Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B60EE3EF48111EF8731658B762E951A.roa
File: 0B60EE3EF48111EF8731658B762E951A.roa (raw, json)
Hash identifier: mTzlJKoyVnTCoNhEdWxIZ6r/mXZnTyLWd9DdFvQiEko=
Subject key identifier: 86:A9:03:EA:D9:84:DD:A2:42:1F:57:68:74:D1:E6:8A:EA:2A:83:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B60EE3EF48111EF8731658B762E951A.roa
Signing time: Wed 26 Feb 2025 20:34:15 +0000
ROA not before: Wed 26 Feb 2025 20:34:11 +0000
ROA not after: Sat 19 Feb 2028 20:34:11 +0000
asID: 17561
IP address blocks: 154.221.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91633 (0x165f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:34:11 2025 GMT
Not After : Feb 19 20:34:11 2028 GMT
Subject: CN=67bf7ac7-89a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:6c:7b:86:8a:24:7c:06:d9:1a:5c:10:5f:
5b:43:36:8b:94:eb:e2:e0:f2:d1:42:9c:cd:e8:43:
54:af:35:66:8a:e6:a9:ed:d8:11:c8:fe:5c:7f:3d:
c5:5d:08:de:a4:26:fd:f3:91:b4:69:11:5b:93:03:
0d:26:53:3d:34:1e:07:d4:af:4f:aa:49:45:53:71:
a9:52:01:6c:b2:e5:3f:1b:a5:55:40:a6:d6:fd:8a:
8e:a7:fa:8e:50:6b:3a:06:3e:56:eb:65:d0:b7:d3:
12:c5:04:9c:82:34:d5:05:8b:94:f1:d0:9e:5c:9f:
c2:e6:67:76:60:d6:c0:a6:dd:9f:15:a9:be:02:87:
59:50:a4:6b:32:b4:1d:d9:04:c2:b2:dd:52:4d:21:
3c:4e:bb:ce:d5:35:52:ec:98:62:6e:49:e6:2d:ca:
a5:8e:0a:de:cf:c6:5f:ca:93:af:50:c7:97:2d:9d:
c0:11:d1:ec:bf:65:4c:25:86:0d:8f:6e:36:b9:5f:
3d:4c:54:2f:f3:fa:8f:f2:00:70:3f:07:aa:13:0e:
f0:31:61:7d:2a:2a:af:df:40:b3:5b:8c:ac:9e:20:
96:e8:a4:43:b2:fd:f2:f5:22:33:ce:79:d5:2e:8f:
7d:85:ba:26:e6:f7:94:85:4a:c4:7d:7d:71:10:9d:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:03:EA:D9:84:DD:A2:42:1F:57:68:74:D1:E6:8A:EA:2A:83:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B60EE3EF48111EF8731658B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:12:87:89:6e:a1:3d:53:21:ac:61:ef:1e:a6:f9:ae:35:a9:
f8:b1:77:96:45:f2:29:0f:b2:db:00:a5:67:09:13:70:2b:09:
3a:3e:7d:ba:dc:8c:a6:54:e9:e5:32:70:2e:63:83:a3:6f:50:
f7:13:58:7f:32:81:a5:85:bd:b3:8c:c7:66:27:eb:4c:c9:47:
1f:2f:bc:98:66:02:1b:58:7a:1c:e5:a2:4d:27:7c:52:51:2f:
79:8c:af:f7:c7:a9:70:13:31:48:27:a0:cb:d5:6d:41:ce:0d:
28:d1:59:3f:6f:e3:4d:e0:5e:21:47:fd:6d:8b:97:06:2e:ae:
ea:ac:bc:43:d4:83:11:e7:ab:bb:0e:47:22:48:47:b3:80:8a:
5e:2c:2e:07:d3:7a:33:53:52:da:b8:ed:36:1b:ee:de:0e:9d:
c7:31:a9:bf:73:a4:b7:88:91:ee:7c:3c:c5:88:7d:92:2d:ba:
33:50:43:46:3f:7d:7f:5b:21:dc:a9:a7:88:84:68:73:cb:1d:
3f:ab:6a:07:7d:f1:d9:57:fa:c5:37:7c:24:07:cb:97:a9:81:
03:c8:4b:b6:c4:06:0e:26:ce:af:40:47:4b:41:de:aa:33:bc:
18:a5:4f:65:7b:d5:c3:51:75:1d:50:a1:9b:ac:31:80:47:9d:
8d:80:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:27 2025 by rpki-client