Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAE6628EC27611EF8ECDECBA762E951A.roa
File: DAE6628EC27611EF8ECDECBA762E951A.roa (raw, json)
Hash identifier: Yl4XwIcgsQGKyYAUDfG3VmcvEFokuPcG83rm3157eh4=
Subject key identifier: 9A:91:D2:ED:42:C0:C0:14:6C:4E:A0:E8:5A:8F:E1:B7:34:5B:B1:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAE6628EC27611EF8ECDECBA762E951A.roa
Signing time: Wed 25 Dec 2024 04:15:21 +0000
ROA not before: Wed 25 Dec 2024 04:15:17 +0000
ROA not after: Wed 10 Dec 2025 04:15:17 +0000
asID: 984
IP address blocks: 154.211.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74916 (0x124a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:15:17 2024 GMT
Not After : Dec 10 04:15:17 2025 GMT
Subject: CN=676b86d9-585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:5b:50:0e:9f:29:7c:0e:42:19:88:81:c7:
94:3b:26:60:e4:2f:d4:ec:ad:6d:93:8d:d9:e5:05:
1c:58:39:a9:8a:3f:ba:4b:13:15:8b:3a:20:4a:48:
0f:a6:7e:ee:a4:b3:50:a1:ee:06:18:e0:75:bd:5c:
65:cb:40:ad:93:85:2f:ec:4b:05:22:4b:88:c4:31:
af:50:2c:df:45:5c:9b:75:7a:f8:8b:41:a9:09:c8:
5e:1b:59:01:9e:f3:d3:2a:8c:06:e0:36:f1:97:ec:
a7:3a:e0:e3:cd:c0:49:9d:77:9b:34:87:cc:09:d2:
b1:fa:14:99:fd:a9:0a:fe:c8:76:78:98:eb:9c:3f:
dc:26:38:e1:b6:1b:60:88:1f:f5:61:d9:67:24:86:
6b:04:ce:51:1d:86:b3:c5:22:b4:96:48:82:54:fa:
40:75:75:65:85:92:f6:f2:4f:5e:13:4a:31:b5:19:
13:47:73:ab:33:ab:3a:a0:6b:8e:72:b2:48:32:93:
03:52:33:37:01:3e:3f:ea:39:3b:4b:db:eb:39:a0:
90:9d:f9:48:2c:a0:c4:4b:51:f5:47:ca:c2:4b:a2:
e7:0b:66:66:f4:ef:70:81:e8:8d:71:be:ad:fd:3b:
f5:0c:6e:ac:96:f1:b4:89:a0:af:d6:95:ce:01:92:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:D2:ED:42:C0:C0:14:6C:4E:A0:E8:5A:8F:E1:B7:34:5B:B1:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAE6628EC27611EF8ECDECBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4a:42:f8:06:63:b1:f0:63:50:c7:a7:7a:6c:82:d5:37:c2:
02:07:35:9a:e9:23:2f:19:33:ff:0d:e5:a6:8d:9b:6b:47:8c:
3b:41:f5:2c:8f:58:8b:45:ca:7f:7a:ed:6e:57:ff:c2:a1:5b:
59:b4:b2:bb:bc:96:7d:88:e0:8e:5b:4c:68:21:45:80:a0:27:
af:d3:e4:2b:fd:59:98:28:0b:b5:bc:7a:d5:e7:94:43:b9:ba:
d7:e0:1b:71:13:e9:d3:89:f2:9a:c5:18:1f:3e:17:be:0e:44:
39:8e:ac:3a:82:8f:c9:3a:51:f0:35:94:49:7e:6f:6a:4f:b7:
bf:07:3e:fc:03:0e:8f:4e:42:79:74:fd:ab:a0:5c:a5:53:03:
e5:3f:53:94:3f:d5:58:98:17:70:a7:77:87:8c:7a:c1:2d:aa:
f6:46:f2:86:f8:2f:59:0a:95:b5:60:f9:ec:bd:a4:5d:5e:b7:
d0:07:ec:c0:dc:92:68:d4:db:fc:28:fb:b9:de:9e:41:a9:ba:
c4:f6:21:e7:a4:e1:45:7b:7f:5b:2b:6c:32:91:3c:c3:be:41:
61:d9:85:36:53:de:3d:a7:10:bb:ff:66:0c:39:55:c0:f7:e6:
71:82:82:49:47:ed:5b:14:cb:3d:b3:b3:d0:07:a9:7c:18:6d:
ef:61:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:27:42 2025 by rpki-client