Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C336963CDB1611EF9EE21795762E951A.roa
File: C336963CDB1611EF9EE21795762E951A.roa (raw, json)
Hash identifier: vVwg8HHb6i7zlgU7hqgyHa20siHQO0JjeytLf2v+X88=
Subject key identifier: AD:0F:6B:8C:80:33:43:A0:40:8F:A9:04:33:98:13:AE:37:72:C9:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01493E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C336963CDB1611EF9EE21795762E951A.roa
Signing time: Sat 25 Jan 2025 12:20:28 +0000
ROA not before: Sat 25 Jan 2025 12:20:25 +0000
ROA not after: Mon 02 Feb 2026 12:20:25 +0000
asID: 132839
IP address blocks: 154.213.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84286 (0x1493e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:20:25 2025 GMT
Not After : Feb 2 12:20:25 2026 GMT
Subject: CN=6794d70c-9ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:69:7a:50:8a:a2:bc:31:9e:74:02:f5:58:
aa:ac:9a:f6:22:fd:36:e2:ac:b4:dd:33:f3:98:18:
39:a1:90:d5:aa:10:ee:d1:fd:15:05:89:9f:f0:da:
a9:be:e3:01:34:d7:4f:47:9b:64:c7:80:f7:7f:df:
69:5f:dd:1e:ea:1e:f2:bd:54:f4:df:f1:f4:28:96:
00:6b:5c:e4:2b:e6:b5:93:80:a3:c4:f1:87:34:90:
cf:e1:dc:fc:0f:7d:3a:c8:ea:16:8e:28:12:e3:8d:
37:14:31:04:50:c7:6c:2d:de:54:d4:be:93:82:71:
5a:40:a8:09:5a:60:37:d2:7a:e0:ca:51:f0:5b:73:
72:54:0a:c1:fc:bf:0a:e7:2f:38:94:95:f0:5f:3e:
e4:e8:95:0f:d0:d1:5d:19:8d:ca:72:6b:c0:6f:ee:
ec:34:60:76:47:54:10:20:c0:04:dc:06:aa:8c:81:
0d:65:a3:4d:9d:7d:c1:15:09:a4:2e:45:20:f5:f6:
c1:32:0b:49:e3:13:84:b0:44:7d:eb:5b:34:6a:e9:
de:fd:e3:05:94:75:9c:e3:db:c8:e2:d8:87:4e:51:
98:4e:34:46:d4:9a:a8:ea:40:ab:2b:86:ea:de:55:
8f:16:0a:91:ac:d7:e5:4a:4d:fd:ca:91:33:6c:53:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:6B:8C:80:33:43:A0:40:8F:A9:04:33:98:13:AE:37:72:C9:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C336963CDB1611EF9EE21795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:3d:5b:1a:86:a7:eb:a2:21:a0:12:d9:45:76:69:1e:ec:61:
61:48:ab:db:a6:5e:05:cb:ae:c6:ce:28:d1:aa:9c:a3:ac:00:
0b:46:29:5c:ca:a3:7d:0e:6f:86:7e:ba:dc:0b:1d:c6:81:d5:
5c:3a:69:32:25:e3:96:21:3f:8f:b4:e3:d6:2e:70:64:29:14:
5e:ce:c3:38:28:fd:56:4c:8f:48:ac:85:00:2f:ea:24:54:9e:
72:f9:a9:5d:39:c6:db:70:53:92:65:df:04:90:e2:05:3a:9a:
4f:75:ce:c7:b4:43:ff:b3:46:ed:7e:1b:24:3d:9c:7f:ef:64:
e5:f6:ee:d6:10:4f:f0:a0:5f:2e:0f:84:57:00:33:52:8b:fd:
6c:1f:94:b7:8a:14:4c:11:3a:a0:7b:da:d9:0b:0f:7d:a2:a9:
20:10:a3:94:e0:83:f1:95:43:97:8d:0f:b7:29:16:03:f0:5f:
df:8f:66:ed:af:00:32:ad:b8:bf:54:d2:90:18:88:f1:e9:69:
0d:29:ea:99:4b:39:ab:d0:9f:49:3d:93:9d:2a:fc:28:33:ce:
bd:4b:90:80:3d:18:bb:fb:11:c9:f8:e0:10:62:65:6c:5e:cf:
56:d7:e0:f0:d7:2f:5c:90:65:cc:3d:e1:67:21:cb:9e:47:8e:
86:bb:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:57 2025 by rpki-client