Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A979A7DEC40F11EFAFB3CE65762E951A.roa
File: A979A7DEC40F11EFAFB3CE65762E951A.roa (raw, json)
Hash identifier: 0XcE3UGj6KWcRM6/ngbkAbYV8cLmrLzmMel+Kjw923k=
Subject key identifier: 2C:39:73:91:9F:27:9E:68:77:50:F4:C4:FF:23:6E:FB:38:51:AC:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012943
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A979A7DEC40F11EFAFB3CE65762E951A.roa
Signing time: Fri 27 Dec 2024 05:01:42 +0000
ROA not before: Fri 27 Dec 2024 05:01:38 +0000
ROA not after: Fri 12 Dec 2025 05:01:38 +0000
asID: 984
IP address blocks: 154.196.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76099 (0x12943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:01:38 2024 GMT
Not After : Dec 12 05:01:38 2025 GMT
Subject: CN=676e34b6-197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:e4:1b:7b:ed:9a:6d:0d:2b:ec:b8:ed:8a:
2f:25:59:6a:37:0d:95:64:36:a0:c9:c5:24:3d:84:
44:24:3e:5c:1b:46:35:17:fc:03:c6:a5:cf:9e:59:
69:0e:25:62:58:a8:8e:94:2e:74:96:6a:90:e2:11:
3d:82:95:a0:84:fe:c4:a2:58:c6:f1:c1:6d:cf:6b:
d0:fc:8e:03:c5:f2:1f:1f:a6:12:17:a5:90:f2:40:
a2:c3:37:57:2b:06:f0:6a:6c:e8:a3:6c:de:73:6d:
5f:d3:9c:6d:82:9f:b6:41:11:4c:81:4a:e7:bf:c5:
d8:0c:45:4d:d8:42:32:03:73:90:f1:d9:bc:49:e4:
a7:34:44:af:b8:28:a0:8c:dd:48:28:a9:62:24:b7:
ef:a0:b3:ae:f1:92:75:d2:65:d3:ac:97:e9:c0:e8:
1a:69:42:77:28:e2:48:e9:dd:c3:dc:57:ab:00:26:
39:a0:ec:7d:b7:06:da:d3:cd:14:d9:b2:95:6c:c6:
92:87:ce:fa:f8:94:b2:3c:ed:18:66:6a:98:9e:a9:
77:82:d6:ca:3b:fd:19:39:58:87:f9:92:a7:2c:f6:
ee:4b:7a:78:0c:09:9f:dd:dd:82:99:1a:3e:9d:07:
c2:5e:c1:2c:10:40:62:a3:de:e2:8d:3b:9b:56:9c:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:73:91:9F:27:9E:68:77:50:F4:C4:FF:23:6E:FB:38:51:AC:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A979A7DEC40F11EFAFB3CE65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.235.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:27:7b:20:be:3e:17:a8:70:6f:92:52:9c:e3:cd:34:e5:61:
ab:82:2d:e2:1c:68:5e:a7:21:ce:53:ad:02:3a:99:df:63:38:
da:ab:61:5f:de:8a:0f:04:7c:0b:67:7f:51:90:c1:18:9b:fd:
94:a5:c0:72:b7:cc:dc:c7:e3:82:1f:fb:fb:a9:85:77:27:80:
66:cb:15:4b:e1:6e:b0:ef:a8:2e:10:f0:3c:59:f0:e9:0f:2c:
43:dc:13:b1:89:f0:3a:ea:cf:9a:d8:b0:f5:a0:44:b4:1c:c5:
4b:f5:0d:f6:bf:dc:ad:7a:77:a3:9b:1f:d3:82:d2:be:bd:0a:
c4:b1:54:1a:b3:3c:6e:49:8c:27:12:de:39:98:90:6c:dd:05:
28:f4:1b:60:2c:07:80:c5:d6:59:c1:03:59:5a:fe:0a:d9:45:
8e:b8:20:34:f0:bc:d3:c5:b2:55:45:71:9d:9d:71:b1:93:c5:
f8:91:99:27:06:0b:0e:bf:0e:65:1e:1d:ea:40:c8:f8:f0:58:
68:42:79:b9:31:8e:1c:ee:cd:f9:3d:10:5b:24:42:83:e5:27:
a9:98:36:04:01:d7:67:89:c5:a1:c0:6b:51:e9:f2:35:68:26:
9f:ce:0a:27:0a:c2:23:84:a2:04:5f:93:10:40:08:46:85:9b:
26:0a:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client