Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DFF33E0BEA311EF92236185762E951A.roa
File: 9DFF33E0BEA311EF92236185762E951A.roa (raw, json)
Hash identifier: Ch+vV92MQuEPD5xrOBRGDTBWvefaV6jKOsJqed4Q2Yc=
Subject key identifier: C8:CB:FB:61:68:29:E0:22:A3:B3:21:84:BA:0D:1F:4C:7D:3E:C7:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DFF33E0BEA311EF92236185762E951A.roa
Signing time: Fri 20 Dec 2024 07:25:41 +0000
ROA not before: Fri 20 Dec 2024 07:25:37 +0000
ROA not after: Thu 20 Mar 2025 07:25:37 +0000
asID: 47890
IP address blocks: 154.214.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72784 (0x11c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:25:37 2024 GMT
Not After : Mar 20 07:25:37 2025 GMT
Subject: CN=67651bf5-b3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:44:f1:a3:3d:ba:8f:96:cb:77:ae:0f:00:
01:da:72:d6:c3:02:8d:bb:9a:84:d2:3f:f0:65:d0:
c2:fe:51:51:eb:81:e7:98:06:d5:62:60:56:0f:d9:
be:7d:6f:fb:a8:14:17:e5:4c:46:ad:00:c2:4e:58:
0e:98:3d:7a:1e:94:a9:59:20:fe:07:ec:09:50:7d:
db:f8:b4:2c:39:a6:f2:41:68:bc:e2:df:f2:57:03:
80:54:5c:7b:0b:0a:fd:fe:80:2e:5b:f4:0d:0e:3c:
86:8d:f8:a2:6a:94:f3:40:d6:b4:c6:d4:bc:0d:a2:
58:98:b2:e3:f8:31:16:6f:13:68:53:c9:6d:3b:1a:
8b:51:d0:d0:29:2f:57:d8:0f:36:4c:1d:57:6a:5b:
1e:f9:32:5c:ef:0e:04:99:be:ef:66:88:6b:23:30:
05:b4:c2:c7:6a:2d:a8:66:39:4a:58:ad:86:5c:01:
bf:6f:d1:5b:3f:bd:8e:d9:73:51:82:b8:d7:8f:c1:
c6:a3:ef:05:37:61:48:88:03:8c:a1:fe:10:1d:ce:
a7:e8:c6:15:e2:b4:6d:bd:ce:f4:ab:89:ad:48:27:
94:51:21:ed:c4:67:6e:3e:2b:18:1a:d4:c4:31:49:
16:8e:a8:ea:23:75:64:ab:92:80:3c:9f:33:13:a1:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:FB:61:68:29:E0:22:A3:B3:21:84:BA:0D:1F:4C:7D:3E:C7:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DFF33E0BEA311EF92236185762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d0:0b:b3:d8:71:47:27:fd:e0:92:e1:a8:c2:fb:84:ee:8e:
d5:9d:9d:85:84:32:f6:bf:3d:6c:47:69:41:3c:61:bd:2a:84:
50:6b:76:5b:0c:03:0f:c8:8c:4e:e1:47:08:c5:98:c3:eb:84:
25:50:63:e2:d2:31:e2:75:f1:33:21:c0:83:f2:d4:1a:c5:36:
34:c0:f5:08:a1:58:9c:73:b3:fe:a3:7f:ab:2c:96:9f:52:17:
20:f2:ba:f6:42:8e:8d:45:17:df:3c:44:4b:79:74:34:ac:24:
56:3a:81:97:c5:7a:15:55:af:fe:d1:49:8d:92:51:96:4f:64:
1a:de:76:14:c3:10:92:6e:e4:6a:81:83:35:f6:88:41:3f:26:
48:59:0a:68:66:45:82:a0:e1:62:8c:b4:35:1c:1e:42:67:c9:
37:06:d6:e1:18:aa:41:92:19:fd:d1:39:10:86:80:57:2c:39:
c3:5c:47:0b:ea:80:b2:bf:f5:56:40:bc:10:cb:b6:29:ee:79:
1d:05:9a:2e:f7:f6:47:23:cd:15:45:ce:84:98:38:92:22:a0:
95:d5:8a:89:c1:bb:9a:10:1d:f2:8a:b0:82:63:d7:1c:ea:4d:
f3:b2:b9:77:01:da:ff:a6:49:6c:39:14:69:44:79:1b:46:e9:
d8:2d:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:47 2025 by rpki-client