Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC2EE88BEB711EF980AE57E762E951A.roa
File: 4AC2EE88BEB711EF980AE57E762E951A.roa (raw, json)
Hash identifier: qDgcsDR6srr11KrE5oVTp/3YlxNbSG3uukNmgDnFT+c=
Subject key identifier: 58:CA:40:20:AE:CC:CD:98:3E:BE:41:EA:54:9C:B3:1B:F6:3F:7F:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC2EE88BEB711EF980AE57E762E951A.roa
Signing time: Fri 20 Dec 2024 09:46:31 +0000
ROA not before: Fri 20 Dec 2024 09:46:28 +0000
ROA not after: Sun 02 Feb 2025 09:46:28 +0000
asID: 202656
IP address blocks: 154.219.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72906 (0x11cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:46:28 2024 GMT
Not After : Feb 2 09:46:28 2025 GMT
Subject: CN=67653cf7-f628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:5e:a1:19:1c:ad:7b:90:0e:bc:ba:a1:c2:
93:09:0d:d6:18:40:4d:f0:39:f7:68:b4:52:3f:76:
08:b7:d8:88:8f:a1:e7:5f:ff:75:71:ac:1e:27:62:
e0:5c:b3:87:f9:9f:7f:6a:45:b2:9d:48:2c:a3:b0:
19:ac:bb:81:45:7b:d2:f0:0a:27:ed:d7:d1:a6:91:
f0:26:16:67:22:4b:52:4b:42:f8:d1:18:0a:52:c4:
dd:2f:1c:b5:52:2e:b9:43:11:3f:1c:da:1c:55:3b:
b4:09:80:b5:8a:68:03:2c:b4:cb:29:77:b0:c8:69:
40:1c:10:e3:a5:b2:79:37:01:87:b1:d7:67:62:f9:
7f:9d:e0:7c:94:fd:2f:36:6f:54:f1:4c:d2:0c:ef:
89:eb:c3:9b:6d:7d:77:d3:2b:ec:28:52:25:26:af:
7d:a6:e2:1d:4b:0a:80:de:67:98:2e:61:ce:e9:24:
91:9d:fb:aa:8d:c6:e5:9b:61:a0:b7:1e:1a:ac:f3:
f3:74:f9:07:c5:96:66:a1:99:10:2b:8c:76:1d:7c:
a5:47:fa:1b:70:3e:8d:10:58:bb:24:41:0d:95:2b:
f6:f1:b6:85:ac:e7:45:de:59:cb:6c:1c:60:c1:06:
e1:e9:05:da:61:38:72:c1:5d:c3:55:f3:ec:0b:72:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:40:20:AE:CC:CD:98:3E:BE:41:EA:54:9C:B3:1B:F6:3F:7F:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC2EE88BEB711EF980AE57E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/18
Signature Algorithm: sha256WithRSAEncryption
64:ed:09:9c:6b:5b:e0:25:90:c9:32:df:86:6b:c3:1a:35:21:
e1:d5:2f:50:94:33:80:8f:e8:7b:70:a7:27:40:d1:d0:fb:ba:
3e:1f:5f:ea:da:d6:90:fa:a7:77:65:37:33:6e:10:cd:5e:43:
7a:93:90:e2:46:e2:c4:16:c6:70:dc:00:82:02:5c:be:13:5a:
ca:c2:7d:4a:0d:8f:53:91:ba:c4:fb:5e:75:34:b4:6b:70:a9:
b3:02:f8:39:55:a5:40:3e:1e:85:d3:1b:01:9f:54:b1:63:5a:
2e:29:cd:e0:21:04:e9:58:89:19:66:2b:0b:45:b4:75:36:2e:
39:f1:1c:4d:4e:fb:6e:64:a8:d4:dc:50:a2:d0:95:8d:20:f2:
d0:17:02:9a:d3:7a:f2:90:84:d9:af:2c:24:27:a9:64:1a:aa:
25:4e:fb:01:00:13:a0:05:dc:f2:21:ab:5a:ea:ea:04:e9:d1:
25:b8:23:a7:70:d0:f1:c8:a3:77:ed:aa:bc:3a:d8:5e:85:6a:
14:8b:b9:eb:6d:de:ee:0b:a7:d2:ae:26:cf:e4:29:d2:63:48:
43:17:51:25:87:16:ff:67:03:91:ed:5d:47:b6:de:a0:6c:ac:
22:c2:96:d3:a9:5c:e1:a0:08:19:14:73:f3:f0:31:d8:a6:3f:
84:73:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:22 2025 by rpki-client