Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D30A2CCC9C211EFAA8DCD9C762E951A.roa
File: 8D30A2CCC9C211EFAA8DCD9C762E951A.roa (raw, json)
Hash identifier: mKgagUaQ6Avv5wGe57m7uLkSwDOLaW2or/cvqh8n+xU=
Subject key identifier: 16:6C:ED:B6:D8:68:3B:39:17:34:CB:DE:95:F9:A1:9D:B5:CA:7C:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013490
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D30A2CCC9C211EFAA8DCD9C762E951A.roa
Signing time: Fri 03 Jan 2025 11:04:50 +0000
ROA not before: Fri 03 Jan 2025 11:04:47 +0000
ROA not after: Sat 08 Feb 2025 11:04:47 +0000
asID: 395793
IP address blocks: 154.196.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78992 (0x13490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:04:47 2025 GMT
Not After : Feb 8 11:04:47 2025 GMT
Subject: CN=6777c452-e2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:3e:5b:50:25:b7:50:84:45:f0:c7:ce:f6:
80:2e:e5:4d:14:36:3a:64:7d:cf:a8:1e:a1:c5:25:
a8:9b:57:0e:1a:ef:bc:19:cd:ec:91:2f:78:17:72:
da:01:2f:14:ba:c3:9d:59:3f:b4:47:06:fd:00:75:
d6:72:61:d9:e9:54:bd:e6:d0:22:9e:ca:6c:74:d4:
1c:00:59:da:d8:16:f9:29:25:96:b4:52:2c:85:89:
86:31:7a:c4:18:95:74:13:6e:13:88:c0:ce:c1:fd:
2b:c9:3d:6c:1f:a9:cb:e1:95:ca:3d:c8:70:e7:b5:
54:fe:1f:83:92:c7:6e:68:b8:be:45:e3:73:d1:60:
a6:28:87:8e:46:2a:8d:85:09:8a:6e:71:f1:0e:0c:
cd:50:aa:05:4e:2f:0c:65:6a:fa:94:5e:0d:d5:8a:
16:f7:7f:f5:0f:38:0e:1a:b0:d7:7c:8a:00:01:2d:
9a:d3:69:1d:25:37:7b:34:5a:7e:3c:2c:60:06:32:
a1:84:4a:a0:62:c1:46:5a:69:7e:2c:75:0b:9b:1e:
73:ca:55:bd:76:45:f8:c7:f1:77:f3:b5:e3:ca:f1:
c9:3a:aa:3b:63:82:78:50:a8:a1:67:61:51:a0:ff:
15:5d:4f:a5:74:25:95:2c:97:0f:06:5c:63:c8:bc:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:ED:B6:D8:68:3B:39:17:34:CB:DE:95:F9:A1:9D:B5:CA:7C:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D30A2CCC9C211EFAA8DCD9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f6:f7:03:b8:76:9d:7e:54:39:ea:54:40:e1:96:df:40:af:
49:fb:0d:6e:f6:72:17:e2:c1:2f:40:98:38:a6:1d:96:66:70:
a7:b8:96:6a:e4:77:5e:58:69:75:ff:6e:7e:04:10:09:80:3a:
65:53:4e:5d:59:2a:d5:62:e7:c6:5e:44:12:f5:33:0a:7d:ce:
b4:14:8c:6c:1c:f6:a7:d0:6b:41:57:cc:43:f1:71:02:8b:3f:
dd:68:3b:91:9a:ee:45:1c:63:0a:ff:c9:66:7d:b6:39:46:28:
29:02:0b:dd:b8:de:4c:cc:35:6b:6a:82:ab:48:02:44:1a:00:
49:59:fc:f0:21:af:ba:42:c3:4d:8e:c0:d4:9d:ed:ea:c6:88:
78:63:72:ec:bd:46:8b:cd:a8:8b:6e:3b:57:d8:84:95:24:69:
1a:a9:2a:94:6d:d6:03:90:95:cc:65:35:78:7a:c0:d5:80:0c:
eb:83:6f:63:db:e9:4f:2b:38:aa:c1:d2:13:09:2d:7f:af:c5:
31:da:95:54:ec:e5:22:19:60:ed:c0:a2:f0:26:d2:33:79:4b:
c1:2b:2c:f1:eb:1f:e7:d1:c6:e0:cb:68:17:7b:37:be:0b:70:
93:e5:55:09:8d:91:cf:61:6f:ff:fa:f6:c9:ed:00:b3:43:85:
87:dc:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:51 2025 by rpki-client