Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AF7F40C25E11EF8C89F78B762E951A.roa
File: 15AF7F40C25E11EF8C89F78B762E951A.roa (raw, json)
Hash identifier: W5OcF3eJbXjFI3DqH9zpfQQIYkSacqpoe7HYFB/VsnI=
Subject key identifier: E2:D2:A6:BA:7B:95:A0:A8:AE:AF:A4:56:5A:30:34:75:6E:3E:A7:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012390
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AF7F40C25E11EF8C89F78B762E951A.roa
Signing time: Wed 25 Dec 2024 01:18:02 +0000
ROA not before: Wed 25 Dec 2024 01:17:58 +0000
ROA not after: Wed 10 Dec 2025 01:17:58 +0000
asID: 984
IP address blocks: 154.199.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74640 (0x12390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:17:58 2024 GMT
Not After : Dec 10 01:17:58 2025 GMT
Subject: CN=676b5d4a-129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:21:3b:01:46:18:b2:66:5b:3a:32:ea:0f:
f9:61:20:a7:07:9b:9f:7a:b5:51:e1:f8:9d:f0:1c:
b0:0d:cd:e3:df:1c:4b:fb:58:45:ea:15:46:c7:6b:
08:ce:fa:24:58:26:c2:82:e7:2e:71:1f:7f:05:42:
e3:f6:d0:4b:41:71:bb:87:2e:e5:0a:0e:76:b2:fd:
1f:48:cb:68:8a:ea:56:e8:ec:1d:5b:75:04:1b:fa:
d2:02:f5:7b:fd:74:db:af:56:47:4b:1c:3b:e1:2b:
3e:2c:68:ef:93:f4:0b:6b:e7:e0:34:e1:ad:68:a5:
7a:0b:ad:b3:fb:f2:72:00:be:98:da:3a:b7:9b:4b:
cf:42:40:5b:31:82:7f:a8:4b:ec:9b:74:5f:03:db:
27:a9:5a:50:04:c4:90:3c:5f:d2:95:39:a8:25:e6:
f8:be:81:98:32:72:4d:ef:5e:3d:e2:01:f7:58:38:
38:d3:4f:86:66:c8:db:1f:bd:79:73:ec:c2:3b:8f:
d1:c1:2b:00:f2:c2:cb:96:75:35:05:81:ad:0c:4b:
de:7a:85:7a:ce:f5:2f:5a:af:e2:32:6d:a2:f7:5e:
66:f7:ef:a5:8b:b3:39:8f:d1:5e:ef:84:03:f1:ad:
bf:1b:ca:07:01:28:16:01:9c:85:b4:e0:c8:c5:0a:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:A6:BA:7B:95:A0:A8:AE:AF:A4:56:5A:30:34:75:6E:3E:A7:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AF7F40C25E11EF8C89F78B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.85.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:34:9e:38:56:5a:e7:8d:5a:b8:2a:d6:71:f4:05:e3:64:
a8:ed:b4:af:49:ea:06:a4:a1:2f:3c:91:51:1c:84:f2:5f:f8:
25:44:83:a1:40:18:e1:42:96:5a:65:d6:2c:82:91:a9:a1:d0:
0a:74:d8:cf:f4:4b:06:76:88:ce:1c:d0:fe:0f:bf:a2:ed:6a:
c9:a4:e7:40:68:3e:8f:fd:9f:bb:d7:9a:8b:3a:e1:06:0d:a4:
05:a6:7e:c8:07:ce:d5:30:3e:a6:0e:eb:90:66:be:13:4d:98:
a3:0a:57:24:8d:ea:87:77:22:a9:f0:f7:90:ba:5b:bf:02:c0:
5a:31:60:2b:59:e4:57:b3:b5:24:85:c9:18:2d:87:5d:8b:ca:
19:e2:4d:63:a5:68:67:e3:4f:d6:70:ac:90:e9:f0:73:fe:ee:
e5:72:97:3d:7e:e8:29:7d:0c:38:07:11:0f:04:dc:c7:8e:83:
fe:51:dd:6d:59:e3:0e:e7:fb:b5:16:25:7d:cc:0d:e5:1a:45:
3c:f6:c3:0d:68:2c:13:44:16:e4:27:35:e5:0e:3d:5e:65:63:
a7:bb:17:09:fb:d9:d0:82:5f:b3:3c:9d:ca:ae:c2:be:f0:7a:
06:be:cc:bb:b2:65:44:a2:d7:d8:cc:a5:c9:de:f7:43:61:17:
27:fb:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:30 2025 by rpki-client