Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219576A0C63911EF986CE88A762E951A.roa
File: 219576A0C63911EF986CE88A762E951A.roa (raw, json)
Hash identifier: XIW15+AGFRmWkmsN3eNv5NXhrgCyibmag6f+rTk5OYk=
Subject key identifier: CB:D9:D3:5E:B3:9E:D5:28:DB:34:84:A7:61:7B:27:DF:30:17:CC:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219576A0C63911EF986CE88A762E951A.roa
Signing time: Sun 29 Dec 2024 23:03:35 +0000
ROA not before: Sun 29 Dec 2024 23:03:31 +0000
ROA not after: Sun 12 Dec 2027 23:03:31 +0000
asID: 17561
IP address blocks: 154.217.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77877 (0x13035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:03:31 2024 GMT
Not After : Dec 12 23:03:31 2027 GMT
Subject: CN=6771d547-7db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:14:ee:79:a0:08:d7:ef:af:34:b8:2d:7f:
c3:98:fb:f5:09:83:c3:2d:d2:ae:8c:7d:c0:a3:36:
64:fa:f1:04:d4:b4:dd:c2:a7:0c:41:37:e9:6e:6f:
96:14:eb:5c:6f:7c:8b:f1:44:7e:27:a8:98:7e:39:
52:87:48:f8:93:95:51:7b:89:c9:4b:cc:75:23:6d:
cd:2e:7b:a4:79:f9:ac:08:e0:b3:9c:d5:27:d1:a1:
b3:e9:a9:3f:b3:25:bd:fe:9e:ce:74:e0:9f:e7:5e:
f9:1d:04:64:22:da:31:c7:16:e3:ff:ca:12:1a:05:
7b:80:43:cb:2b:ca:e2:be:20:a5:b3:f1:0d:e4:35:
03:7f:11:0b:9a:88:49:71:40:bc:10:b9:64:9b:52:
99:a2:6a:40:98:42:4d:0c:4b:dc:2c:fe:63:01:04:
04:ba:07:36:b6:4f:e0:52:50:f1:d2:57:31:ed:11:
19:2d:20:3b:0d:d6:40:b5:31:fa:26:85:d1:ae:f2:
09:3f:83:7e:98:d4:9e:91:4d:7f:7d:b5:93:91:c2:
31:76:db:f4:7f:e8:da:30:6e:9f:a3:99:76:fd:e9:
12:71:3a:22:24:4c:dd:cb:fa:fc:96:9b:8c:e6:ea:
44:0f:98:b1:1d:af:10:a4:07:93:c9:75:bd:d1:8b:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:D3:5E:B3:9E:D5:28:DB:34:84:A7:61:7B:27:DF:30:17:CC:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219576A0C63911EF986CE88A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.254.0/24
Signature Algorithm: sha256WithRSAEncryption
07:79:68:f7:e7:6f:80:bd:2a:d1:3d:21:81:25:5c:01:1b:7f:
8a:ce:51:8f:49:6b:af:93:c8:95:9c:09:d3:78:1e:37:fb:37:
76:37:65:f9:4a:17:f0:5e:54:f3:b6:34:ba:46:29:52:ca:50:
be:50:c6:e4:13:e5:74:bc:bf:b7:bc:63:38:92:82:d7:b9:08:
d9:24:02:52:2c:4a:53:7c:50:2d:f9:5d:8a:63:6e:bb:c4:69:
c1:59:16:8d:c6:5e:3e:1c:e5:8b:52:b8:0d:26:1b:67:3d:67:
e2:0f:47:b0:43:66:ce:b5:4a:28:3e:eb:06:86:66:b0:09:26:
1b:09:4b:e5:7b:4f:54:4d:75:13:d7:29:33:91:3a:51:ec:ee:
48:19:53:0b:a3:7c:34:7f:84:49:7a:f4:0e:f2:78:1a:d9:e8:
eb:90:b7:22:be:14:3f:b1:35:ba:c6:75:24:70:4f:9f:66:28:
2a:e1:a2:36:f4:40:5b:92:b8:bb:1e:7e:1e:7f:64:d0:36:72:
05:c4:8f:0a:e1:f3:fe:ef:e6:28:c4:b2:07:b5:f7:d1:7b:93:
8e:ea:c5:a4:0c:e9:8d:6c:c0:4b:e0:ad:b7:bf:7f:5a:1f:f6:
af:76:bf:77:be:8a:22:62:7f:fb:4c:d6:b5:92:9e:0f:f6:67:
13:f6:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:21 2025 by rpki-client