Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706C8B0C62E11EF887D3748762E951A.roa
File: 2706C8B0C62E11EF887D3748762E951A.roa (raw, json)
Hash identifier: 5yf+hTrk9jylWUrsGpdFI3XMG2x0pU6LQy/AqbdnCEY=
Subject key identifier: C3:E0:A3:67:35:1E:2C:F7:82:80:4D:90:E4:A9:00:C1:47:43:44:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706C8B0C62E11EF887D3748762E951A.roa
Signing time: Sun 29 Dec 2024 21:45:00 +0000
ROA not before: Sun 29 Dec 2024 21:44:56 +0000
ROA not after: Sun 12 Dec 2027 21:44:56 +0000
asID: 17561
IP address blocks: 154.217.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77786 (0x12fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:44:56 2024 GMT
Not After : Dec 12 21:44:56 2027 GMT
Subject: CN=6771c2dc-155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:81:1e:2e:68:3a:1e:88:f9:b9:bd:32:f9:
95:21:9b:9b:fb:2b:c2:a5:93:40:c5:86:3c:0c:c5:
f4:81:57:db:2d:60:c8:a4:6c:0d:96:66:33:26:15:
a9:79:15:8e:8a:e2:fe:aa:4c:39:ef:3a:f6:5d:da:
a6:d3:cf:79:28:11:3b:d9:ec:c8:f0:a3:ca:a7:b7:
9f:8d:7b:79:68:4c:8e:8a:a9:a6:d1:17:70:6d:9b:
29:4c:cf:90:0f:47:ff:c1:df:72:6b:13:ae:e8:7d:
36:91:ed:4b:bd:3f:37:b1:17:55:cd:82:0b:bd:1e:
60:c6:96:e0:8d:52:35:c6:a0:ac:14:94:19:c3:98:
9f:8b:f1:88:38:bf:1e:6d:94:a9:4d:c2:3e:71:d0:
26:c1:4c:d1:cb:b6:74:99:2f:ce:69:4d:8c:7d:4c:
84:b9:b5:3b:d2:11:0a:4e:a4:8c:5c:4f:8d:47:34:
4b:c3:2f:e1:d6:86:a8:e2:e6:0f:2f:c2:8e:fa:b5:
51:15:48:a5:9d:ce:63:c2:09:9c:17:be:5a:ed:d6:
55:74:46:d7:79:7d:5d:07:5d:99:7b:3d:e8:60:c6:
a4:c7:d8:bd:3f:f3:ec:e1:86:6a:7c:7a:55:0d:18:
cf:4d:e1:18:8c:10:65:09:22:9e:2a:fe:86:b9:53:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:A3:67:35:1E:2C:F7:82:80:4D:90:E4:A9:00:C1:47:43:44:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706C8B0C62E11EF887D3748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:66:b3:9b:7c:69:2b:9a:a0:d4:e1:e4:6d:85:41:9a:b1:94:
bb:87:d3:b9:e8:03:68:f0:b8:0c:77:ee:6e:b4:06:1e:7f:f3:
97:0f:7f:6e:49:20:8c:14:a4:a2:b3:c9:a8:d7:d3:52:22:7f:
f5:d2:7a:65:38:7b:01:e4:f6:81:4f:50:be:b2:fb:46:70:08:
16:94:dd:bf:68:6a:2c:b6:ad:67:06:61:12:6e:df:42:21:b6:
c3:0a:cf:69:05:18:da:1c:b7:bd:54:69:34:d8:75:0b:88:13:
92:1e:91:a6:df:e5:c0:7d:4a:b0:97:3b:ff:8a:3a:64:3c:6f:
a1:8a:5c:f4:d7:e3:74:48:b8:c7:91:b6:df:8d:f3:d3:8d:7c:
65:10:79:d7:21:85:d9:8a:46:95:a6:bc:b6:c8:10:b6:e8:0e:
97:33:f8:02:7e:93:c6:05:4d:f7:79:cb:eb:23:1f:d3:ed:73:
1f:4a:5c:45:9d:e5:0b:71:96:fb:d2:98:43:d2:45:62:1e:eb:
f4:83:1a:f5:b8:b9:98:66:58:dd:d9:bb:4b:32:67:ac:c3:a2:
c0:db:c0:59:07:cc:d9:f8:35:90:c1:2f:e7:9f:3f:5c:30:00:
74:ec:b7:99:d9:af:72:80:1c:0a:ad:56:8d:39:de:f7:5f:80:
db:be:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:09 2025 by rpki-client