Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC844FEBED911EFB84F0455762E951A.roa
File: DDC844FEBED911EFB84F0455762E951A.roa (raw, json)
Hash identifier: 2kwU9ydDyb766QNUi2G2rPNXndSLaa1A9F+DpgzFbiU=
Subject key identifier: F4:47:E7:CB:97:FA:48:AE:96:74:13:50:B2:C6:E1:49:C8:4B:50:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC844FEBED911EFB84F0455762E951A.roa
Signing time: Fri 20 Dec 2024 13:54:01 +0000
ROA not before: Fri 20 Dec 2024 13:53:57 +0000
ROA not after: Sun 02 Feb 2025 13:53:57 +0000
asID: 48031
IP address blocks: 154.222.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72984 (0x11d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:53:57 2024 GMT
Not After : Feb 2 13:53:57 2025 GMT
Subject: CN=676576f9-7117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:dc:59:f5:8c:22:d2:77:37:42:43:4a:d9:
00:0a:71:1e:17:27:ed:49:9e:a0:5b:3f:c4:06:48:
c9:a5:4a:3b:61:0d:7b:d1:47:61:e2:3c:c4:88:8f:
33:ce:96:2b:04:2c:b9:9a:2e:46:84:2d:01:a9:2f:
39:72:2f:fa:a1:12:a8:8d:b5:4f:71:42:fb:00:58:
be:1b:9d:ea:3f:a0:a5:b7:df:1b:9e:2b:f6:76:b9:
e0:0a:cf:1d:55:a1:cc:e9:77:cc:d7:b3:fc:52:ef:
29:3b:c2:78:76:c0:14:0d:62:ba:81:c1:57:f4:bb:
93:8a:b7:4c:33:9d:29:0d:a1:0a:97:a5:6f:71:05:
d9:74:39:ae:a0:a8:3b:d9:79:75:4e:66:29:60:e1:
63:a0:4b:ed:9f:be:16:e5:de:c2:6c:16:b8:a7:7a:
49:91:a1:56:22:72:8a:53:34:d4:32:25:f4:d6:03:
3d:e0:fa:55:d0:e6:a5:c4:c4:b5:18:ad:c9:4f:2c:
0f:b3:02:df:39:a5:ac:27:c1:5c:32:b7:6e:8a:69:
6f:83:62:db:a0:48:e6:68:a1:84:0b:09:67:6d:83:
cd:c6:eb:d4:14:95:a6:b9:66:e6:86:0f:d7:f0:0c:
af:14:53:e0:a1:50:eb:85:83:25:33:78:e2:0a:3f:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:E7:CB:97:FA:48:AE:96:74:13:50:B2:C6:E1:49:C8:4B:50:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC844FEBED911EFB84F0455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:d4:12:05:b8:c3:9b:26:d6:20:50:46:10:05:e1:11:63:1c:
c8:7f:ab:22:6e:d4:ee:9a:c6:7a:33:e2:1a:34:f9:68:d4:85:
a2:f8:21:43:97:b1:8d:cd:d8:16:6d:f0:e1:59:11:89:b6:7f:
be:77:b0:3f:63:f6:4d:7d:7f:59:a5:ea:83:8f:b1:f8:c2:76:
d4:0f:7d:4a:5d:8d:c9:be:f0:e5:06:43:66:3c:37:53:6c:78:
60:5a:80:54:2e:be:e6:2f:07:ab:ee:3e:79:a2:1e:ea:be:b6:
d1:9d:d7:f7:74:63:0b:e6:53:3d:65:50:3a:8b:cf:38:b8:5e:
e8:b0:c2:ea:e0:fd:7f:88:a1:74:94:d0:95:bf:1e:a5:31:24:
31:66:46:c2:b7:45:e0:00:10:28:dc:7f:5e:6b:b3:77:cb:49:
90:07:19:8e:af:11:23:05:b5:b4:ba:06:91:a1:08:50:f3:59:
61:fd:0c:f8:52:e3:e8:98:61:dc:10:63:ff:61:c2:2a:1e:14:
c8:da:76:4a:5b:9e:ca:9c:c6:0e:2d:d2:09:af:a8:07:8b:38:
41:66:06:50:40:e2:19:d4:2d:d6:96:11:3c:ff:f0:60:45:a2:
90:7b:e5:69:65:47:ca:72:54:48:7e:91:63:aa:7a:bf:f0:56:
9a:69:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:16 2025 by rpki-client