Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9BED00C25911EF9950146C762E951A.roa
File: CD9BED00C25911EF9950146C762E951A.roa (raw, json)
Hash identifier: trwJOYmKvFGi8ypiiqx3ySPvdd+dvUaQE/xOgk/jgMA=
Subject key identifier: 08:D3:9E:38:EC:1F:92:1E:32:08:6C:A4:50:DC:17:A4:C9:08:C4:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01235D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9BED00C25911EF9950146C762E951A.roa
Signing time: Wed 25 Dec 2024 00:47:23 +0000
ROA not before: Wed 25 Dec 2024 00:00:19 +0000
ROA not after: Wed 10 Dec 2025 00:00:19 +0000
asID: 984
IP address blocks: 154.199.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74589 (0x1235d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:19 2024 GMT
Not After : Dec 10 00:00:19 2025 GMT
Subject: CN=676b561b-5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:6c:b3:32:09:16:81:be:76:d0:0b:5f:43:
4e:31:bf:45:2f:92:0a:6d:b4:f3:30:42:7c:2e:18:
28:8e:36:26:ec:5b:5c:7a:1d:33:e9:29:d6:5c:c2:
6f:62:26:2e:05:36:1b:26:d7:93:6f:15:56:87:69:
f1:a0:40:e1:69:8c:b7:42:20:1c:8a:ba:78:12:a3:
78:b3:e4:0b:22:90:13:44:1e:2a:81:e5:ac:a4:29:
07:42:18:d3:f5:d0:84:2b:19:b6:8a:7c:3d:49:c8:
c4:91:f2:cf:6d:07:96:0c:dd:3c:23:44:be:9d:e3:
7c:c5:42:cc:5e:60:4f:b8:09:7f:ad:ea:1d:3e:8e:
a8:cc:e4:1a:d5:b8:52:27:c7:41:8d:1a:3d:d8:e7:
67:a5:cf:1f:09:7a:68:8f:1d:73:b2:18:d8:e2:8d:
b0:a4:9f:6a:f9:f7:1f:4b:70:62:bd:d0:32:cb:48:
4d:eb:37:12:42:d8:27:a2:e5:b9:42:96:fe:8a:fe:
a8:9c:f9:61:fe:ae:87:be:6d:8f:97:aa:e4:4d:9e:
90:ad:4b:e0:18:99:95:d0:87:33:0c:f8:c7:cf:d7:
cb:4e:dd:10:ad:86:d1:37:bc:86:d5:56:27:9b:29:
2f:03:9e:71:ca:95:56:41:f0:60:3f:2c:eb:48:98:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:9E:38:EC:1F:92:1E:32:08:6C:A4:50:DC:17:A4:C9:08:C4:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9BED00C25911EF9950146C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.60.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a9:48:a8:ac:fb:fa:24:48:fb:d3:7d:df:13:29:52:5e:7c:
bd:4f:e3:ba:40:50:39:94:4a:d7:7b:2d:0e:1c:84:f9:28:7e:
75:d0:25:07:90:09:35:02:0a:1b:98:81:37:72:83:30:16:02:
9d:2f:73:9d:0b:51:bc:4f:b8:e9:74:a1:96:22:4d:e0:cd:73:
46:e6:33:96:7e:6b:04:58:db:46:96:f2:12:69:59:48:78:4b:
c4:33:73:ba:30:fa:f8:ec:a2:e9:15:7f:12:04:7b:8c:d3:4c:
b3:43:30:f5:4c:ec:ae:35:e5:62:93:30:d2:7b:0c:6e:f7:ae:
4d:bd:9d:5b:8a:0b:17:9e:fa:e2:16:2c:d3:49:ea:fd:6c:ed:
99:41:a2:b3:58:a6:88:51:6a:db:c7:df:39:98:bd:c7:54:7b:
51:6a:8f:a0:5a:84:38:3b:d0:c7:64:79:a6:57:34:83:55:2b:
47:30:07:12:92:9d:bc:9f:4d:bf:f4:33:b9:ff:ef:c3:90:66:
e5:b7:34:09:69:ff:45:b9:93:67:64:93:77:24:f3:bf:f0:cd:
c9:86:08:2a:fe:61:9f:91:4e:6b:84:d5:7f:19:51:94:0e:ae:
75:31:04:d9:35:76:86:9b:42:34:ab:f4:11:ce:63:de:14:73:
e8:62:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:52 2025 by rpki-client