Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA935E2AC1CC11EF92326D6D762E951A.roa
File: AA935E2AC1CC11EF92326D6D762E951A.roa (raw, json)
Hash identifier: 0bVLOHRDpJaMT6Xx3VDGQN36spWWQ8+i5Ky3lXZ1+cM=
Subject key identifier: 59:C7:52:11:CF:EC:51:9A:6B:08:6A:18:F0:66:93:20:7E:78:36:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01226F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA935E2AC1CC11EF92326D6D762E951A.roa
Signing time: Tue 24 Dec 2024 07:57:05 +0000
ROA not before: Tue 24 Dec 2024 07:57:02 +0000
ROA not after: Wed 10 Dec 2025 07:57:02 +0000
asID: 984
IP address blocks: 154.193.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74351 (0x1226f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:57:02 2024 GMT
Not After : Dec 10 07:57:02 2025 GMT
Subject: CN=676a6951-ec07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:84:df:d1:a6:6e:27:80:f1:69:6d:be:76:
12:db:f8:f3:bd:7c:9a:e8:2f:3d:6f:2c:f9:85:8a:
bd:8c:23:37:ac:4e:0b:ae:17:56:f0:44:16:50:d4:
b0:2e:1b:95:78:7f:85:bd:fb:f0:d4:71:e3:b3:7e:
bb:2e:c2:8b:0c:d0:7b:03:25:91:e3:46:35:27:da:
52:ef:2a:a9:7e:3b:b4:df:cb:c9:d3:3d:62:03:eb:
ff:e0:a5:a8:4b:4f:be:a2:e0:a8:30:5e:2d:19:77:
de:28:45:90:4e:33:04:74:ab:57:89:52:7b:27:f8:
28:c1:f8:e0:92:70:37:f2:e1:ac:59:fd:69:8c:23:
e7:94:3f:50:dc:97:15:96:16:5b:65:69:b0:b0:b1:
f2:30:88:53:88:ab:7d:8b:93:4f:4b:cb:f5:4d:aa:
fc:0f:56:37:58:f1:57:7e:4e:1e:4b:ab:c8:ed:1d:
da:8c:c7:49:4a:57:f4:1f:90:40:6a:53:3f:00:98:
43:d0:ee:46:4c:23:79:69:58:c0:68:bb:e6:a3:03:
4a:29:54:7b:67:d0:30:c7:8a:c4:e9:bb:9b:7a:50:
2c:7d:52:67:64:47:fd:5c:47:5b:f9:39:82:8f:05:
65:c8:6b:9a:9e:12:74:f2:e9:ce:56:51:c2:86:d7:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:52:11:CF:EC:51:9A:6B:08:6A:18:F0:66:93:20:7E:78:36:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA935E2AC1CC11EF92326D6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.215.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ea:64:ef:4b:24:8c:08:62:93:47:3a:6f:24:9d:10:61:3b:
26:f8:eb:a9:8d:d7:60:d3:fe:61:7c:3f:d0:df:15:18:ff:0c:
03:24:1d:6e:23:9d:c9:8d:65:29:b6:70:57:8c:f4:af:1c:db:
50:32:2e:7e:20:27:40:7f:a4:31:60:9f:3e:58:31:1a:d1:cb:
8c:1b:ee:73:cc:cf:fd:e8:55:84:b6:d5:b3:a1:56:e8:31:76:
35:9c:c6:c0:0c:2e:00:bf:e8:02:14:7e:0a:d2:6a:3f:e9:c9:
9b:86:19:0b:3a:81:f6:d6:f9:a7:b1:bf:28:93:ca:cf:66:38:
b5:41:7e:ee:1d:71:33:be:03:2c:0d:68:6f:f3:cc:f3:4f:46:
32:a0:88:54:d6:14:83:2b:4b:f8:16:c8:97:d7:dc:1b:da:67:
e9:4f:01:2e:26:32:1b:63:6b:b2:16:3a:2e:3a:6b:73:6a:a7:
d7:11:3e:38:12:b8:29:8d:99:71:d2:69:73:b3:79:73:d9:3f:
4d:08:a1:05:f4:79:f7:a5:77:e8:34:e9:36:7a:42:32:82:9f:
35:01:db:35:0b:48:fd:99:1f:ce:2a:eb:1d:4d:cb:ba:f3:ce:
f8:7a:d3:5e:d2:ac:5a:0d:a5:4b:f5:7e:35:0b:8f:2d:e6:e8:
da:67:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:09 2025 by rpki-client