Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279D9F86D8B411EF8210177C762E951A.roa
File: 279D9F86D8B411EF8210177C762E951A.roa (raw, json)
Hash identifier: EJHq5zSdPg0RglhkgM98aZtN5u4dwvc7Wp3gqf2U+Xo=
Subject key identifier: 4D:E0:E0:BC:C0:3A:BD:8D:EC:98:5A:95:E6:82:C4:CA:64:5A:8C:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279D9F86D8B411EF8210177C762E951A.roa
Signing time: Wed 22 Jan 2025 11:29:34 +0000
ROA not before: Wed 22 Jan 2025 11:29:30 +0000
ROA not after: Sat 08 Feb 2025 11:29:30 +0000
asID: 18229
IP address blocks: 154.210.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81666 (0x13f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:29:30 2025 GMT
Not After : Feb 8 11:29:30 2025 GMT
Subject: CN=6790d69e-b686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:10:42:77:fe:a2:20:5e:a6:9e:35:8d:82:
0c:5f:7a:38:a6:b6:9f:26:72:a6:21:f1:df:a8:a5:
53:dd:6d:3d:3c:10:7e:59:45:17:fe:f5:99:b9:66:
ce:af:51:0a:5c:7d:5b:36:6a:c5:77:7f:16:1d:ad:
d4:f4:2b:66:49:d8:fc:8e:d3:9e:49:fe:74:40:1d:
8b:0b:4d:66:f4:dd:a1:d1:6f:a7:8e:17:4b:66:c4:
d7:db:f9:74:4d:58:f2:49:f8:a2:ae:a6:3b:18:7c:
50:7a:db:80:43:4c:63:30:fc:c7:b1:ad:99:c6:05:
fc:a5:c8:d5:62:1a:b9:92:a9:35:95:1b:b5:65:c3:
b5:49:8b:d7:b8:4e:35:c5:bb:a8:39:e3:73:a2:76:
34:fe:41:b1:f9:43:70:0f:bb:6d:b8:d6:26:e8:45:
d5:80:e5:33:d7:33:02:05:3a:9f:f7:8b:22:01:d2:
1d:40:25:c3:81:77:cc:a1:c5:0e:cc:2d:75:90:7e:
7b:e1:01:4c:9a:a2:be:3f:4e:89:df:10:05:ec:52:
43:67:e2:e9:26:bb:37:c7:c8:23:a0:96:2e:55:dc:
56:dc:d1:8d:e8:1d:eb:6a:4e:94:a9:17:1e:12:81:
bb:c1:16:9b:ba:a2:d7:ab:8d:4e:6b:38:4b:96:53:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E0:E0:BC:C0:3A:BD:8D:EC:98:5A:95:E6:82:C4:CA:64:5A:8C:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279D9F86D8B411EF8210177C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ff:55:db:07:d5:7b:d6:55:66:57:44:02:3d:2c:d7:45:78:
1c:3d:ae:86:41:d9:c4:ef:c8:53:83:28:88:42:1d:8b:77:4c:
1c:7d:3e:ad:29:12:b1:92:11:24:a0:ce:3b:46:c0:3e:eb:ab:
29:a5:63:bc:ec:aa:2a:2e:17:47:b3:34:4c:9a:d2:13:2d:04:
42:b8:98:5d:ed:04:0e:94:8c:a5:7e:60:62:c4:8c:d4:32:e7:
c8:58:e1:00:23:7e:e7:e6:07:d9:a4:97:31:f7:c8:9f:fc:a0:
2e:d4:77:00:76:70:8f:d0:f9:36:ea:da:3d:5c:31:8b:53:06:
56:f7:bd:ec:25:f2:0c:b1:a9:dd:a3:d4:94:bc:2f:ce:c9:cc:
f4:25:aa:87:1c:08:bb:0c:9c:ca:80:bc:2b:fd:bc:8f:65:da:
ce:76:db:d6:59:a6:92:05:de:a8:42:00:b2:2e:bc:3d:f9:6a:
54:6d:51:3c:60:67:81:ae:2b:1e:f1:26:b5:5c:24:ed:d3:54:
39:35:86:b5:20:cc:c9:f9:f2:b4:5e:d1:f4:20:4c:eb:17:b2:
7d:f5:9b:d0:47:dd:04:b3:f0:21:a9:36:03:00:47:4c:04:1a:
ee:a0:1e:d3:62:7a:ba:c1:5e:f6:1b:82:65:b0:76:59:5e:98:
05:fc:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:29 2025 by rpki-client