
b0:1b:94:97:57:d2:df:43:57:41:c6:d8:b4:d9:34:
b1:e5:87:55:10:21:10:28:08:cf:b2:c4:3b:8f:98:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:0F:47:D9:A0:7C:33:34:A1:82:19:05:EA:C8:CB:74:56:E8:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AC2964CE5011EF9E81BD99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.229.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1b:02:ff:a6:f3:f9:f9:17:78:7c:91:b6:54:ca:7f:c5:68:
47:a1:d6:a5:11:a9:44:49:6f:75:34:1b:e2:d4:95:0c:8c:54:
56:02:2d:22:13:ea:1d:e4:7d:b0:8d:df:77:85:2c:aa:81:71:
c1:9c:41:ab:68:30:53:f1:12:34:2c:e7:ec:6a:ad:46:66:be:
ad:fe:a1:24:6f:f4:9d:62:78:b6:85:e3:31:80:27:c3:fc:47:
45:6b:09:94:65:c7:f3:91:4b:16:c3:15:16:d2:f8:e6:8f:3f:
3c:58:ec:f0:1a:2d:fb:b2:6d:56:ef:c0:13:e6:1c:01:dc:48:
8a:70:db:54:dc:ff:42:36:90:50:88:5a:7c:d6:1a:73:15:05:
e4:f1:49:90:18:05:88:97:4a:51:b0:9f:14:12:b7:e6:54:0c:
9c:0e:32:a6:9d:69:6c:96:05:23:7d:57:1d:b9:a6:8a:8e:10:
e2:8d:6a:64:3f:4d:0d:66:1e:47:42:06:3b:f1:2c:51:c6:b6:
1f:d2:c7:9b:36:39:33:a3:29:64:f3:cb:e6:bb:c8:ba:fc:1d:
bd:4f:aa:6e:ef:64:7c:4e:42:74:84:04:8a:02:29:70:9a:79:
ec:1d:0e:2e:31:69:fe:68:4b:2e:54:22:ac:49:ab:a4:0e:1f:
dd:ed:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:30 2025 by rpki-client