Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BEFA16AC5E611EF86498F82762E951A.roa
File: 1BEFA16AC5E611EF86498F82762E951A.roa (raw, json)
Hash identifier: Iur5jiu8cRp3iJcxprmTyu+F8XjZQhGDR/CaScQBvrM=
Subject key identifier: 2A:3D:7E:25:83:D0:94:BF:2D:90:A8:B9:50:32:D7:0E:82:B6:7C:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BEFA16AC5E611EF86498F82762E951A.roa
Signing time: Sun 29 Dec 2024 13:09:17 +0000
ROA not before: Sun 29 Dec 2024 13:09:14 +0000
ROA not after: Fri 12 Dec 2025 13:09:14 +0000
asID: 984
IP address blocks: 154.210.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77178 (0x12d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:09:14 2024 GMT
Not After : Dec 12 13:09:14 2025 GMT
Subject: CN=677149fd-dc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:cd:4f:2f:6a:2b:66:8f:03:4b:de:a1:ab:
7c:19:df:19:e6:f6:58:ef:0b:33:bb:1e:2d:88:0e:
9d:12:fc:99:4e:46:07:46:ad:eb:ca:62:86:64:76:
2b:2e:ec:83:c9:da:4b:a4:31:39:2d:53:15:fe:69:
07:cb:0f:81:fa:7c:94:df:f6:4e:95:16:49:85:87:
35:a4:6e:ad:c4:09:c1:4a:93:37:77:c1:2d:2e:90:
8f:81:e5:fd:a1:35:8f:67:58:e4:db:6f:e6:42:37:
6c:62:77:8e:41:e5:a8:f7:88:f9:4b:91:f2:61:a8:
79:1b:a4:82:af:74:a8:2f:f1:6c:fb:f4:41:b2:3b:
1a:e6:02:b3:47:18:ae:97:c1:14:d2:8e:fe:89:d4:
e8:7d:0f:39:ba:ac:17:6e:e9:7f:e1:95:20:f0:8f:
cc:69:45:c2:3d:53:92:df:43:4c:4f:1a:a8:a6:28:
57:ab:a9:62:f3:29:1f:04:81:d7:20:f4:5e:ca:b4:
ae:4e:df:d2:ff:66:67:4c:6f:42:45:c4:f5:ee:96:
75:cd:84:d5:a0:cf:82:a8:58:53:06:d5:70:d9:4b:
a6:8f:15:f0:20:be:ef:5d:ff:aa:c3:cb:29:4f:57:
2e:2a:be:e1:ee:72:f2:06:55:8e:f0:f8:cf:49:76:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:7E:25:83:D0:94:BF:2D:90:A8:B9:50:32:D7:0E:82:B6:7C:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BEFA16AC5E611EF86498F82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e3:81:9f:11:34:1d:11:fc:ac:84:09:a1:df:85:fa:6c:5e:
77:9f:ff:65:5c:80:f6:80:ce:93:3e:5d:11:1f:71:11:ef:dc:
0e:d7:ca:b1:86:7b:3f:08:d1:cb:9b:8e:b0:f9:09:6f:12:30:
ce:0d:d4:52:49:92:e7:d0:c2:b0:0c:74:7e:46:35:5b:50:a2:
06:90:79:ef:81:dc:e3:4f:96:db:4f:e6:22:b7:af:1a:a7:e2:
fd:18:70:4b:f1:54:5e:36:ea:c1:20:24:d5:06:e9:54:48:0b:
af:0c:fd:e4:ba:1f:e2:28:05:9a:38:f9:33:59:70:0e:46:e7:
1e:10:ce:b8:8e:7e:e3:20:c4:ab:0c:7f:14:b6:f3:21:69:b6:
75:e9:8b:3e:02:0d:ae:03:49:7d:58:23:2b:6f:64:70:7c:40:
3c:c2:a3:e3:c5:3b:6b:19:85:f7:72:0b:64:e6:76:2e:72:88:
1a:ac:0b:49:ca:03:09:8e:6d:35:f6:99:33:e1:bb:d2:49:13:
e8:35:6e:ee:81:65:3b:21:e1:fe:c5:45:af:4d:5a:b3:e9:58:
2d:88:6e:0b:d7:1b:a5:1f:55:af:d0:c2:b8:36:1e:bc:a1:70:
8b:d5:9c:f2:c0:bf:2d:43:42:8a:cc:88:34:67:3a:a1:9f:43:
ca:e5:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:30 2025 by rpki-client