Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8FC58EC54711EFB755C590762E951A.roa
File: 1E8FC58EC54711EFB755C590762E951A.roa (raw, json)
Hash identifier: PyoZ/cvINAjiwZTnmsnS8vCgD1CSNX5mWS9HvckSS6U=
Subject key identifier: AD:09:D8:80:E6:27:A7:15:8B:F6:93:C4:76:41:C4:1F:09:59:0F:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8FC58EC54711EFB755C590762E951A.roa
Signing time: Sat 28 Dec 2024 18:11:12 +0000
ROA not before: Sat 28 Dec 2024 18:11:08 +0000
ROA not after: Sun 12 Dec 2027 18:11:08 +0000
asID: 17561
IP address blocks: 154.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76981 (0x12cb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:11:08 2024 GMT
Not After : Dec 12 18:11:08 2027 GMT
Subject: CN=67703f40-192b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:dc:4f:a3:93:ef:90:2a:20:ff:a3:23:8b:
6d:94:66:a6:e5:a1:50:08:af:28:e2:4a:50:ae:57:
5e:cc:df:fb:96:69:78:c3:8c:ce:b8:35:2e:29:d6:
da:dc:b7:73:94:46:38:5b:9b:36:e5:b1:5e:2e:f1:
44:85:a1:da:ca:90:fb:27:c4:3a:91:82:49:58:8e:
64:50:a1:32:d4:61:81:2a:bb:f4:9b:f8:3c:a4:01:
a8:3b:fa:b8:1e:bb:a4:c3:da:bf:fa:dd:e1:c8:33:
c4:c0:93:9c:58:5e:52:93:b5:08:71:af:75:e8:08:
5a:11:cd:6b:e2:0c:1c:e0:0b:c2:b0:cf:36:d1:29:
25:a7:3f:89:bf:c7:6b:ac:59:15:ce:0c:ce:cf:d1:
1c:03:a9:a8:40:dd:af:65:a4:12:3d:b2:da:40:6d:
ef:2a:98:7f:a1:95:c7:5d:9e:f3:e0:d7:e4:18:03:
f1:66:8f:2a:2f:8f:e4:51:7f:3b:bc:4c:a7:e9:47:
a4:b4:df:17:65:86:47:c3:67:7a:81:ed:9d:4d:f1:
dc:8d:f7:6e:da:4b:03:06:6a:75:84:95:25:7d:75:
a5:ff:a9:a4:0a:08:e0:f7:0d:a3:28:9b:8b:24:41:
94:c9:a9:81:55:e1:b2:a5:48:8a:dd:b0:ef:97:42:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:D8:80:E6:27:A7:15:8B:F6:93:C4:76:41:C4:1F:09:59:0F:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8FC58EC54711EFB755C590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9e:4b:93:19:17:04:8a:b0:38:e1:20:4e:74:06:5b:1b:4e:
23:38:74:6a:27:fa:57:7a:77:ab:5b:f6:77:14:d0:3d:15:ea:
46:0e:6d:90:eb:57:32:f1:f5:ff:57:be:6b:42:8d:23:ef:3d:
a9:5d:a6:ee:14:7a:45:55:50:cf:42:11:a6:31:ad:80:5b:1c:
ba:d6:72:c8:53:00:17:0a:85:d9:2a:d0:6a:07:e9:98:2c:38:
1b:34:36:89:a8:fb:ce:15:5c:1c:8e:4e:94:02:07:bd:d0:a0:
67:b9:ca:53:11:b1:a5:c9:85:6e:86:aa:26:3b:01:79:41:5b:
17:69:f7:49:4a:4c:88:fa:06:16:56:ba:df:e5:98:dc:4b:ce:
54:9d:4f:24:e3:ab:60:61:cf:49:b8:39:da:3b:4e:e6:90:4e:
47:29:1b:e2:c3:92:de:01:c9:31:7b:34:73:30:09:4a:bf:b6:
a7:88:d4:3e:12:e2:f5:78:e7:82:2a:74:52:c8:40:bf:c6:b8:
3f:fb:97:ae:0b:62:8a:92:9e:60:7b:0f:7d:e3:0b:58:c5:23:
33:50:6b:3c:c1:5a:2b:58:8b:a8:d6:af:d6:f2:9c:6d:4e:1a:
14:8b:d2:16:85:ac:42:42:cb:e2:a6:dc:ef:34:22:46:6d:bf:
d5:90:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:25 2025 by rpki-client