Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020D3106C5E411EFAF43AD75762E951A.roa
File: 020D3106C5E411EFAF43AD75762E951A.roa (raw, json)
Hash identifier: yRQA3uOUbLDoQHyi5doXN2zOg5g9E7VF/0FxYbdOr+o=
Subject key identifier: 83:E1:86:10:16:73:B6:85:1C:BF:96:D9:BD:EF:1A:B5:CF:1D:39:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020D3106C5E411EFAF43AD75762E951A.roa
Signing time: Sun 29 Dec 2024 12:54:15 +0000
ROA not before: Sun 29 Dec 2024 12:54:11 +0000
ROA not after: Sun 12 Dec 2027 12:54:11 +0000
asID: 17561
IP address blocks: 154.210.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77160 (0x12d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:54:11 2024 GMT
Not After : Dec 12 12:54:11 2027 GMT
Subject: CN=67714677-7ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1e:2f:71:57:c9:59:58:19:fc:6e:28:97:d8:
87:53:33:8f:a8:ec:85:be:a7:07:fd:44:f5:f9:06:
b2:87:d7:97:10:3a:81:c2:08:63:18:ca:9e:85:cd:
20:54:c3:5e:83:21:ae:7a:ff:71:27:f1:cb:8c:e9:
a7:91:4f:0c:d0:6b:92:42:a5:10:b1:1c:22:57:1a:
a7:5f:ae:5e:f3:c0:70:13:1e:be:19:f4:15:b4:fd:
83:a8:af:39:89:09:46:b5:39:fc:5b:1c:ac:f6:02:
a3:63:09:8c:e6:12:96:ca:de:02:6f:e5:6c:e7:6f:
03:3b:3b:b9:58:5f:ea:5a:2c:f9:a6:2e:8e:58:f0:
38:67:8e:5b:6d:b2:14:68:56:27:0c:b7:d9:d3:6b:
94:c4:69:ac:10:b6:89:ad:14:49:df:b4:54:11:10:
08:78:77:26:ee:de:8d:c5:bb:77:77:45:83:ba:2a:
e6:8f:c7:8e:85:13:de:3e:e3:57:fb:3f:4f:5b:ce:
62:e8:6f:41:19:e6:74:31:7f:8a:1d:f6:73:ac:a1:
9c:d3:62:92:a7:53:a5:80:9d:9e:52:a5:40:95:f0:
1c:1b:62:d4:3d:f3:b6:3d:ef:94:73:f1:6b:2f:41:
68:c2:56:58:ae:91:45:ab:09:2a:26:92:7e:c8:52:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:86:10:16:73:B6:85:1C:BF:96:D9:BD:EF:1A:B5:CF:1D:39:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020D3106C5E411EFAF43AD75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.118.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c1:fd:ac:99:3f:5a:ed:0b:0b:75:18:b7:5c:37:4f:5f:16:
de:66:ef:93:5e:14:38:2a:a1:cc:58:cf:d9:d1:27:48:b9:14:
5f:8d:45:e8:72:3f:f0:ef:76:75:f4:56:fd:e0:ae:6d:e6:33:
70:da:02:a0:d5:d8:04:2b:60:0d:30:41:a6:d2:93:f7:7d:c9:
c3:dc:d3:4b:11:e9:52:94:1e:df:8d:40:e7:3c:20:f0:cb:71:
3f:3b:a5:dd:5a:fe:92:71:62:45:29:95:f6:18:fd:86:f9:f5:
39:58:73:91:6b:72:fd:02:49:09:6a:5c:9d:cf:4f:90:c0:89:
a9:8d:e7:81:d8:35:a5:16:82:28:f0:c6:8a:f2:a7:fd:8f:00:
6e:e5:0e:8b:85:8d:41:2c:60:45:c0:60:e0:5d:49:76:df:84:
75:fc:8c:42:99:90:fe:01:dd:cf:cd:e2:7a:46:11:1e:bb:cc:
f7:f5:f1:a7:65:ac:07:84:80:78:d8:7e:e4:87:52:91:a0:0e:
09:85:eb:ca:89:2b:a6:33:0e:00:92:22:54:ad:f8:05:5c:20:
d9:12:83:07:b5:88:93:fa:17:f4:8f:09:e4:d4:79:40:31:e6:
30:33:d1:a8:79:41:f7:92:16:93:09:79:49:d9:11:8c:36:55:
01:c5:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:02 2025 by rpki-client