Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036869BEC42511EFBB1E006B762E951A.roa
File: 036869BEC42511EFBB1E006B762E951A.roa (raw, json)
Hash identifier: O5onOPj3KhNrjfwsinE9rBqmELqjkh+LKxId/4kWmNs=
Subject key identifier: A0:14:D9:FF:A5:4E:9E:58:15:80:FA:78:87:00:76:13:57:E7:7F:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036869BEC42511EFBB1E006B762E951A.roa
Signing time: Fri 27 Dec 2024 07:34:32 +0000
ROA not before: Fri 27 Dec 2024 07:34:29 +0000
ROA not after: Sun 12 Dec 2027 07:34:29 +0000
asID: 17561
IP address blocks: 154.202.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76269 (0x129ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:34:29 2024 GMT
Not After : Dec 12 07:34:29 2027 GMT
Subject: CN=676e5888-44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:bd:6a:e5:6a:70:e3:5b:da:ca:18:fa:2d:
fb:02:37:c1:17:35:a2:f3:8e:0c:b7:cc:58:a4:58:
55:de:0c:66:93:33:2c:fb:86:bd:87:c1:aa:c3:c7:
de:fe:ab:85:03:d2:01:19:7d:7b:5f:a5:29:21:12:
12:05:ee:8b:03:b8:1f:e4:51:f7:85:71:53:78:46:
c8:eb:60:34:25:99:54:42:40:f0:ca:b0:5b:a0:92:
11:66:92:4a:e4:88:be:68:04:05:89:5b:81:27:2a:
e1:c5:27:5c:47:d7:92:97:7d:f3:e6:d2:b9:63:53:
b2:1d:66:e3:28:c9:1f:83:95:7a:1b:4b:eb:07:96:
98:c0:6c:49:ef:e9:aa:14:6f:57:c3:b4:d2:5b:ec:
1e:39:55:ad:ec:97:94:16:f8:ce:b0:9b:bf:76:87:
69:83:81:7b:36:e6:bb:70:47:32:a3:4b:6e:d2:46:
e5:ac:6d:f5:22:4d:0b:e2:95:92:56:d5:78:1c:02:
27:86:95:df:40:05:c3:69:04:0e:27:86:c0:26:72:
26:ea:55:4f:b0:b1:91:fe:3a:85:49:59:15:de:84:
9e:26:ac:c4:98:57:2a:3a:73:a6:b3:51:c2:e4:68:
8f:09:b8:76:e6:45:55:42:f4:98:e8:2d:c1:af:05:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:D9:FF:A5:4E:9E:58:15:80:FA:78:87:00:76:13:57:E7:7F:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/036869BEC42511EFBB1E006B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:51:8b:58:79:e9:0c:b6:d6:bb:2b:5f:ca:7b:f4:ec:42:b6:
0b:f5:10:6d:2e:46:38:64:64:61:e1:c8:4a:e5:f5:be:53:2c:
22:af:f2:ab:8b:a5:cd:7f:aa:df:91:d9:85:a9:81:0c:d4:b7:
2a:bf:6a:fd:09:bd:5c:31:b7:48:85:e1:31:96:5e:b6:9c:0e:
0e:ce:7e:85:ab:23:0d:39:4f:90:c2:49:6c:a8:6b:4b:6f:08:
7a:32:5e:52:72:4c:e2:91:5f:db:ca:dc:af:14:d7:e1:87:ef:
83:df:03:ed:02:53:05:db:b1:9f:8c:c9:d4:7d:a1:b9:1f:ab:
c1:b6:d5:7b:a2:84:42:84:d0:78:1c:50:99:a2:4b:8a:7c:e2:
9f:04:ab:fd:ee:40:03:f7:fd:f5:10:20:3b:56:b0:ba:13:6d:
99:a8:f0:d9:9b:22:87:d1:ae:ef:82:5e:43:70:4c:6f:ce:61:
0d:45:d5:e8:0a:30:31:6a:f8:53:98:6d:3c:d5:5f:72:59:6d:
46:6d:62:7d:f1:f7:72:54:3d:e9:5b:9e:eb:1e:a8:05:d7:aa:
90:cd:00:81:3c:96:d3:4b:e7:95:da:1f:9d:fe:bb:4d:86:9e:
23:7f:dd:f4:90:c3:a1:1e:82:63:35:5a:d7:c4:69:55:78:09:
9a:21:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:10 2025 by rpki-client