Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655BA34EBEB611EF84AC647A762E951A.roa
File: 655BA34EBEB611EF84AC647A762E951A.roa (raw, json)
Hash identifier: oqBCpILmD1hlo2v4a3Avqt61V/5Azkov9vmEdm5Vq9w=
Subject key identifier: 71:60:97:CC:BC:F0:A6:17:FC:30:36:10:DF:C2:1F:F7:86:B5:04:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655BA34EBEB611EF84AC647A762E951A.roa
Signing time: Fri 20 Dec 2024 09:40:07 +0000
ROA not before: Fri 20 Dec 2024 09:40:03 +0000
ROA not after: Sun 02 Feb 2025 09:40:03 +0000
asID: 202656
IP address blocks: 154.222.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72894 (0x11cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:40:03 2024 GMT
Not After : Feb 2 09:40:03 2025 GMT
Subject: CN=67653b76-4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:87:ac:4d:26:ad:91:49:5e:15:a3:90:f0:
b6:62:a0:a2:b4:1d:fc:ff:2a:e7:b5:4d:55:ef:13:
73:e8:58:51:a4:e3:3b:0a:41:2e:68:a7:48:fb:7d:
df:4b:3a:a7:4e:43:42:9d:5c:3c:0a:c7:be:21:af:
92:0a:b4:cb:61:99:dd:69:47:8c:76:4a:9e:3a:b9:
d7:fb:dd:db:4e:3d:1b:56:92:a8:13:0e:72:27:51:
3d:4d:ab:47:d1:15:09:af:b3:73:80:b4:30:aa:66:
1f:b9:34:95:e3:b2:04:b6:cf:04:87:11:67:f2:bf:
a9:01:01:7e:a6:5c:cc:b8:a8:ca:73:c6:d6:28:46:
5f:be:1f:d9:09:79:6d:af:83:a6:ab:dd:12:fe:9b:
73:86:6f:c1:72:b1:b7:b1:2f:67:dd:f8:58:07:a9:
1a:a6:dd:3f:fc:86:a5:a7:f4:70:fd:36:6f:d0:e4:
81:f1:d5:9c:aa:f5:d2:bd:15:08:08:63:b4:69:19:
9f:62:5f:eb:41:1e:24:e3:ae:9f:50:5f:d5:a6:2c:
41:ed:91:83:64:00:55:4f:bc:10:a3:88:54:24:d3:
6c:90:56:7f:d3:8b:50:63:06:e0:e4:21:8c:d6:55:
92:2a:fd:06:27:04:4e:8c:db:41:25:b1:04:a8:68:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:97:CC:BC:F0:A6:17:FC:30:36:10:DF:C2:1F:F7:86:B5:04:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/655BA34EBEB611EF84AC647A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.12.0/22
Signature Algorithm: sha256WithRSAEncryption
52:c8:f5:f9:02:da:cd:66:c3:c8:af:b0:e7:78:a1:ae:1b:50:
74:7e:a1:5f:7a:b0:cf:1d:f3:83:91:0c:29:75:f3:8b:6f:36:
30:14:b5:75:38:ad:f7:6f:90:da:22:75:91:56:cc:cd:80:93:
9d:56:de:7b:be:38:c4:3c:11:66:d5:da:76:ec:6c:eb:94:a5:
91:c7:d6:69:01:66:6c:cc:93:5f:f0:a0:69:ad:d2:8e:bd:39:
b5:9d:b9:c8:16:f0:44:d2:cc:82:06:14:88:70:a8:88:59:61:
a7:c6:09:92:ed:77:c8:96:e5:cd:38:ed:9d:bf:4b:1d:cb:8b:
30:2c:0d:36:94:91:58:01:69:be:2c:f3:35:25:b7:7a:09:ad:
92:72:ef:f1:88:19:f6:0c:c8:79:6c:7f:47:88:1b:e2:dc:0a:
76:1e:68:18:3d:5c:c9:03:df:ac:72:fe:a7:7b:55:58:43:1c:
c6:dc:ae:9f:34:ef:6e:1f:31:8a:ad:67:51:9e:b4:24:df:90:
b4:19:77:e2:26:83:54:69:2c:f8:cb:dc:d4:5b:29:91:44:99:
c2:ef:bc:8b:25:b1:14:20:99:e0:e8:79:b3:f1:93:df:67:9b:
d5:28:d1:db:81:ec:ae:22:a2:eb:b0:59:1c:0b:72:17:b2:ff:
50:ac:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:51 2025 by rpki-client