Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09574906C52B11EF97202462762E951A.roa
File: 09574906C52B11EF97202462762E951A.roa (raw, json)
Hash identifier: xcoyR/Fid1jwhyAnbUgqob2LOest5ENEVUT5yn2+ljE=
Subject key identifier: 40:2E:9A:70:80:FC:C1:25:35:FF:37:83:78:D5:D6:41:BB:08:5E:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09574906C52B11EF97202462762E951A.roa
Signing time: Sat 28 Dec 2024 14:50:10 +0000
ROA not before: Sat 28 Dec 2024 14:50:07 +0000
ROA not after: Sun 12 Dec 2027 14:50:07 +0000
asID: 17561
IP address blocks: 154.204.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76725 (0x12bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:50:07 2024 GMT
Not After : Dec 12 14:50:07 2027 GMT
Subject: CN=67701022-f430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:07:4c:3a:5b:32:37:7a:68:62:cb:e9:d9:
a7:05:9a:4f:c3:a9:39:bd:32:5e:ee:0c:ac:e9:d8:
cb:96:e9:a6:f9:eb:07:59:78:49:f6:6a:41:ef:df:
b2:74:49:d2:35:1c:e3:a8:ed:34:39:30:54:31:83:
9c:15:f1:36:24:97:e9:a5:26:16:02:3b:28:f6:e7:
c0:97:5f:6d:70:aa:e9:8f:39:ae:42:b1:00:44:b4:
dc:6d:86:c9:04:f5:d5:2a:37:de:88:16:d7:81:9b:
5f:aa:09:69:e5:af:59:21:94:eb:8a:a3:0d:76:a1:
fb:0a:36:57:1a:b1:11:a3:52:d5:1c:09:84:2e:f4:
92:07:ed:a3:82:06:44:08:fa:51:d4:2e:d8:f4:a3:
58:66:0f:12:7d:70:cf:54:75:15:23:a6:c9:23:3e:
e6:01:e3:c3:f4:e8:b4:c2:40:c2:17:39:59:4d:bd:
c7:2f:6e:26:50:93:52:f2:3c:24:34:a2:b1:1d:93:
9f:27:5c:75:d0:ee:2c:bd:c4:22:7a:ac:56:dd:44:
84:a6:17:24:c2:1c:3c:4a:ef:75:01:79:51:ef:ac:
cf:ab:db:e9:37:bb:b5:3b:46:c6:85:3f:0c:b0:ef:
2b:87:27:36:18:fa:82:ba:c0:91:e4:a7:e3:45:6a:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:9A:70:80:FC:C1:25:35:FF:37:83:78:D5:D6:41:BB:08:5E:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09574906C52B11EF97202462762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e7:44:7f:fe:c3:a1:a5:9b:fd:66:b3:dd:da:08:c5:94:ee:
80:d7:e8:0b:4e:da:42:58:04:8f:90:4e:b8:a5:c4:09:86:b6:
8e:10:22:66:59:67:44:e8:4e:d2:28:bb:e7:a8:be:22:f9:6a:
fa:ac:07:92:a5:6b:40:1a:39:87:9c:74:78:8c:f0:5e:bd:e6:
29:5c:d3:8c:bd:de:17:5e:6b:08:bc:d6:21:5c:14:b7:a8:26:
d1:6e:ff:8b:fc:2d:d0:82:c3:96:e1:b6:a8:ba:65:0c:9f:52:
6f:2f:cf:4b:20:05:b6:d4:3c:40:ab:5b:e4:14:8c:81:a6:1a:
6e:3e:0c:29:f8:41:13:5f:1f:bb:64:c7:74:00:91:17:d7:ec:
6f:29:b2:ee:bf:c4:af:8e:62:8c:c4:51:f5:37:a3:1a:5e:14:
89:f6:92:33:66:72:53:ba:16:94:87:e5:b7:13:64:ec:b0:df:
bc:e2:4a:14:10:a1:ca:9a:4e:7d:47:a6:7f:1c:0d:07:7a:58:
a6:c4:84:50:2c:d5:5b:d8:33:e6:c3:02:45:68:d6:df:65:75:
33:1d:87:f5:ee:09:fb:15:96:26:71:1c:08:d2:23:6c:28:9c:
33:2a:c2:6b:e0:f2:20:e7:e4:61:fb:e5:78:ec:bd:3f:a9:6c:
51:de:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:16:17 2025 by rpki-client