Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190958C25A11EFA8F4F174762E951A.roa
File: DB190958C25A11EFA8F4F174762E951A.roa (raw, json)
Hash identifier: AIMpbOvjeraA7NKPqQtiUiIpC8DHkBa/Or/VsLpsIMM=
Subject key identifier: BD:79:9D:93:FC:CF:E7:B5:06:9E:74:FE:6D:8A:6C:B2:63:EA:EF:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01236A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190958C25A11EFA8F4F174762E951A.roa
Signing time: Wed 25 Dec 2024 00:54:55 +0000
ROA not before: Wed 25 Dec 2024 00:00:51 +0000
ROA not after: Wed 10 Dec 2025 00:00:51 +0000
asID: 984
IP address blocks: 154.199.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74602 (0x1236a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:51 2024 GMT
Not After : Dec 10 00:00:51 2025 GMT
Subject: CN=676b57df-bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:d6:d2:92:18:19:a5:a2:a1:8a:02:b8:3a:
bd:56:0e:3e:d5:26:8a:7a:64:d6:5e:55:a0:e6:c1:
40:25:f4:4e:40:5b:c8:6a:b0:1a:2f:36:72:41:17:
4f:fe:10:2b:e7:a0:33:09:aa:f1:68:9f:22:09:d6:
90:83:b7:dd:c4:8e:9d:f5:e0:bd:3c:6d:9a:56:02:
20:ba:68:ed:2e:53:54:ac:29:3a:9c:e3:de:6f:82:
57:34:04:4d:5b:39:9b:3a:8a:05:bb:32:a2:c7:02:
9f:79:58:7d:a9:05:96:98:06:d3:fb:bf:8a:fa:fa:
58:93:07:0b:24:9c:0b:d3:13:fd:b0:fa:e6:8a:29:
3f:e1:cc:db:58:d7:8b:3e:10:e5:5a:7c:8b:77:08:
2e:84:2b:f9:29:15:bc:87:96:37:ff:43:67:3a:52:
04:ed:2a:d2:f1:32:a7:9f:cc:8b:bb:25:60:03:67:
8a:f7:4d:de:5d:99:87:3e:67:e7:df:ae:49:35:62:
52:cc:2d:0b:25:c9:0c:17:b5:95:e6:15:dd:49:83:
04:a4:cd:0d:0d:ba:b3:88:d2:02:08:09:41:1d:3b:
b7:84:19:68:61:48:9c:59:90:a5:96:96:f0:aa:c6:
f1:3b:86:b3:57:a6:9d:e1:e7:4d:1b:19:c0:44:8b:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:9D:93:FC:CF:E7:B5:06:9E:74:FE:6D:8A:6C:B2:63:EA:EF:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190958C25A11EFA8F4F174762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fc:49:13:78:65:0d:7c:a5:f9:a7:62:7e:d5:b8:ef:0f:c0:
93:72:84:3c:ee:a2:c5:09:c3:6a:b2:96:d2:6e:e2:d9:7c:4c:
50:23:c7:da:61:d9:42:d1:a3:d1:c7:41:71:d1:7d:78:3d:93:
83:15:ae:9a:fe:37:02:6e:2d:d9:c8:0b:08:96:79:42:3a:4f:
58:13:41:24:b6:1b:24:c5:0a:ab:ff:61:25:b5:24:7d:89:5b:
67:7b:6a:46:13:f3:3c:01:d3:af:4a:6a:e3:bd:17:b2:57:c2:
0a:a1:3e:46:12:ee:27:d4:bd:d5:ad:ac:e3:3c:27:93:e8:11:
74:eb:ea:25:81:67:6e:22:3d:0a:71:6e:57:47:f4:bf:d2:43:
1e:5b:c8:d1:66:92:12:c0:ed:2a:83:f0:17:c5:7e:e1:de:d5:
bd:2f:f2:5a:10:83:75:04:3e:23:f4:19:e4:3a:f9:ff:b1:57:
79:53:ee:0c:b9:a2:b4:4f:05:5c:8f:5c:83:c4:36:03:30:40:
39:ca:18:ae:78:db:3b:b9:93:6e:c1:e6:4a:a3:f2:24:ae:12:
40:07:40:fe:ee:f4:68:37:60:6e:6d:ce:8e:5d:f8:58:33:4e:
2b:f1:70:e4:cd:33:c4:17:6a:f3:59:fc:bc:79:80:7d:63:fc:
35:22:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:05 2025 by rpki-client