Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E0D99CC34C11EF8E865285762E951A.roa
File: B6E0D99CC34C11EF8E865285762E951A.roa (raw, json)
Hash identifier: tGRqaPsOl5xVpFal7XiH2D2mHB2JgxQHxs1keUSC6wE=
Subject key identifier: 0A:C1:5E:3E:A6:CA:C0:4B:58:8C:9A:90:11:2C:C4:72:22:06:D3:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01257F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E0D99CC34C11EF8E865285762E951A.roa
Signing time: Thu 26 Dec 2024 05:46:12 +0000
ROA not before: Thu 26 Dec 2024 05:46:09 +0000
ROA not after: Thu 11 Dec 2025 05:46:09 +0000
asID: 984
IP address blocks: 154.211.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75135 (0x1257f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:46:09 2024 GMT
Not After : Dec 11 05:46:09 2025 GMT
Subject: CN=676ceda4-422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:5b:07:1d:83:a9:7f:e3:37:d0:7e:82:03:
42:93:44:b0:5a:a8:45:64:cf:44:92:12:38:68:9d:
d0:2e:ba:9f:e1:6b:1c:4b:5f:6f:47:e4:4a:86:7f:
ed:0f:8f:58:b8:c8:fb:a4:21:31:1a:0d:65:fa:e4:
3a:5f:dc:b4:e7:f9:2f:5c:ad:b9:95:7d:38:8a:d0:
37:9a:7e:99:55:78:d6:96:a2:04:f5:67:61:1b:71:
e4:22:a9:f4:c7:2a:eb:5d:a6:8f:d3:d6:f7:23:a7:
f1:a0:42:bf:f5:5e:9f:1d:60:c3:b3:38:2e:90:81:
eb:14:fa:ff:30:e4:f2:fd:ea:47:74:4b:8d:9d:ab:
24:58:cf:0b:5a:89:89:76:ba:6d:8b:d2:f6:cf:ce:
8e:22:c8:c4:0f:ae:45:f6:80:e3:ea:e4:71:69:61:
8a:eb:02:98:4f:01:fa:fd:88:4f:1d:99:47:5c:4c:
ca:ab:f3:32:fe:f5:fa:fb:63:7f:54:69:0e:a2:82:
13:38:c2:3a:36:24:d7:94:89:1f:9f:f7:80:ee:16:
39:92:a3:72:2b:e4:4c:f9:6e:9b:e0:f7:6a:ed:9d:
9c:e9:36:e7:07:38:e3:8b:87:74:d7:ea:63:5b:17:
3e:e9:c5:cf:38:86:1f:8c:9e:d8:0f:50:21:25:c4:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:5E:3E:A6:CA:C0:4B:58:8C:9A:90:11:2C:C4:72:22:06:D3:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E0D99CC34C11EF8E865285762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.214.0/24
Signature Algorithm: sha256WithRSAEncryption
52:88:28:b0:82:c5:08:0e:bf:4a:a4:f7:d8:98:7f:03:2e:47:
7c:74:f6:db:ad:19:8f:8c:0d:71:56:20:87:1f:98:ed:ee:fa:
86:5d:b0:a8:82:b5:37:e1:1b:46:f6:60:3c:a4:22:54:0e:a2:
67:e4:e3:25:50:86:2d:fc:ba:f5:43:47:56:61:70:14:97:2b:
35:53:21:83:0f:e5:ea:a9:b2:51:32:36:d5:cc:01:69:64:0d:
27:67:17:db:2b:9d:a8:df:e9:83:15:82:0c:33:de:58:6f:20:
52:b3:d2:17:ab:52:5a:d9:e3:c2:4d:5b:d1:7f:43:86:69:6a:
8b:ce:8f:c7:86:5d:f4:f4:da:26:7b:e6:64:52:06:e2:7c:d6:
16:15:da:9b:a4:1b:b5:6e:df:26:e9:98:43:19:f1:60:d2:17:
e1:20:b3:33:e7:0c:6e:b9:a1:e2:10:15:f7:dc:25:59:ba:e4:
8a:59:1f:e3:c5:2c:ca:cc:33:21:63:df:93:8c:e5:d1:6e:e1:
a7:e9:7e:ef:48:3d:89:45:3f:16:77:5d:ed:40:09:7f:c1:b0:
c4:14:cd:15:74:12:ae:f7:0a:db:58:f2:36:4e:7b:57:be:f0:
dc:e8:21:40:5a:eb:92:21:31:96:06:53:5e:1b:ac:4d:1e:b2:
0a:0f:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:57 2025 by rpki-client