Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC903DF0C1CB11EF8239DA68762E951A.roa
File: CC903DF0C1CB11EF8239DA68762E951A.roa (raw, json)
Hash identifier: MGAxKVI8IWW9sHVtY+VLoQhZnf7hJl+PJvAs5YsDqB0=
Subject key identifier: B7:38:DA:3C:BC:2D:2C:BF:10:5E:3A:28:7A:6A:CB:89:DB:E5:73:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012265
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC903DF0C1CB11EF8239DA68762E951A.roa
Signing time: Tue 24 Dec 2024 07:50:53 +0000
ROA not before: Tue 24 Dec 2024 07:50:49 +0000
ROA not after: Wed 10 Dec 2025 07:50:49 +0000
asID: 984
IP address blocks: 154.193.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74341 (0x12265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:50:49 2024 GMT
Not After : Dec 10 07:50:49 2025 GMT
Subject: CN=676a67dd-a917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:6b:a4:43:14:aa:65:8c:08:20:2d:0d:9b:
43:8f:e7:95:e2:a3:d5:6d:d8:7c:62:5b:19:8c:72:
4d:f7:9d:a6:62:f5:32:76:8c:b5:9a:df:f3:79:d9:
31:1b:d0:01:f2:34:a2:5b:37:bf:8d:8e:82:da:6a:
7b:6f:eb:79:19:d4:41:0c:1b:27:01:47:51:7a:82:
00:a5:ff:58:39:20:6a:f8:c9:d7:3d:44:a4:fc:cc:
f6:e7:b1:98:cb:02:e2:cd:eb:a6:ad:f0:48:eb:af:
39:e4:55:23:a2:fe:ea:49:3b:5f:d9:83:d8:ba:29:
8d:55:53:08:11:a0:c1:95:be:01:6f:51:7e:14:ef:
dc:58:23:f5:64:75:c7:d4:71:2d:64:e6:1a:3a:76:
5a:fa:bf:5c:d2:a1:0d:d4:4f:54:23:d7:2d:c8:6d:
6f:af:d4:09:20:bf:e5:de:de:dd:27:59:95:d2:9f:
6b:b9:87:13:ad:83:fb:fe:c2:90:b2:64:f6:7c:54:
10:11:69:ae:9b:83:19:49:91:60:33:b9:34:2f:59:
e3:d3:e0:27:2f:50:61:36:13:c8:2b:e2:19:56:b1:
75:93:36:22:32:b2:59:4e:64:a6:a4:3a:4b:0b:c9:
56:e0:93:fd:d9:3e:84:32:2e:ba:2b:8b:ec:91:28:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:38:DA:3C:BC:2D:2C:BF:10:5E:3A:28:7A:6A:CB:89:DB:E5:73:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC903DF0C1CB11EF8239DA68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.210.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c7:41:b4:d3:07:89:c1:03:4b:02:3e:77:05:0a:ee:67:26:
03:a6:0d:bf:68:bd:25:37:16:e3:89:da:ce:a4:5a:57:3c:4a:
66:2f:c8:63:ee:1a:e8:08:50:8d:32:d8:53:b3:c0:07:ad:c8:
37:42:28:38:73:b2:1b:db:6c:44:e8:c9:cc:e6:7f:e6:aa:40:
6f:cb:f8:35:ed:06:ad:f6:10:c8:f8:45:35:11:57:d6:e6:88:
c8:1a:a1:69:f0:1d:a3:67:4d:30:ee:b9:89:cb:67:a8:0f:ec:
81:c3:5e:04:9d:52:8b:ab:9a:ad:2d:00:fe:ff:3d:a3:3f:90:
8f:41:46:9c:b5:85:5b:de:44:53:1d:33:e4:49:04:1b:3a:e1:
fb:3d:1d:f6:89:1a:2c:d4:53:2c:b0:f8:ce:aa:8b:d6:c1:a0:
0c:d3:f4:44:b2:e3:0e:71:2f:b5:e7:12:ac:f0:85:22:13:af:
9f:49:7e:4a:a6:45:f6:7d:c6:36:38:12:bc:43:27:59:ff:ea:
71:e6:15:74:91:fb:83:57:fb:24:37:10:c7:73:14:f6:b1:55:
8e:cf:6f:ce:e1:a1:f7:30:ea:0a:05:62:5f:43:80:01:c3:9d:
49:25:1d:9a:b3:d2:2d:c7:94:5d:44:f2:0b:19:8a:b6:6f:da:
41:57:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:07 2025 by rpki-client