Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CCED70B3D011EF8D8E4469762E951A.roa
File: 87CCED70B3D011EF8D8E4469762E951A.roa (raw, json)
Hash identifier: NIzahbf+f0rZNxfhWmqKzmSIqt3Ar/B+WNh3O+Veau0=
Subject key identifier: 32:A3:0D:F6:88:36:6E:A9:4D:8F:BC:F1:E8:97:36:5B:11:1B:4F:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CCED70B3D011EF8D8E4469762E951A.roa
Signing time: Fri 06 Dec 2024 12:49:29 +0000
ROA not before: Fri 06 Dec 2024 12:49:25 +0000
ROA not after: Mon 10 Mar 2025 12:49:25 +0000
asID: 54600
IP address blocks: 154.199.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71894 (0x118d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:49:25 2024 GMT
Not After : Mar 10 12:49:25 2025 GMT
Subject: CN=6752f2d8-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:65:08:ce:9e:d1:4a:83:3d:06:60:e0:2c:
92:46:14:bf:50:53:a4:b1:09:df:9c:8a:2f:44:39:
2d:61:83:e0:f3:67:0d:08:b9:67:64:c3:67:a0:60:
74:86:bc:f8:9b:27:c1:3e:ab:f0:71:db:96:83:ef:
3f:fc:a9:79:67:b2:09:b2:41:77:56:f7:05:6d:51:
4d:cf:ca:51:7f:2b:4b:0e:f4:38:52:58:7c:73:60:
fb:6c:b5:fa:91:fd:2c:f7:40:2b:6f:20:f1:3f:7a:
e2:6a:da:b9:1a:af:27:b4:12:ca:8d:56:e9:6d:c3:
f6:d1:8a:12:60:a1:28:df:a7:d7:94:6f:9d:52:1c:
58:10:b5:95:02:10:21:3d:f1:a6:58:3a:dc:b3:66:
f9:85:53:1b:66:cc:c7:fd:08:c3:3b:0d:00:10:7d:
7e:2b:ac:99:c2:d8:49:6c:32:80:7e:12:12:59:2b:
07:e3:ff:d6:c7:b4:d9:7e:a6:49:81:51:26:3f:82:
76:0a:ca:3c:e6:11:76:81:4d:84:9a:ef:17:c7:80:
b7:4f:c9:d3:4f:dc:1a:c8:01:79:81:0c:c2:5d:af:
86:f8:d0:6a:90:6a:3d:14:07:e0:c4:71:f6:c7:03:
ae:bc:3b:4a:b0:32:fc:77:85:6a:bb:d6:9e:44:bd:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:0D:F6:88:36:6E:A9:4D:8F:BC:F1:E8:97:36:5B:11:1B:4F:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87CCED70B3D011EF8D8E4469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.224.0/19
Signature Algorithm: sha256WithRSAEncryption
50:3d:33:45:f5:37:7d:c3:9c:cc:1f:5d:45:d8:95:4c:fe:ab:
ed:1c:6a:94:3f:cf:cb:c5:95:ed:5a:54:df:0c:e5:03:24:01:
bb:06:2d:af:1c:4d:58:2c:3f:3a:ea:50:c4:a1:d5:86:e7:58:
26:0f:7d:dc:c4:b1:f7:0d:b4:88:e8:c6:3b:1e:b8:19:a8:f9:
55:ba:bb:58:81:bc:bd:ad:78:07:15:1a:07:9f:bf:3f:fe:8c:
b1:77:48:92:aa:14:ce:40:0f:86:b7:1c:97:6b:68:58:9f:57:
04:04:bf:91:6a:f3:86:e6:97:99:43:85:56:21:ff:08:01:0c:
0f:eb:0b:f6:22:fd:60:24:c8:3c:f1:82:02:67:e4:eb:45:77:
5e:d6:95:96:0c:3a:44:84:23:8d:67:2b:cf:a1:b5:18:c1:db:
eb:7e:7b:ee:8d:d0:c5:b6:3a:48:7b:ae:0b:21:c3:31:9a:ab:
ef:65:4c:6d:f8:88:05:59:f7:1e:46:94:6b:19:bb:57:fe:db:
ab:a6:9d:0f:e1:a0:af:db:6b:c6:8f:96:4f:f3:a3:61:9b:5d:
a4:26:42:1e:69:67:1e:da:a5:e9:b7:e3:92:4b:b7:88:3a:b3:
37:e9:61:8f:18:06:2a:3e:31:77:b5:d7:cf:5f:37:fe:e7:5b:
40:4b:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:29:12 2025 by rpki-client