Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2976AB0ECDA611EF99B46F56762E951A.roa
File: 2976AB0ECDA611EF99B46F56762E951A.roa (raw, json)
Hash identifier: oQsfES96c7p5d8x+sypZ5cKiKaZsEJZwwLazEdaBZIc=
Subject key identifier: E0:65:AA:FA:53:08:5B:F4:1F:51:A6:E4:9B:7B:AA:A1:FB:72:50:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01369A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2976AB0ECDA611EF99B46F56762E951A.roa
Signing time: Wed 08 Jan 2025 09:51:42 +0000
ROA not before: Wed 08 Jan 2025 09:51:38 +0000
ROA not after: Tue 23 Dec 2025 09:51:38 +0000
asID: 984
IP address blocks: 154.89.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79514 (0x1369a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 09:51:38 2025 GMT
Not After : Dec 23 09:51:38 2025 GMT
Subject: CN=677e4aad-b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:95:6d:50:60:2c:ba:c7:52:08:c1:ad:71:
15:70:bb:56:e2:61:69:1c:d0:60:52:78:6d:5f:b0:
5a:57:1e:9c:94:f8:20:98:4c:1c:c7:36:af:3c:75:
55:ab:31:f2:de:13:8f:5d:ef:6e:e7:64:07:34:f3:
66:6e:d9:0c:9a:76:7a:e2:af:63:ed:02:c7:7a:b0:
25:fa:ce:85:5f:e6:70:34:00:9a:96:50:f8:40:f0:
57:f3:df:65:5d:a8:97:94:5d:c1:6f:c1:10:a4:fb:
d1:b2:9f:8e:2c:54:14:92:bc:34:55:ec:4c:88:89:
f4:d2:a4:fc:df:9d:c0:27:57:99:5f:43:30:c9:f1:
e8:34:a5:08:77:92:36:1e:04:dd:2b:9b:13:56:e8:
c2:e0:0e:6a:74:a3:30:5a:e2:c2:be:50:54:bd:96:
02:fb:24:9d:79:d4:91:f4:46:d3:de:47:db:9e:7d:
8b:fc:53:44:1e:61:84:a3:15:45:b1:af:05:75:54:
24:62:21:ee:0b:8e:fd:54:40:2b:50:13:73:f5:a8:
dd:9f:d4:d9:1c:2f:a3:24:2b:0c:44:88:b3:e8:0c:
b4:94:32:9c:32:92:32:8b:7b:75:d3:1b:39:f2:6a:
d2:c1:5c:7e:d7:33:03:24:5d:07:94:34:43:4c:de:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:AA:FA:53:08:5B:F4:1F:51:A6:E4:9B:7B:AA:A1:FB:72:50:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2976AB0ECDA611EF99B46F56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.17.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b8:b4:84:3b:00:80:fe:1b:63:a3:f4:80:fe:c7:ad:63:e9:
c2:d3:dd:f5:01:d1:c4:fe:a8:e8:6b:e6:34:98:23:15:a1:b1:
e8:22:7c:52:bc:81:0b:3b:7f:ee:61:6b:c1:0a:92:2b:19:ad:
6e:dd:0e:d7:56:8f:a5:43:cb:92:30:0f:5a:a0:24:e9:8c:8b:
ce:45:9c:ec:ad:96:53:d0:17:db:0f:7d:68:65:5b:f3:bd:53:
63:8a:3a:3b:72:ad:6b:5f:6d:0d:54:ef:0f:bb:1c:30:d8:70:
54:09:78:b1:eb:49:18:de:9d:79:f6:7b:79:25:2a:4e:15:47:
e0:16:15:97:99:64:7a:fe:d2:a2:ec:0f:ff:37:0b:50:42:59:
fe:0b:8a:6f:5e:d7:c6:7e:72:88:90:a4:80:b4:0d:2e:ca:6b:
02:26:08:dc:2b:2a:3b:5a:35:9e:a3:92:12:e8:34:c4:c5:49:
b0:d4:d9:e3:a9:a7:1a:23:de:7a:76:31:42:46:a2:df:bf:bf:
69:8d:2f:ae:c3:91:17:d9:69:d6:4d:0e:1a:50:4e:87:da:1f:
80:78:0f:66:e7:ac:28:1c:38:8e:78:86:4d:dd:b4:db:be:66:
cf:52:37:77:79:4d:05:cf:e1:cd:52:5e:87:e8:3c:1c:db:9a:
f7:d5:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:56:53 2025 by rpki-client