Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE70C354B3D011EFA27D9E6B762E951A.roa
File: DE70C354B3D011EFA27D9E6B762E951A.roa (raw, json)
Hash identifier: lvv1v+ZI/KrAxRiLE+ILFEhPfnmEeAmSEmru4Pm8m1E=
Subject key identifier: EE:EA:26:96:86:9D:2A:2A:EB:59:2D:86:E9:E7:00:3B:B7:F6:EB:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE70C354B3D011EFA27D9E6B762E951A.roa
Signing time: Fri 06 Dec 2024 12:51:54 +0000
ROA not before: Fri 06 Dec 2024 12:51:50 +0000
ROA not after: Mon 10 Mar 2025 12:51:50 +0000
asID: 398478
IP address blocks: 154.199.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71898 (0x118da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:51:50 2024 GMT
Not After : Mar 10 12:51:50 2025 GMT
Subject: CN=6752f36a-596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:26:82:ff:ef:7f:be:58:0c:b8:9f:9b:64:
cb:e5:1e:ac:b4:c5:5c:32:ed:20:70:7a:54:06:25:
e2:b6:de:1f:f0:ac:6f:a8:b4:45:bf:fc:48:74:3e:
e3:5f:2e:67:e8:9b:d8:b5:5b:18:4e:b6:65:7e:0a:
1e:28:33:17:a4:08:6c:fe:97:99:58:24:62:39:10:
09:a6:fb:32:dd:e3:a8:e8:6b:4a:49:93:6c:32:00:
e6:0d:b9:af:7d:87:2f:ba:f6:da:24:99:60:0c:bb:
a1:9c:43:c8:68:e8:3e:8a:17:ec:58:1d:5f:21:df:
58:23:ac:b0:61:80:58:8a:1d:e9:fd:5b:22:bb:31:
c0:94:67:a2:30:3c:e1:b1:7b:cd:a6:b4:e4:d3:ac:
7e:b1:50:20:b3:a3:b9:0d:53:6b:3e:3c:de:f5:82:
48:99:a8:93:b5:e4:a3:6e:54:bc:55:a3:51:3b:15:
17:4c:43:0b:a6:8c:ac:e8:2a:f6:2a:e1:e1:25:fe:
ec:fd:36:f1:ed:97:e2:b1:fa:22:b1:21:9d:af:c1:
67:af:f1:c4:f9:a8:c4:77:db:97:71:7a:c3:9d:f8:
58:34:1d:24:fe:cd:d3:18:d9:c8:1b:44:a3:00:15:
b6:f5:fe:c1:51:d3:40:dc:91:21:cd:6f:b0:23:3c:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:26:96:86:9D:2A:2A:EB:59:2D:86:E9:E7:00:3B:B7:F6:EB:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE70C354B3D011EFA27D9E6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:a1:58:f3:3e:61:a8:5a:a3:65:88:9e:4b:4c:a7:90:dd:b1:
48:25:e3:35:6d:19:8f:32:17:45:cd:52:dd:9e:c1:9d:df:aa:
07:64:e7:7c:8d:31:ae:0e:85:49:61:76:42:3b:3f:6b:13:d2:
3d:e1:24:24:e4:3c:27:dd:9a:42:1d:b8:c3:79:64:e3:99:ab:
49:49:b2:c9:36:5c:88:93:c7:d6:a7:19:39:d1:b8:eb:ba:ac:
a5:e7:55:da:96:5b:28:77:d8:e9:ee:ff:b0:75:6e:1f:ad:cb:
09:e5:23:cf:68:eb:e1:14:47:3c:27:5d:cb:27:88:21:21:37:
26:c3:35:70:13:fb:35:7c:82:97:02:39:a0:e0:81:a1:04:9d:
48:13:02:9a:22:f6:b4:ac:29:49:54:80:79:cc:dc:a9:a2:48:
09:81:55:c3:61:8c:d1:5c:c1:0f:5c:2e:de:ba:8f:04:bc:6e:
d8:18:6a:81:5c:16:75:2a:22:84:1c:46:a6:1e:f7:89:75:4a:
7c:d6:73:14:8c:95:9d:d7:ec:74:60:b0:dc:3a:30:b3:d4:e7:
7f:97:44:4e:f0:94:6a:74:92:60:d4:ed:34:4b:b7:e4:3a:dc:
1a:58:11:9c:ef:ff:be:17:07:17:f3:5d:2f:26:fb:23:4c:08:
48:2d:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:35 2025 by rpki-client