Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC21EFDCC8BD11EF8FEE0DA2762E951A.roa
File: CC21EFDCC8BD11EF8FEE0DA2762E951A.roa (raw, json)
Hash identifier: BL2e8yuTa5Hx9KnTC6FkFEfDAp3ScEM0Uk3zk925u7w=
Subject key identifier: 56:BF:72:1E:B0:FE:45:1F:A1:0D:D4:27:11:2C:F7:8F:AE:8C:C5:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC21EFDCC8BD11EF8FEE0DA2762E951A.roa
Signing time: Thu 02 Jan 2025 03:58:17 +0000
ROA not before: Thu 02 Jan 2025 03:58:13 +0000
ROA not after: Mon 13 Dec 2027 03:58:13 +0000
asID: 17561
IP address blocks: 154.221.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78310 (0x131e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:58:13 2025 GMT
Not After : Dec 13 03:58:13 2027 GMT
Subject: CN=67760ed9-4d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:d9:9e:83:7c:c7:39:34:8c:36:e9:c9:6d:
95:05:bd:e8:d6:ec:db:b3:dd:87:8f:89:7d:1c:59:
76:ad:b0:b5:2d:73:ff:16:4d:a1:31:72:8b:72:07:
2d:7d:a3:b9:b4:88:a8:23:77:d4:00:ae:72:c6:20:
15:f2:0d:16:4a:6d:cc:0f:74:fe:93:b0:dd:9c:e7:
41:ed:43:3f:b7:1f:42:90:79:ef:36:31:f2:0e:17:
c3:03:16:f7:af:e1:f2:91:dd:07:30:b6:59:e8:36:
1d:6c:1e:34:46:7c:b8:e0:c6:a3:5f:ff:1c:e7:be:
40:4c:16:7a:2f:32:e3:ba:1e:cb:e6:36:00:b8:76:
68:6e:a2:88:e5:a3:0f:3d:dd:d1:7c:93:e4:bf:3e:
e4:b0:c5:10:3b:29:fb:5b:1e:d9:90:2a:98:80:8b:
26:d5:d2:48:4b:3e:cc:49:9e:26:58:53:c5:96:ef:
5a:c1:bc:98:6c:c4:f3:2d:25:78:db:36:08:dc:b5:
d7:fc:d2:1e:92:fb:b5:dc:79:9d:f5:e1:60:71:5a:
0f:cf:8f:2a:dd:dd:59:35:d4:d5:19:aa:2a:d0:7d:
ea:37:ef:d2:bc:6d:65:64:72:ad:c0:87:cf:c4:1c:
97:73:f6:5c:5d:43:86:43:1b:17:57:64:ce:e9:bf:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:72:1E:B0:FE:45:1F:A1:0D:D4:27:11:2C:F7:8F:AE:8C:C5:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC21EFDCC8BD11EF8FEE0DA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.193.0/24
Signature Algorithm: sha256WithRSAEncryption
64:02:b3:cf:b6:a5:97:39:01:6a:87:ad:08:40:ca:00:77:fb:
8a:f1:83:99:92:29:4e:05:18:bf:fc:59:5d:87:c8:ec:20:dd:
70:d8:45:e7:b8:7c:1c:c3:37:83:de:97:ec:32:2d:aa:aa:58:
36:71:3e:93:40:3e:de:67:bb:70:81:e0:ef:b6:6a:12:05:d2:
13:cc:55:72:c1:60:ed:22:3a:cb:bc:b5:e4:23:25:26:9b:51:
69:90:ef:6a:d0:3b:e8:a6:5b:db:19:bd:e1:0c:ed:a3:3d:51:
a3:d2:f9:66:b8:30:64:0c:6c:af:21:77:09:31:e8:61:32:3d:
69:0a:3c:7f:15:c4:2c:a3:f8:2d:f5:65:8c:b6:f8:03:39:5b:
5e:58:88:69:3f:7f:1d:ea:d2:ce:32:95:16:37:25:8f:c3:9d:
3c:da:ee:d5:fb:c6:60:ac:f3:d2:28:80:2b:92:bc:bf:35:e9:
94:01:4e:28:ac:04:ff:61:f2:14:73:62:11:f9:84:d9:13:6f:
14:63:94:0b:b1:10:a3:47:d0:86:01:e0:ec:47:3c:b9:30:3d:
ac:d8:38:81:97:db:8d:ca:b0:f1:ec:85:1d:b5:d0:0e:8f:de:
ed:6c:13:0f:66:ff:b2:85:c4:f5:79:e9:28:94:0b:82:c5:cb:
d3:fd:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:41 2025 by rpki-client