Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EC48722C94111EFB4441A57762E951A.roa
File: 0EC48722C94111EFB4441A57762E951A.roa (raw, json)
Hash identifier: hla5e2Dmyx4uiL7ytrBQX1qAtvNnuqk5borj+VF+MDE=
Subject key identifier: 54:CC:31:D6:69:0D:B4:3B:35:6B:65:A4:ED:47:48:43:EC:FE:85:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013429
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EC48722C94111EFB4441A57762E951A.roa
Signing time: Thu 02 Jan 2025 19:37:53 +0000
ROA not before: Thu 02 Jan 2025 19:37:49 +0000
ROA not after: Mon 13 Dec 2027 19:37:49 +0000
asID: 17561
IP address blocks: 154.223.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78889 (0x13429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:37:49 2025 GMT
Not After : Dec 13 19:37:49 2027 GMT
Subject: CN=6776eb11-023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:d0:d8:f8:86:c9:ef:a3:67:cb:a9:8d:12:
ff:87:2c:a1:cc:33:3e:e2:9a:81:ef:ba:9f:a0:1e:
be:ba:93:7d:f5:5e:44:24:63:f9:73:a5:08:fb:81:
f8:02:c6:0c:1c:93:99:7b:ec:4e:22:b1:a0:e0:24:
85:18:c8:a1:bd:32:f5:eb:71:53:f6:48:04:74:ff:
07:15:65:02:f0:6a:d8:ae:f2:76:a8:17:d9:88:df:
6d:22:19:71:b0:7e:5f:46:af:e4:6c:ad:98:fe:a5:
9f:d8:68:88:92:d4:0f:83:73:fe:39:4f:f1:7e:c8:
e7:e8:d8:80:5c:9e:5c:a5:72:15:35:c8:16:c9:f1:
be:ac:e1:8a:67:bb:58:ad:33:e8:ff:ea:17:b3:52:
22:3e:2d:9d:7b:84:cf:bf:b9:0c:89:ee:67:5f:c0:
a7:19:8a:ef:9c:fe:f8:97:11:23:90:f6:7a:3f:1a:
c9:74:10:1a:40:3e:fd:2a:ae:ff:dc:6b:33:75:20:
5c:9c:a8:1c:ab:77:4a:ab:4b:b8:6b:7a:da:8f:2c:
db:58:0b:e6:b5:e4:81:5a:75:ee:58:db:99:24:d4:
81:c5:80:c3:6c:32:46:fb:4e:fb:81:3b:31:12:5e:
d5:0f:a2:04:e2:ba:12:e5:19:7f:a1:3b:9d:ca:34:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:31:D6:69:0D:B4:3B:35:6B:65:A4:ED:47:48:43:EC:FE:85:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EC48722C94111EFB4441A57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a9:01:04:b8:ce:d4:4a:a0:e4:2f:b4:30:a6:ad:21:bc:c4:
a4:64:80:73:7b:12:9f:ec:82:6d:5e:2c:91:cc:4b:cd:d1:d0:
eb:d5:04:6d:ae:4e:17:d6:50:99:66:ad:1c:4c:49:61:45:2d:
f5:3f:4f:9c:1e:69:d8:48:67:91:68:15:5e:bc:8c:2d:fb:01:
08:a3:82:f6:3e:fd:56:00:d5:f2:e8:68:0e:21:e2:b6:bf:16:
41:0f:d7:66:e5:68:88:4a:9b:61:0c:bd:39:4a:55:3e:22:2f:
fd:e6:3c:89:56:e6:59:0b:33:85:cc:41:49:53:fa:a9:6b:b9:
38:51:8d:d1:21:db:ce:c1:9d:47:30:95:40:17:e2:3b:4f:4e:
44:76:a5:6c:f2:d1:83:db:26:d9:96:5d:02:0f:a3:c6:4d:93:
3f:db:c9:b9:6a:11:92:38:e8:e2:45:2c:f4:7c:92:a9:46:91:
3e:95:1b:f7:88:c3:e5:12:ec:fd:36:10:e0:8c:d4:59:10:d4:
2e:dc:57:ff:99:16:ef:8f:f0:bc:53:77:df:1c:fd:b7:46:b0:
e8:21:69:11:66:bb:11:90:bc:48:6d:14:e4:43:55:99:66:e3:
8d:84:b7:42:89:80:42:36:66:8b:34:84:fd:74:fc:78:35:96:
96:f2:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:38 2025 by rpki-client