Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB79740EC40E11EFB2DC5061762E951A.roa
File: DB79740EC40E11EFB2DC5061762E951A.roa (raw, json)
Hash identifier: bSrcN1jEypjmNsVSZqwfeyii7Z08VYrqocrswe+Fo9E=
Subject key identifier: DF:62:41:96:45:09:1C:DB:C1:91:30:74:12:D9:A0:90:36:F0:CB:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01293B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB79740EC40E11EFB2DC5061762E951A.roa
Signing time: Fri 27 Dec 2024 04:55:56 +0000
ROA not before: Fri 27 Dec 2024 04:55:52 +0000
ROA not after: Fri 12 Dec 2025 04:55:52 +0000
asID: 984
IP address blocks: 154.196.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76091 (0x1293b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:55:52 2024 GMT
Not After : Dec 12 04:55:52 2025 GMT
Subject: CN=676e335c-7a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:e8:c6:99:e7:40:f5:47:ff:17:9a:d3:9c:
ff:08:b2:0b:7c:64:b1:e8:c7:e4:f6:b1:05:20:bb:
24:f8:22:df:97:f1:7e:e7:c7:1d:71:c5:38:a6:5c:
07:13:a5:82:e2:85:8a:b4:ab:54:aa:53:66:80:04:
30:2c:c0:0f:06:7f:2f:cc:30:d8:39:37:bc:b6:c1:
17:85:b4:53:2e:0a:46:3f:5c:03:ca:16:f6:f0:e0:
bd:21:ed:2f:75:cc:5b:63:11:6b:1e:f6:ec:08:61:
1b:8a:93:d5:2a:aa:5b:4d:34:c3:41:be:58:86:ed:
49:93:42:fe:69:0a:1a:ad:11:50:e5:ab:0a:95:ee:
b0:0f:3e:8d:85:ca:49:5e:e1:62:5f:ba:28:33:2c:
64:43:4f:6d:20:74:00:cf:2c:66:8c:22:33:1a:7f:
95:8d:9a:e8:f6:36:22:33:8d:38:8f:2c:e2:b2:1c:
92:e8:b0:f2:88:2f:c6:69:a0:de:f3:a6:53:11:37:
29:b4:7a:23:9a:ef:f2:26:11:c2:f7:1c:d2:9b:35:
b7:a5:33:75:ef:35:24:06:07:35:d6:b9:1c:7b:11:
19:a2:38:39:23:0c:98:cb:1a:d3:1e:2d:d7:12:bc:
d3:68:49:7e:95:f8:90:0a:c0:2e:c3:26:7c:98:73:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:41:96:45:09:1C:DB:C1:91:30:74:12:D9:A0:90:36:F0:CB:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB79740EC40E11EFB2DC5061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.231.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f6:a2:6c:5b:27:d7:f7:8a:45:73:52:07:02:d8:41:9c:b5:
04:f3:d5:c1:22:0b:4a:8e:71:d9:6d:26:6b:44:f2:13:07:c2:
09:b0:0a:4d:42:1f:b0:6b:53:4e:0b:cc:27:ad:bd:45:fe:e5:
83:96:b0:e7:7a:2e:27:ff:ce:ec:ba:fb:7a:1c:63:27:7c:86:
25:5a:b9:31:9b:ae:be:e3:d3:b7:5a:30:3e:9e:af:d8:50:a7:
f1:72:49:be:56:9e:38:c5:d6:a2:7a:9e:e0:22:72:a3:cd:5b:
67:2f:03:91:7d:33:c1:f5:3a:2a:81:73:85:cb:b2:29:3f:61:
75:51:b9:81:78:3a:b1:2a:19:9c:8a:85:66:e1:45:76:11:02:
ac:d6:26:42:12:ba:f6:43:ba:3f:6a:3b:48:70:0d:de:91:69:
96:01:5e:d9:dd:c2:d1:93:9e:43:bc:5e:54:d9:64:21:3a:41:
46:ce:1a:1a:01:84:d2:8a:39:7a:e3:c9:a4:10:d2:5b:bf:2b:
4e:cd:1f:06:5f:b5:71:67:0e:43:89:11:c1:52:2c:02:bc:07:
98:d5:95:aa:cd:12:25:34:f2:a8:41:54:58:9d:93:f7:07:92:
85:04:36:a7:2a:24:0e:d7:f7:be:4c:a3:19:f5:48:d5:13:6b:
3f:ac:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:46 2025 by rpki-client