Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278107CAC60A11EF97549E64762E951A.roa
File: 278107CAC60A11EF97549E64762E951A.roa (raw, json)
Hash identifier: GKzB98mBKVOf2FdQwuVxe2j/RyPVelrDHOFVOrTxMws=
Subject key identifier: 70:D9:8C:E3:DC:EF:72:41:EA:82:B3:21:78:76:E5:46:68:EC:48:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278107CAC60A11EF97549E64762E951A.roa
Signing time: Sun 29 Dec 2024 17:27:19 +0000
ROA not before: Sun 29 Dec 2024 17:27:15 +0000
ROA not after: Sun 12 Dec 2027 17:27:15 +0000
asID: 17561
IP address blocks: 154.217.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77484 (0x12eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:27:15 2024 GMT
Not After : Dec 12 17:27:15 2027 GMT
Subject: CN=67718677-80f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:30:9d:1d:f9:eb:d2:72:f3:4d:af:3b:3f:
60:38:13:05:dc:ca:f9:20:64:0b:3e:4e:bd:fe:54:
9b:d9:8e:17:29:35:b6:b7:4c:a2:0e:ea:85:3e:42:
13:0e:29:ba:fa:a2:c6:3f:46:5a:16:88:5d:b6:5b:
ee:ba:3e:9d:b1:32:ae:d1:68:d6:1f:2e:9d:5b:73:
e3:62:30:5b:9b:f8:26:9b:8e:d1:9c:16:61:d4:bd:
cf:99:55:f7:20:c4:fe:4e:95:53:9f:82:ff:37:03:
11:5e:5f:8e:af:0f:69:e1:1b:4d:04:05:32:50:f8:
8c:8a:b9:32:8b:f2:09:2a:93:59:86:d8:93:cc:8a:
81:7a:17:ac:0f:d8:87:5b:84:ff:2c:62:ce:5a:7b:
ab:fe:22:3d:ff:97:38:ef:ec:f5:e1:ac:06:e1:2f:
cc:8a:06:6a:15:f1:ce:8e:f4:b1:0b:b0:b3:bb:86:
d1:9a:8e:2c:fa:07:04:6d:f7:c5:b1:1a:4b:60:e7:
e0:ec:41:df:fb:a5:aa:2a:53:7c:55:44:3e:d9:b3:
ce:bd:6a:ed:f3:4a:a8:25:28:b4:b6:2b:d2:5e:fe:
23:13:e0:e8:03:0c:da:b2:2b:b5:7d:4e:e3:6b:e9:
77:63:ae:52:83:1b:56:22:97:c5:9a:45:90:44:3d:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:8C:E3:DC:EF:72:41:EA:82:B3:21:78:76:E5:46:68:EC:48:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278107CAC60A11EF97549E64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.57.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:3e:75:89:3e:53:50:b0:9e:01:28:c7:83:cb:7e:c3:58:
9f:1c:ac:9a:4a:3e:06:2d:89:39:98:a9:1d:d1:dd:f3:68:cb:
c5:d7:c3:ce:a9:60:06:71:20:ed:85:2a:60:dd:9a:ac:6f:29:
db:a4:e1:e6:28:98:c9:4c:bf:04:e3:44:5e:2e:31:84:33:59:
4a:1c:97:7b:0f:6b:71:e9:e1:79:48:94:9d:98:56:10:de:53:
85:36:e2:c3:22:a9:90:56:0f:4e:af:51:d9:2f:8b:94:fd:59:
95:86:c8:fd:a7:b4:e9:22:fa:af:e6:8b:3c:a6:5b:74:3f:7e:
ce:2f:b3:f1:f2:ce:35:0c:ca:ff:34:28:cc:e9:03:b1:5d:af:
70:ed:2e:9c:e9:56:e7:7c:9e:d0:83:09:02:d6:65:5d:7c:51:
c3:14:4d:00:08:02:ce:cc:6d:24:89:4b:ad:21:86:c4:7d:ca:
cd:63:11:30:80:d2:01:34:f8:63:a9:05:c1:06:f9:c4:d0:84:
ac:88:26:cb:b3:25:7a:60:2b:db:67:7a:d2:09:d1:e0:6a:38:
44:31:b0:b9:f3:ad:6e:36:a5:81:a1:0e:83:8d:cc:10:ae:6c:
40:7e:23:0c:ab:7e:e7:bf:73:2c:ca:ca:16:65:9e:5a:fe:2f:
be:cf:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:56 2025 by rpki-client