Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643C3478BEA811EFA1F1C1A2762E951A.roa
File: 643C3478BEA811EFA1F1C1A2762E951A.roa (raw, json)
Hash identifier: aRcoH36MUvYPyQaajybtMQR9kd8zHMIYKHww8UQlD94=
Subject key identifier: 87:27:FD:0F:B0:BC:13:11:50:8F:81:F7:0B:B9:2D:55:AC:D8:3A:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643C3478BEA811EFA1F1C1A2762E951A.roa
Signing time: Fri 20 Dec 2024 07:59:52 +0000
ROA not before: Fri 20 Dec 2024 07:59:48 +0000
ROA not after: Thu 20 Mar 2025 07:59:48 +0000
asID: 328608
IP address blocks: 154.214.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72816 (0x11c70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:59:48 2024 GMT
Not After : Mar 20 07:59:48 2025 GMT
Subject: CN=676523f8-59eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0d:63:a0:73:b5:31:fb:94:e2:00:3d:1c:e0:
b9:a2:12:4e:cc:03:7c:ba:63:5d:a9:63:03:5d:09:
a9:4a:02:bd:36:bf:db:46:59:de:28:4a:e4:ab:6a:
db:09:2a:6e:89:18:ea:5e:3b:96:ee:86:41:47:30:
b6:30:55:cb:df:b7:13:78:3d:5b:90:a3:45:6f:56:
2b:8a:00:c0:ee:f1:69:a5:52:84:54:fe:4f:b1:68:
81:89:ee:f2:da:cc:15:17:50:17:e0:67:af:26:c4:
5a:93:66:1d:07:21:46:78:29:16:6e:d2:b7:43:17:
2e:17:f8:6a:64:43:4d:94:c8:23:7f:e3:fc:d5:9a:
fc:ee:85:7e:84:75:c7:0a:d6:d8:62:11:8d:4b:8f:
fc:79:9a:16:0c:52:f7:c8:7c:84:4c:d3:3c:9d:33:
40:c3:97:15:74:46:41:2c:24:fb:7f:b7:df:ae:56:
d8:50:0b:8d:de:13:c0:cc:b6:8c:0a:81:ba:98:d1:
27:28:b3:55:df:38:2c:b9:a2:2f:93:99:0c:31:ad:
69:12:cf:67:7a:6b:24:a2:f7:1d:73:9c:00:57:31:
73:9b:b4:69:32:5b:31:e2:b2:1d:57:6f:2b:fd:8c:
18:92:52:87:bd:54:ea:7b:bb:d0:94:da:0a:57:df:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:27:FD:0F:B0:BC:13:11:50:8F:81:F7:0B:B9:2D:55:AC:D8:3A:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643C3478BEA811EFA1F1C1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.210.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:e3:40:96:bd:79:72:4c:0a:4f:32:e0:99:7f:91:c6:39:d7:
02:45:4e:6b:7c:9d:0a:1b:68:36:d0:5d:9b:33:9e:fc:68:e6:
01:72:0a:2d:57:92:e9:ec:55:53:46:e8:70:46:14:bc:0c:9d:
2d:19:9e:c2:79:1f:80:d8:d3:3d:f1:d6:ed:33:7b:c1:13:54:
5f:b6:28:e1:9a:de:c8:d4:a1:e3:5f:b9:23:71:72:4f:9e:a4:
1a:66:7f:de:9e:ec:b6:06:09:4d:68:b1:7a:56:2c:7c:23:09:
93:6b:e7:ac:98:66:09:35:99:e1:fc:4c:35:76:e9:56:18:99:
63:9f:fa:34:ff:1f:e0:6d:ef:79:5d:da:87:72:26:4d:b9:da:
c3:b2:17:07:7a:62:86:6a:45:57:f8:c7:1b:63:6a:47:72:4b:
78:94:04:ed:c8:9b:54:d5:11:9d:0d:51:49:95:6e:be:c0:e8:
84:f1:c7:5d:55:1a:f6:92:e8:30:6b:50:70:15:f8:f0:f5:86:
df:94:d3:33:4e:4c:71:4c:58:86:6b:28:30:99:91:34:cc:48:
a4:10:56:54:20:d8:a4:5e:8a:2b:46:3a:38:00:30:fb:dc:7e:
8d:08:71:cf:2a:36:0a:a2:40:89:02:63:40:88:e5:c2:b9:0c:
c8:f4:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:20:53 2025 by rpki-client