Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38AAFEAAA4111EF924AC2AF762E951A.roa
File: A38AAFEAAA4111EF924AC2AF762E951A.roa (raw, json)
Hash identifier: L5TnT8kx35HzA4aQH8U0BETCwNHBPsMPG8mLV8UmoFo=
Subject key identifier: 30:42:BD:F3:EB:A9:FC:26:4D:03:70:F5:02:F2:F8:5B:E6:ED:C8:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011237
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38AAFEAAA4111EF924AC2AF762E951A.roa
Signing time: Sun 24 Nov 2024 08:53:56 +0000
ROA not before: Sun 24 Nov 2024 08:53:53 +0000
ROA not after: Tue 25 Feb 2025 08:53:53 +0000
asID: 213323
IP address blocks: 154.197.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70199 (0x11237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 08:53:53 2024 GMT
Not After : Feb 25 08:53:53 2025 GMT
Subject: CN=6742e9a4-d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:08:96:99:f6:4e:a0:35:5d:24:51:0e:e2:
8a:9e:ac:f0:c6:f9:dc:32:0e:f5:3d:fd:1b:d4:51:
c0:4d:8d:0a:cf:0b:e0:d5:ed:8e:59:e7:b2:a4:df:
c3:1a:54:aa:90:cd:6e:3d:fd:3f:e8:4f:91:b8:c8:
1c:17:45:fc:d9:81:cd:01:c0:8e:e7:f0:fd:82:ba:
76:2a:a1:2f:63:e4:ad:78:01:38:c1:c5:19:17:b2:
f3:27:b4:3c:2d:8d:37:f7:71:9b:92:fb:af:52:99:
21:5c:96:bf:f4:ba:e2:58:ce:4a:e6:02:03:6c:53:
f2:25:fa:e4:a9:9e:65:3a:cd:cd:77:b3:0a:d5:31:
12:c0:49:27:f9:0b:b5:1e:21:4e:a2:e3:82:8b:67:
16:28:6d:74:f9:53:dc:79:48:24:54:32:a1:19:bc:
3e:ac:58:6a:28:4a:7e:92:f0:fe:71:6d:b1:25:fe:
17:ea:a0:60:6e:3c:34:d6:39:66:07:05:1c:92:cc:
6c:c6:96:88:c0:26:c5:3a:d3:fe:f2:3f:df:ea:6f:
33:77:88:c2:28:80:19:04:f1:75:eb:3a:04:b3:66:
9c:71:11:ec:71:ca:f2:e4:91:ef:89:d9:b2:c7:d2:
c8:5d:e1:82:cf:64:3b:67:dd:d4:8e:91:ce:27:20:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:BD:F3:EB:A9:FC:26:4D:03:70:F5:02:F2:F8:5B:E6:ED:C8:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38AAFEAAA4111EF924AC2AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.71.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b5:84:97:ef:26:2c:8c:fa:92:2b:86:e1:7c:e4:d1:be:28:
a6:32:8f:6f:20:b0:4f:b7:f5:91:32:c5:b5:e8:b3:19:ce:1c:
f1:bc:10:04:5d:9d:e8:5b:5f:48:74:2b:d9:96:e6:cf:ec:7c:
5c:9b:d8:8e:b0:c5:3d:22:fb:0a:e7:fe:28:d9:da:54:a2:eb:
ec:8c:13:ff:d6:54:0d:8e:7a:77:49:6b:9e:4b:71:bf:9a:ad:
f4:b3:f8:07:bc:93:34:eb:63:5f:e8:d4:d0:5f:a0:cd:f9:3a:
c6:ca:22:f3:b2:ea:cc:94:aa:c6:ad:ad:86:6d:b1:9b:0b:28:
c2:eb:07:73:ab:50:4b:83:3a:68:a5:cc:1c:38:9b:b7:97:80:
93:d9:b7:48:3a:9c:a6:46:44:c9:46:d7:27:1e:ec:e0:04:a2:
7c:07:ac:72:4a:66:e2:01:ba:54:9c:d1:a7:d8:08:41:0f:d7:
ef:e5:62:9d:89:18:c3:ac:6a:40:f6:77:5a:fe:c5:64:8c:12:
d8:9d:48:30:dd:b5:77:4f:58:64:78:fd:5d:26:8d:05:51:df:
2e:4e:93:89:f9:64:a3:01:3a:aa:23:6c:a5:e3:4a:9d:aa:04:
3a:e9:a8:d3:50:8e:a0:1f:25:74:f7:7b:9a:fa:1e:2f:39:f4:
03:28:18:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:16 2025 by rpki-client