Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A744136C5F111EFA94BBA49762E951A.roa
File: 2A744136C5F111EFA94BBA49762E951A.roa (raw, json)
Hash identifier: 6+BPj34/a9IUENFvPv7oehUFjV1AhG+PfVP2yH3JHNM=
Subject key identifier: 41:CE:AD:77:D2:ED:79:6A:AB:D2:A0:BB:91:B9:D8:F3:D8:8B:4D:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A744136C5F111EFA94BBA49762E951A.roa
Signing time: Sun 29 Dec 2024 14:28:26 +0000
ROA not before: Sun 29 Dec 2024 14:28:22 +0000
ROA not after: Sun 12 Dec 2027 14:28:22 +0000
asID: 17561
IP address blocks: 154.211.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77272 (0x12dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:28:22 2024 GMT
Not After : Dec 12 14:28:22 2027 GMT
Subject: CN=67715c8a-9575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:32:38:f7:31:c7:e0:13:49:6a:c4:17:58:
c0:f6:63:db:29:c9:bb:94:5f:64:65:58:32:49:b9:
9e:3f:8e:50:0b:ff:44:c5:39:b2:9c:cb:64:c6:ac:
65:cd:e3:2a:52:12:ea:df:83:5e:bb:6d:0e:34:2d:
e8:23:04:a8:1f:3b:e3:da:94:50:7f:de:54:4b:18:
d0:d8:1b:b7:2b:0e:f9:f7:4b:b5:60:28:92:b8:3f:
7f:a1:9a:4e:b0:04:ec:e2:ae:76:54:77:1d:62:e7:
7e:be:51:96:03:80:56:89:1c:94:3e:81:3d:30:3b:
4e:0f:f1:22:36:1d:64:23:51:70:f0:8d:d1:cc:ae:
e3:ea:57:b5:25:cd:55:24:5b:91:03:db:6d:cf:7d:
f3:e3:40:10:9e:75:15:20:5e:a7:16:16:d2:c0:3e:
ca:af:1e:9b:47:01:4e:44:f3:bd:8c:bb:09:8d:21:
de:3a:d4:10:28:6f:5d:73:1c:03:e6:ac:ae:95:ea:
26:b2:20:ef:69:d3:e7:97:cd:71:5b:5f:59:81:b6:
5c:12:e4:1c:dd:e7:80:56:18:df:87:e2:27:60:00:
80:90:26:e6:07:6c:ec:3b:83:7f:b6:dc:a9:de:b5:
a0:bf:19:fc:60:fd:ef:17:b4:2a:8f:ba:4c:1d:cc:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:AD:77:D2:ED:79:6A:AB:D2:A0:BB:91:B9:D8:F3:D8:8B:4D:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A744136C5F111EFA94BBA49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.54.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:cd:8b:43:52:23:48:68:cc:3c:94:5a:96:71:a3:6f:ae:
bd:66:6f:e2:15:5a:3d:73:e4:2d:17:83:e7:74:6a:05:d4:dc:
74:60:00:53:04:3b:cb:62:5a:1f:a3:1b:30:a5:fc:cb:08:8c:
ec:81:54:74:98:7a:ce:e1:64:54:5c:01:3f:e5:51:77:ab:5f:
5c:7e:23:d6:d6:b1:e0:85:5b:60:b2:5e:61:42:2c:9b:5d:eb:
5b:4e:bf:aa:64:86:21:26:64:f7:58:c1:53:be:f4:59:c4:e4:
8c:f7:99:dc:d7:8e:3a:73:1f:79:3c:0f:7b:b6:1a:65:8c:c7:
fe:cf:1a:3f:44:76:67:2c:47:f7:aa:7d:69:35:d0:fc:74:41:
25:37:60:55:02:0f:19:70:65:38:ed:4c:89:9f:18:46:03:1c:
b1:a3:81:fd:4e:bb:e9:02:2c:fb:2d:11:d5:bf:80:59:12:9d:
c8:5d:56:c4:47:61:b9:40:1a:58:a6:09:79:cf:3a:ac:4e:d4:
00:3e:b6:e4:76:50:56:bc:a0:24:2b:bb:22:1a:bb:39:ee:8e:
d0:da:e8:38:e2:42:7c:be:7d:e1:87:c7:e3:bd:63:51:df:e1:
ff:9e:fb:7b:1d:b8:9e:72:79:de:87:c8:26:13:d2:28:df:bd:
b7:be:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:25 2025 by rpki-client