Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/218B3AE2C53411EFBDD6C099762E951A.roa
File: 218B3AE2C53411EFBDD6C099762E951A.roa (raw, json)
Hash identifier: jiG0XStN4qcQjqkyU7qqJq/LkmK5Wc7OxlADTJVS8is=
Subject key identifier: 99:9A:A8:34:97:FC:49:AA:D0:80:80:35:4B:CF:2E:18:A8:1E:68:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/218B3AE2C53411EFBDD6C099762E951A.roa
Signing time: Sat 28 Dec 2024 15:55:16 +0000
ROA not before: Sat 28 Dec 2024 15:55:13 +0000
ROA not after: Sun 12 Dec 2027 15:55:13 +0000
asID: 17561
IP address blocks: 154.204.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76805 (0x12c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:55:13 2024 GMT
Not After : Dec 12 15:55:13 2027 GMT
Subject: CN=67701f64-352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:c4:47:20:e5:2e:e5:6a:b0:00:ee:66:3d:
da:77:ac:f0:84:ac:38:bb:07:37:67:e7:a4:ee:c1:
a4:79:43:04:c7:1a:54:07:70:3e:8a:2e:bb:71:bd:
2a:22:be:a7:6d:3f:f0:9e:9f:65:24:de:2c:1c:98:
93:95:36:a0:e4:64:71:14:dc:f3:f9:dc:1e:d2:45:
1a:c7:82:a3:95:15:34:97:de:38:8f:e2:20:fc:3b:
59:84:4b:18:ad:ec:b6:21:07:a2:27:95:a2:13:d0:
c3:6f:e2:96:f6:4a:87:a0:dc:78:ac:03:e8:ca:05:
31:6d:49:0b:d7:48:b0:08:38:93:31:7b:ef:39:1c:
ce:3e:02:3e:ef:85:8a:91:2d:2b:ca:7b:c3:ea:72:
42:4d:c5:83:9c:aa:96:a1:19:56:79:70:0b:08:27:
ce:81:a8:a9:9b:4a:29:05:fb:5e:7c:7b:7a:ef:40:
77:e6:63:37:8e:b1:5d:ca:cd:6a:2c:09:54:c8:d5:
1e:86:c0:d7:ec:00:40:8f:13:7d:a7:54:8a:21:f6:
e0:b6:22:f5:2e:e3:a6:dc:57:b6:57:8c:ae:a3:95:
0c:31:25:cd:80:68:9c:7d:cb:a0:36:db:e0:63:a9:
dc:e0:58:4a:7d:09:16:9a:fa:19:a5:92:57:a1:49:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:A8:34:97:FC:49:AA:D0:80:80:35:4B:CF:2E:18:A8:1E:68:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/218B3AE2C53411EFBDD6C099762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.107.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6e:ec:33:78:8a:64:7c:f0:1b:f6:fe:e8:4d:67:17:de:bc:
1f:21:87:9d:b2:ec:c1:e5:a4:31:52:a4:90:0a:f5:d0:41:cc:
14:56:c6:75:e9:8c:6b:78:21:48:d8:03:26:55:9a:2b:cc:62:
89:79:46:76:3c:7a:d9:f3:98:ec:df:66:9a:b1:e8:d5:e5:3c:
26:72:51:61:73:1b:1b:93:8b:10:e3:be:5f:3b:f2:12:4d:a1:
8f:a1:e1:25:1e:1f:2e:02:18:bf:7f:92:77:12:1b:da:a0:4c:
2a:02:97:f5:30:a6:10:17:35:44:be:68:bb:8e:70:14:18:7e:
0d:cb:a8:47:01:66:91:2d:1e:ca:e6:ed:05:4e:cc:57:cc:30:
d0:41:48:fd:e7:55:65:71:1a:5f:99:2d:6e:61:21:2c:d5:05:
15:44:a2:77:af:26:41:50:95:2c:72:d8:42:dd:67:11:d2:a3:
06:22:e2:53:72:be:39:f6:8a:97:01:3e:29:92:92:5c:ea:bc:
5e:34:53:e9:b3:4d:97:07:71:24:74:5d:a3:29:ba:59:8f:99:
7b:7b:37:b1:a0:7c:7b:76:81:ca:11:c0:e2:dd:7b:93:dd:27:
07:85:8b:e9:b9:11:7d:2b:bf:cf:ee:7a:ee:92:a7:4b:cb:39:
de:d7:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:53 2025 by rpki-client