Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96208E2C0D211EFAFD802BB762E951A.roa
File: C96208E2C0D211EFAFD802BB762E951A.roa (raw, json)
Hash identifier: mRqI5HNalQzxAiON+/D9vssSW9fukq8nz/MgM9empjg=
Subject key identifier: 9F:5E:29:3E:E2:7B:38:38:8B:49:07:0F:4F:2E:36:A4:C9:7C:30:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96208E2C0D211EFAFD802BB762E951A.roa
Signing time: Mon 23 Dec 2024 02:08:23 +0000
ROA not before: Mon 23 Dec 2024 02:08:19 +0000
ROA not after: Wed 10 Dec 2025 02:08:19 +0000
asID: 984
IP address blocks: 154.89.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73292 (0x11e4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:08:19 2024 GMT
Not After : Dec 10 02:08:19 2025 GMT
Subject: CN=6768c616-eb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:aa:31:27:3a:43:d4:16:85:7b:c4:ea:4e:
34:c8:d6:1e:3c:1d:dc:44:61:e0:53:42:0e:d4:62:
0d:35:62:c1:51:4d:84:e5:2d:93:b1:f2:8d:23:2a:
39:fa:78:53:76:cd:7f:64:d7:8e:f2:b6:2a:de:fd:
fa:4f:3e:f0:28:46:c7:59:8e:01:8f:45:b0:63:94:
f5:e6:aa:66:b6:16:1e:74:70:bd:15:4f:ba:c3:99:
1a:aa:3a:a4:53:b0:c5:de:67:a5:8d:c5:94:1a:d2:
27:69:5f:7d:52:7a:3e:11:98:eb:ed:c0:33:61:81:
9a:7d:fc:a9:cb:03:7c:00:ec:f6:3a:30:8b:8b:19:
9c:b9:65:62:7f:4c:1a:c3:15:c5:0b:9b:f8:f7:18:
0d:d6:57:c7:3c:3f:b7:d2:a2:8b:31:07:6b:dd:bf:
5c:da:73:39:0d:ef:af:1f:79:f6:ba:22:f4:f4:02:
bf:25:12:71:10:b9:2c:e9:46:44:f8:a2:03:8c:6a:
9d:66:82:df:1a:91:71:49:64:10:63:b8:2b:c0:c4:
0b:72:a7:fc:3d:a2:84:e9:cb:40:28:3e:f9:b4:ae:
0a:11:b1:3e:9d:85:5c:61:0a:1b:f3:7b:5d:12:6d:
87:af:e4:d8:0d:6d:3f:7c:31:23:e1:4a:0e:5c:f2:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:29:3E:E2:7B:38:38:8B:49:07:0F:4F:2E:36:A4:C9:7C:30:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96208E2C0D211EFAFD802BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.130.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6f:54:1e:5c:6e:36:5c:4f:7e:d8:df:1f:14:3e:ac:e7:f0:
83:70:59:2d:a6:3c:b9:b8:35:8e:70:b3:cf:95:20:be:70:57:
83:f1:85:d9:5d:f5:47:f8:7d:e0:a6:8b:20:65:01:a7:3d:af:
4f:17:fc:c8:c4:0f:7b:4f:e0:c6:d8:3d:73:93:11:4f:eb:7d:
35:9b:7f:92:22:e5:d1:93:75:ec:80:61:65:18:dc:bd:fc:ad:
47:35:00:f6:76:35:5b:4a:ca:5b:64:f3:94:95:5a:26:f6:73:
9e:ee:a2:1a:a7:d0:8a:f7:f1:c5:94:53:6c:32:a3:36:58:70:
9c:35:f6:b8:9e:a7:a2:fd:e7:10:e8:7f:e6:19:9e:c2:09:56:
dc:f0:ea:62:4c:7e:d9:f3:08:2f:9e:86:e8:a5:ba:b6:50:a2:
0b:1c:30:00:28:92:f8:3b:3f:e7:48:85:cf:e8:c9:a1:60:42:
0c:fb:65:4a:9e:58:fe:db:da:9b:74:cc:cc:9c:22:85:bb:35:
35:8b:0f:81:e8:ae:4a:4b:75:ea:81:a3:a2:4d:1c:17:36:98:
e4:bd:8b:e0:7f:7d:fd:4c:8e:f7:f6:d4:fb:38:1e:33:af:f4:
7a:8e:73:3d:28:21:d7:00:11:7d:cd:81:db:ba:19:35:94:1b:
e5:b6:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:19 2025 by rpki-client