Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3576E9CCB3D011EFA43C5367762E951A.roa
File: 3576E9CCB3D011EFA43C5367762E951A.roa (raw, json)
Hash identifier: hIvZbZuOe+QsW2xFPHTIsYLcOrXKjBwX3NQdrnq3H7c=
Subject key identifier: 7F:11:4C:20:A7:95:2F:F1:29:79:FC:73:03:A3:2D:09:B8:40:7C:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3576E9CCB3D011EFA43C5367762E951A.roa
Signing time: Fri 06 Dec 2024 12:47:10 +0000
ROA not before: Fri 06 Dec 2024 12:47:06 +0000
ROA not after: Mon 10 Mar 2025 12:47:06 +0000
asID: 398478
IP address blocks: 154.199.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71890 (0x118d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:47:06 2024 GMT
Not After : Mar 10 12:47:06 2025 GMT
Subject: CN=6752f24e-dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:f2:9d:f6:b8:b0:4d:2d:5d:48:ce:ed:77:
07:45:4a:0d:cf:99:26:d9:70:e2:5d:31:3c:da:7c:
ee:90:60:89:03:e9:b1:7a:a5:79:c5:e6:99:56:bb:
2c:7f:f5:80:b0:2f:26:34:be:c6:df:b4:a1:6a:dd:
44:ae:27:0a:54:14:da:fe:19:a1:7e:e3:37:6c:5b:
35:04:78:6f:c8:fb:b6:4a:e0:a5:a8:da:57:47:2d:
62:cc:06:9a:29:f6:0f:4b:1f:64:94:4b:a5:6e:e4:
2f:93:7e:52:43:8f:2e:fc:95:fd:d5:97:20:c1:b7:
1f:53:e8:cb:76:15:54:06:67:53:3c:36:86:6d:cf:
44:d9:aa:44:ef:ad:b7:17:f4:9a:45:9a:21:47:2b:
c8:e6:c4:2e:c0:2d:cf:77:ab:0a:b6:d1:9f:71:48:
be:2a:15:29:eb:ea:92:8d:b1:45:7f:5e:11:ae:31:
36:d1:b3:ed:b0:c3:81:41:93:0c:4e:a9:2b:34:00:
ec:9c:00:2b:ae:89:1d:ba:81:6d:4d:98:4b:ad:1d:
28:bb:fe:4d:2a:7a:f6:bf:3c:e7:e2:30:52:39:92:
d6:47:93:53:a6:78:3e:24:34:12:d7:44:00:6b:75:
ca:ef:d8:dd:cb:ca:72:0b:e5:d8:f8:4c:54:80:de:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:4C:20:A7:95:2F:F1:29:79:FC:73:03:A3:2D:09:B8:40:7C:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3576E9CCB3D011EFA43C5367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:1b:99:54:8c:16:7d:08:ef:89:ae:fc:5a:a7:73:86:9c:00:
c8:04:1c:1d:62:89:e8:27:cd:c6:f1:14:b5:e0:52:85:c3:62:
b2:08:e1:1b:83:69:9c:4d:71:0b:87:8d:e2:80:97:75:91:b0:
7e:63:93:71:b6:67:9a:9e:ea:9b:07:12:c5:bb:56:b5:28:d6:
ec:35:51:14:c2:17:a0:98:4b:5f:bb:54:6e:a7:f5:d4:fd:9e:
b2:83:2f:03:4d:c6:ff:06:1e:16:e4:76:23:60:76:db:f7:c7:
8e:18:3f:05:cd:74:c9:ce:cf:7e:5b:c4:38:c1:e5:ce:64:5a:
49:3b:8c:fa:b4:8f:1f:ce:98:25:ca:d4:0f:75:04:80:5e:83:
09:5a:41:8f:c9:aa:0f:16:72:1e:1a:68:cb:a8:d9:21:fe:05:
25:bc:e9:0f:15:78:5d:f9:1d:64:ac:c7:27:78:f8:6e:43:7c:
7a:b8:20:e7:94:b1:0e:e8:16:e2:04:0b:10:10:33:09:9d:40:
8e:22:de:79:f8:ce:e4:5f:2a:86:9a:9a:a6:c9:fc:c1:90:ca:
0d:40:a1:92:e8:6f:8a:d8:e2:8b:17:99:cb:f0:6e:6f:56:19:
1f:9f:62:8b:a1:ef:2a:60:c3:f2:33:f0:da:e8:d5:96:43:be:
71:e7:22:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:38 2025 by rpki-client