Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565830AC47211EFB09B654F762E951A.roa
File: 8565830AC47211EFB09B654F762E951A.roa (raw, json)
Hash identifier: bxbc0Gt1it6KvsQ5hw83E5g5wihZY1rJEoFkiRyiWps=
Subject key identifier: 68:DB:4B:C4:C1:7B:F0:44:AC:01:C0:5B:DB:1A:2F:99:28:F9:C2:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012AC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565830AC47211EFB09B654F762E951A.roa
Signing time: Fri 27 Dec 2024 16:49:21 +0000
ROA not before: Fri 27 Dec 2024 16:49:18 +0000
ROA not after: Sat 01 Feb 2025 16:49:18 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76488 (0x12ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 27 16:49:18 2024 GMT
Not After : Feb 1 16:49:18 2025 GMT
Subject: CN=676eda91-239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:a3:38:c8:85:3f:0c:91:74:dd:6d:65:ca:
8d:53:5c:65:e0:9a:84:ff:a0:ce:8f:1a:54:33:87:
16:29:58:3c:98:19:30:ba:a9:07:2b:a0:19:70:0c:
2a:82:8a:77:15:a6:ab:a0:e1:fa:ec:36:ca:a8:1c:
62:3d:63:b1:0c:34:3d:5f:b1:c6:78:4f:d6:2b:51:
d4:1e:5c:59:13:4c:e3:8b:ae:6c:29:81:5d:38:8b:
dd:e6:38:9e:96:8f:8c:86:2f:33:2f:3b:c8:7d:de:
8f:69:81:95:45:b8:14:16:0e:1a:a5:79:9b:f4:1b:
dc:43:69:a0:fa:74:65:9a:0d:85:e3:ec:32:62:de:
a7:67:fe:3a:03:4f:49:2b:49:d7:6e:70:38:71:ce:
98:b7:bd:8a:c6:77:66:ec:48:82:df:3d:a5:da:43:
9d:14:78:16:28:15:84:83:66:ce:a9:6d:3d:7e:cd:
d4:2e:0c:65:73:0d:98:c5:43:c2:38:92:4b:25:2d:
e0:b1:57:50:4e:64:d5:1c:24:b0:7d:8d:d0:9a:39:
88:0a:29:4b:b5:f4:56:47:78:d1:79:24:69:80:15:
c9:49:04:22:8d:23:e0:9c:93:8f:a8:c5:ef:31:c4:
91:0f:18:a8:de:73:f0:5d:94:0a:c3:e2:16:a3:c1:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:4B:C4:C1:7B:F0:44:AC:01:C0:5B:DB:1A:2F:99:28:F9:C2:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565830AC47211EFB09B654F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:77:1a:37:21:1b:1a:05:99:0a:39:f9:b6:09:ad:26:12:34:
42:cd:88:38:4f:b4:49:f0:3e:83:c1:56:67:c2:5c:77:01:cb:
22:9a:0e:90:ae:83:5b:35:3a:b4:d1:48:db:f2:8e:93:e0:ea:
79:dc:6b:cc:be:32:03:af:0a:7e:e6:7e:d4:82:a8:d4:a5:6d:
e8:4a:1b:7a:83:c7:cc:2a:b3:3e:cc:bd:b1:91:29:5b:d4:df:
9c:22:c7:c6:05:25:1d:72:a5:76:c3:44:d0:74:e1:39:31:6f:
53:52:33:c8:98:50:17:3d:ae:ee:92:00:e3:3c:09:91:ad:8f:
75:ab:e8:be:e6:2c:23:8e:7e:aa:35:e1:27:1d:86:4d:b9:46:
5a:da:ea:19:68:c3:74:6d:dc:a7:92:9b:70:0b:93:8b:93:9e:
5b:b4:85:49:24:2a:ee:1c:35:2f:17:be:59:7c:6e:76:ad:a7:
6b:ea:08:e9:cf:b0:25:c1:0b:79:68:76:86:df:96:a0:4e:2b:
2d:92:ef:0f:97:02:2e:63:eb:cf:51:aa:93:7f:59:26:39:21:
b1:41:c6:aa:3e:24:10:aa:c4:a5:15:56:19:d6:51:ce:75:fc:
0f:a7:9f:1a:d2:d8:81:57:e2:c2:f1:0a:76:b9:77:df:f1:fa:
87:db:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:24 2025 by rpki-client