Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03EA23EAC54311EF9E3B1077762E951A.roa
File: 03EA23EAC54311EF9E3B1077762E951A.roa (raw, json)
Hash identifier: nckqLzsKvpG+EKthXNlzthLA4xbWJG6d1XldqRsr03A=
Subject key identifier: B0:8C:18:32:CC:77:A9:08:96:BE:0A:A3:D4:0A:0A:CB:CB:85:D3:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03EA23EAC54311EF9E3B1077762E951A.roa
Signing time: Sat 28 Dec 2024 17:41:49 +0000
ROA not before: Sat 28 Dec 2024 17:41:45 +0000
ROA not after: Sun 12 Dec 2027 17:41:45 +0000
asID: 17561
IP address blocks: 154.206.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76943 (0x12c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:41:45 2024 GMT
Not After : Dec 12 17:41:45 2027 GMT
Subject: CN=6770385d-53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:e1:f8:a3:9f:1f:c5:50:c1:f2:29:1f:76:
5f:b7:cc:0b:b3:13:43:bf:6a:aa:0a:38:29:83:3f:
d7:df:c9:3a:5d:5b:b0:ae:2e:a4:15:37:9c:c7:6b:
71:81:f2:49:0d:e4:1b:d5:a3:37:51:5c:9b:67:df:
cd:86:7c:af:ab:df:4e:fd:ae:09:bd:0f:28:00:d0:
e3:65:96:17:e7:08:88:ca:84:c0:a7:00:9a:86:c1:
c8:3b:7a:1c:1d:88:89:67:f7:fe:ff:c8:34:63:38:
0e:d8:89:cd:c4:d1:c6:45:b0:0d:bb:d5:db:ed:ee:
32:64:e9:a8:2c:17:b9:7b:b0:3a:93:b4:e3:2b:99:
c0:33:6a:d4:88:7c:ed:c9:73:34:ef:45:06:f8:25:
b3:cd:9f:40:73:6f:72:6b:8d:ac:a6:dc:e8:88:ef:
12:16:9c:80:a6:88:eb:fd:e4:c7:fb:00:57:b4:d7:
9a:7c:ec:98:d8:0a:aa:cf:0e:25:fe:97:f4:a1:45:
13:9f:db:97:0b:c6:e9:f5:ea:77:27:d6:c1:cc:e5:
21:d8:0d:71:48:5b:7e:17:85:51:67:38:74:f9:ae:
b2:08:bd:e4:2c:b3:ec:31:fc:80:62:82:13:d4:a9:
0c:ee:58:1e:28:06:04:d0:e0:f9:a3:45:06:0f:70:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:18:32:CC:77:A9:08:96:BE:0A:A3:D4:0A:0A:CB:CB:85:D3:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03EA23EAC54311EF9E3B1077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fc:9d:b1:f2:48:07:97:87:e9:25:3a:16:23:11:66:46:82:
47:0f:c9:cf:18:66:35:3a:4e:de:d2:8b:ff:c9:f2:0d:34:32:
b6:df:67:a6:de:b7:ae:4b:a4:29:4a:a5:f6:e3:0d:ec:1c:a8:
f0:7a:43:10:b8:c2:e2:d5:7a:50:3f:4e:bc:26:f4:c4:0e:2d:
9c:98:cf:82:bd:f8:ef:c3:77:d3:6d:7f:14:db:cf:85:ac:fe:
09:dd:7b:f1:bd:c2:7c:9a:56:48:10:25:42:04:49:ea:52:61:
d3:67:be:3a:d4:0e:52:98:12:65:c5:23:34:6b:dd:6c:0c:22:
a4:ff:06:d0:17:e2:e6:9b:c8:e1:dd:83:cb:b3:02:a9:fc:61:
0c:3e:f9:73:ac:5d:3a:70:98:5f:6a:96:a8:eb:d4:dc:03:b5:
9b:30:b5:64:90:51:8e:01:ea:43:cb:c3:d6:f6:c6:56:9f:4d:
65:11:03:f0:98:4e:12:99:01:f8:f9:1f:36:fc:de:03:98:0a:
91:e0:27:30:33:e5:49:81:db:74:e8:f9:c9:cf:31:bc:76:12:
cb:2d:8e:42:b4:83:01:40:ed:dc:22:a8:cd:3c:44:b0:62:91:
96:3b:a0:35:40:f4:df:d4:b4:e3:a9:68:52:40:0d:52:c5:b6:
3f:67:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client