Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC01FEBEA711EF9625789A762E951A.roa
File: 1AFC01FEBEA711EF9625789A762E951A.roa (raw, json)
Hash identifier: pGCIKBMJZq1lu3PfQZR43Cg+22OKnLwSeUz/IfZ30HE=
Subject key identifier: 57:3C:83:87:DC:26:25:A7:46:DA:5F:BF:D8:A3:01:B4:C1:B4:52:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC01FEBEA711EF9625789A762E951A.roa
Signing time: Fri 20 Dec 2024 07:50:39 +0000
ROA not before: Fri 20 Dec 2024 07:50:36 +0000
ROA not after: Thu 20 Mar 2025 07:50:36 +0000
asID: 2914
IP address blocks: 154.214.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72798 (0x11c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:50:36 2024 GMT
Not After : Mar 20 07:50:36 2025 GMT
Subject: CN=676521cf-bbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:35:2f:d2:3f:31:c6:6e:90:e2:ef:e5:5c:
92:9b:10:cf:73:f3:3b:49:46:7e:f6:92:b4:5d:0e:
eb:19:cc:40:8a:e8:c5:88:2b:96:2b:fe:e6:09:15:
97:c9:1c:b0:3c:4c:d0:8e:c8:da:04:a1:84:ee:d5:
22:75:c8:43:87:fc:c8:7c:7c:b5:ad:7c:7d:49:d3:
ea:66:07:dd:30:9f:9f:1a:da:a2:3a:78:a4:c0:d5:
e6:14:c7:48:ad:e3:7b:98:15:d6:fb:7e:f6:68:d5:
78:f1:1f:61:ca:5f:24:38:72:2c:33:6f:96:e2:f1:
90:5c:5e:89:8a:bc:e5:8d:29:cd:a8:b5:29:ac:ad:
5e:95:c0:da:08:b7:92:45:02:5d:1e:79:a5:7d:9d:
d5:dc:05:47:d6:b8:9b:29:b9:8c:e2:ae:ae:60:94:
3b:30:40:5a:5a:d8:e8:f5:74:f0:62:a6:1b:68:c0:
eb:17:5e:2b:04:60:9a:d8:b6:fe:ac:b4:ee:da:6a:
8c:8e:f7:b4:01:fc:9a:80:d2:1f:2e:66:2f:b2:bd:
ba:81:95:9d:da:ba:dd:b6:ac:98:55:aa:76:a7:d3:
b8:61:4e:53:49:c1:69:6a:93:60:70:0c:89:21:88:
9c:29:4d:9b:47:d7:43:70:79:ac:22:e3:90:e1:27:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:83:87:DC:26:25:A7:46:DA:5F:BF:D8:A3:01:B4:C1:B4:52:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC01FEBEA711EF9625789A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ae:4e:38:d3:bd:93:27:2e:da:46:5b:2d:68:10:1e:39:8b:
ed:0f:6d:b7:3c:89:a1:36:2e:58:e6:b0:09:15:1f:71:1e:8a:
29:7a:4a:0f:d6:d9:0f:05:3c:c2:14:50:13:86:c4:c1:f3:e8:
e4:9e:4a:57:f0:55:de:a7:10:9e:dd:98:79:45:56:73:2e:dd:
01:8f:f7:b1:f3:a0:98:bc:a3:56:44:4f:2e:f1:72:77:fd:17:
7d:67:ef:51:86:34:6e:c9:c3:85:58:19:ca:55:d7:38:76:ca:
ce:f0:7d:7e:53:97:1e:7f:43:81:40:f0:ba:a3:c5:aa:cd:b0:
62:4f:83:8b:7c:ef:44:eb:06:e1:33:c9:45:40:37:43:01:3f:
95:3c:21:20:82:ad:e2:fa:78:10:8f:72:77:64:a8:af:d7:1a:
12:97:8c:2a:0b:bf:44:d0:f0:dd:9c:b3:a3:37:71:e0:e8:ec:
92:d3:ca:99:50:e4:6f:22:cb:e5:8a:0c:27:84:97:2f:f6:92:
6e:da:56:ca:e2:39:84:f4:51:85:52:24:66:1c:f0:50:cd:96:
bf:62:86:fc:b2:ac:4a:92:b7:b6:dc:68:71:f0:e1:c3:e1:a6:
68:a2:82:3e:1c:00:80:58:6a:ec:d4:02:aa:b1:25:37:2d:12:
02:df:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:32:06 2025 by rpki-client