Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA07E4EBEA911EF8C787EA7762E951A.roa
File: 3EA07E4EBEA911EF8C787EA7762E951A.roa (raw, json)
Hash identifier: 9IXSTVKfdU7htyY7S4k9lXtjzIXKyH4Co2I8dSKpJhE=
Subject key identifier: 65:AB:77:E9:21:4C:BB:F7:81:A9:AC:57:DB:05:87:B6:2E:0E:13:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA07E4EBEA911EF8C787EA7762E951A.roa
Signing time: Fri 20 Dec 2024 08:05:58 +0000
ROA not before: Fri 20 Dec 2024 08:05:54 +0000
ROA not after: Thu 20 Mar 2025 08:05:54 +0000
asID: 328608
IP address blocks: 154.214.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72828 (0x11c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:05:54 2024 GMT
Not After : Mar 20 08:05:54 2025 GMT
Subject: CN=67652566-50ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:76:1d:36:65:e2:53:ca:1a:e8:24:69:b1:
04:e5:c9:4b:94:41:b2:5a:97:f6:5e:96:2f:8a:fd:
10:d7:bf:f5:72:10:f9:60:a5:b8:77:79:c2:52:58:
96:9f:e4:e3:1e:c9:4e:6d:47:c0:98:60:c3:83:8a:
48:ff:57:7e:92:b1:00:8e:7c:a0:be:06:7a:78:7b:
cb:64:34:7d:a9:d0:26:58:1d:dd:21:42:f7:e4:39:
a4:36:5d:86:4f:69:de:8b:64:28:39:dc:43:97:2d:
cf:fb:d9:3b:86:42:4c:28:70:bf:ea:4e:a0:1e:77:
04:35:77:c0:9b:f3:48:62:ad:0f:94:90:74:ee:0d:
a3:8c:a9:c0:57:30:ed:a2:e1:8c:be:7c:a3:58:2b:
11:be:42:23:08:03:2a:b0:4a:23:93:d4:be:ce:4e:
f3:95:7a:72:ea:1d:50:0a:b3:e7:d2:4f:7d:8b:2b:
f8:77:07:03:e2:45:e8:8a:13:e7:de:b2:7c:88:f5:
7f:e6:5c:2b:c9:cc:88:80:55:db:c3:79:68:f2:18:
db:fa:e2:11:f3:44:17:3d:66:14:bd:6b:c1:7e:46:
17:81:7a:ef:f4:88:be:70:e2:a9:2d:65:d9:57:5d:
aa:05:19:df:a9:6f:a7:b1:f4:6e:87:3a:5a:91:dc:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:77:E9:21:4C:BB:F7:81:A9:AC:57:DB:05:87:B6:2E:0E:13:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA07E4EBEA911EF8C787EA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.197.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:23:91:ec:d0:2b:c7:2c:c2:ea:c2:a2:35:96:40:e4:38:32:
d0:11:16:c0:f1:f0:b3:4d:db:7f:1a:eb:99:95:98:77:8c:f1:
d0:fa:19:c5:89:95:d1:87:a7:5a:9e:d6:4d:e1:28:94:a7:87:
81:5f:0b:1a:13:44:03:9f:2f:18:6a:59:ee:d4:34:33:9b:6b:
bf:90:d4:3a:ae:02:8c:0f:02:70:2a:11:2f:32:e7:1c:2a:6b:
5c:71:a9:86:26:c7:27:7a:65:56:36:cc:1d:d9:98:98:d3:10:
23:97:9e:58:6c:02:05:73:fc:db:8f:25:af:8b:32:da:db:a6:
8c:40:bd:f6:4e:a1:6a:dd:58:69:c2:ae:53:83:74:d1:b9:bc:
fb:4d:73:14:fb:fe:8f:98:69:c2:e4:39:14:71:30:fb:45:8f:
41:e6:87:45:56:6f:f4:8a:b7:3f:19:e7:13:5f:2e:51:68:2f:
89:b0:7f:95:23:99:b7:f7:3d:71:10:d1:4f:19:43:e3:a1:ce:
06:47:21:ad:fc:57:2d:f6:5e:0f:e0:d1:c3:e2:a1:ea:d5:84:
12:d3:56:22:15:db:89:fc:3e:ee:1a:c8:46:e9:17:62:cf:73:
20:7c:0f:fd:51:9e:28:50:bd:d8:0e:59:05:3f:93:ed:90:e7:
63:b2:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:05 2025 by rpki-client