Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39890AB4B21211EF966C2B75762E951A.roa
File: 39890AB4B21211EF966C2B75762E951A.roa (raw, json)
Hash identifier: PmmbC0n6qx8oIS0HtR1++ADdoI6m1iSovdgpl8II6v4=
Subject key identifier: A5:42:18:7D:DB:D0:D2:EC:C4:EB:D8:EE:5C:6B:4C:7D:5F:07:D8:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39890AB4B21211EF966C2B75762E951A.roa
Signing time: Wed 04 Dec 2024 07:34:42 +0000
ROA not before: Wed 04 Dec 2024 07:34:38 +0000
ROA not after: Sat 01 Feb 2025 07:34:38 +0000
asID: 18229
IP address blocks: 154.210.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71606 (0x117b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:34:38 2024 GMT
Not After : Feb 1 07:34:38 2025 GMT
Subject: CN=67500611-3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:e4:c7:cf:25:9c:12:89:57:84:e1:dc:94:
53:13:a6:dd:16:e0:ff:2a:40:f5:bb:2d:c0:f7:45:
10:1c:e5:17:40:3b:40:71:25:b6:3f:93:b2:86:d3:
53:8d:ec:ee:bf:fa:52:56:c1:b1:ad:07:8f:aa:ae:
94:bd:66:16:a5:6f:c1:6a:fc:c9:90:ed:c2:d9:b8:
ca:c8:a4:e3:21:5c:1b:54:f7:db:6f:9a:a9:c6:52:
0b:b8:be:58:c8:d3:1d:63:b1:57:e6:c8:da:08:21:
da:18:bf:e8:8f:48:5e:40:bf:12:16:b1:bc:43:df:
86:1c:ac:23:d8:a1:05:d1:64:d7:54:ea:2a:bd:2e:
e7:79:7e:7e:ac:50:84:35:79:53:81:8f:82:1f:df:
aa:38:a3:f1:0c:7a:eb:3d:a2:aa:e3:b0:1c:67:32:
37:5b:33:77:c4:a3:0b:90:a0:7a:da:7a:2c:a3:c0:
4e:e6:b9:ca:7a:58:74:fe:9f:95:66:1b:08:27:1f:
1f:7b:c3:11:0a:6a:6e:94:78:7d:a2:77:7f:ce:32:
5d:a7:2f:fa:5a:b9:93:97:c4:b5:88:3f:d1:3f:f9:
6f:d0:3a:d7:2e:58:00:37:1f:10:8e:05:5c:4f:5a:
70:9f:b8:93:96:1c:e1:e8:aa:5c:4e:a5:66:77:d8:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:42:18:7D:DB:D0:D2:EC:C4:EB:D8:EE:5C:6B:4C:7D:5F:07:D8:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39890AB4B21211EF966C2B75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:1b:91:67:c7:30:ec:4c:3f:6e:f6:bc:df:02:69:35:23:c5:
33:f4:a9:15:47:ea:06:4c:3c:98:ca:f5:7c:68:82:fc:12:ea:
37:05:a1:22:f2:51:09:a4:59:07:8e:68:a7:04:78:34:fb:1f:
0c:46:14:9e:b5:9e:f4:30:e6:fb:1a:76:5f:ad:73:23:b4:99:
7c:03:97:19:4b:5e:a3:3d:17:10:6e:05:1f:f0:cb:0d:2b:5d:
38:35:94:0a:28:d8:91:74:84:7d:75:83:2b:29:0f:03:06:5c:
e8:83:10:2e:f6:b1:b4:51:0b:36:f0:2f:88:37:e5:af:69:74:
3e:2a:30:8b:3b:d5:56:3c:f2:91:e2:35:1b:ab:be:71:0a:6f:
6a:06:8d:32:af:f6:04:a3:89:d5:ff:53:2d:1d:a1:22:29:a5:
a4:a0:cb:08:1c:4f:0f:18:54:3d:2e:27:bc:d7:ed:2c:64:37:
82:5e:c5:13:5c:79:c7:1f:cb:6f:36:ea:74:09:03:9c:21:49:
39:23:00:96:73:9c:0e:99:47:9c:c9:10:11:fe:bc:af:0c:19:
5c:a1:9a:ba:37:98:54:00:60:9b:7c:9c:e3:ed:40:8c:3b:d7:
95:82:c9:08:a6:5e:92:7a:96:64:b4:73:9a:21:6c:72:ac:42:
49:ca:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:30 2025 by rpki-client