Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCF7290C52D11EFA976006F762E951A.roa
File: 2BCF7290C52D11EFA976006F762E951A.roa (raw, json)
Hash identifier: wJ/DCbzos80OrxRg46JOwgz7BwFkaFesJ4dz+FjS5mA=
Subject key identifier: 67:6C:FC:A3:36:BA:F2:C5:BE:68:7C:14:25:10:83:02:E8:07:47:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCF7290C52D11EFA976006F762E951A.roa
Signing time: Sat 28 Dec 2024 15:05:27 +0000
ROA not before: Sat 28 Dec 2024 15:05:23 +0000
ROA not after: Fri 12 Dec 2025 15:05:23 +0000
asID: 984
IP address blocks: 154.204.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76745 (0x12bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:05:23 2024 GMT
Not After : Dec 12 15:05:23 2025 GMT
Subject: CN=677013b7-6e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:75:49:21:1b:72:c0:55:06:6a:fe:da:36:
72:72:82:26:d5:1b:30:9e:6a:bb:13:da:78:0f:aa:
a0:25:f4:4e:e2:27:4c:8a:78:0d:a2:2e:f7:59:af:
47:5f:73:84:48:ab:17:8b:eb:3d:96:6b:a1:5d:9a:
7c:8c:04:22:c9:80:95:28:20:ec:67:8e:53:af:2b:
c3:2d:ac:12:d4:e6:9c:21:bb:cc:f0:f9:48:21:68:
37:f7:f6:23:43:a0:e5:a9:d4:04:13:dc:39:dc:ab:
17:bc:9a:1f:2c:62:a6:ed:ab:78:9f:9c:0d:a8:e2:
2f:78:3a:ee:30:d7:3c:72:7a:34:12:0a:1d:39:c3:
14:bf:af:98:a6:d4:ec:1c:b5:c9:f2:06:75:c9:6d:
a7:9d:3c:81:8a:09:0e:c3:6b:3b:9a:a7:e6:77:d2:
57:57:7c:bb:e4:59:0e:7b:98:41:d7:6c:5d:ad:51:
4b:2b:d5:96:1f:2d:c1:79:3f:c8:d1:84:20:ef:5d:
20:7a:91:1c:82:a3:3b:8d:4d:87:70:fc:a8:57:d8:
8f:ba:8f:b8:f9:d3:c7:7c:00:34:b9:52:20:a1:de:
9f:ce:64:f2:12:22:09:6b:d9:fa:3f:e9:9f:74:3f:
07:83:d7:52:df:3a:7c:88:f4:5e:72:04:3e:0b:1e:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:FC:A3:36:BA:F2:C5:BE:68:7C:14:25:10:83:02:E8:07:47:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BCF7290C52D11EFA976006F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.77.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:52:87:42:0c:6c:e9:a5:72:21:6b:06:81:99:42:a1:26:
e5:17:65:10:71:0f:5d:66:fb:8d:66:5f:d6:8f:44:31:56:13:
c4:16:83:ba:c8:91:1a:c2:e1:c5:f3:67:7b:51:05:3b:04:84:
6b:93:81:b3:cb:19:a2:ba:03:ac:fc:68:c8:fb:d2:da:09:96:
d5:59:5b:02:c8:05:9c:3b:b8:87:4c:4a:96:43:1c:65:0c:36:
91:79:3e:df:23:bf:86:36:57:df:50:78:9e:89:a4:04:80:9c:
f7:0c:f1:1e:6e:41:65:9e:dc:23:9e:9e:ce:d5:ad:83:36:03:
f6:96:1f:98:ca:55:f2:55:58:cc:f3:6e:a4:06:62:11:13:d5:
63:8f:21:b3:17:23:60:34:cd:8d:1d:ae:24:9f:72:53:8c:b3:
11:ef:37:46:09:b4:0f:1e:3a:4b:f1:0b:43:13:dc:53:5d:1c:
37:85:91:74:f1:1e:e0:e6:c7:5b:0c:b8:a6:47:63:96:39:d8:
9f:f3:b0:0e:ac:2e:bd:32:44:1f:8a:f2:fd:96:62:39:5f:ae:
a4:7d:d9:b8:19:72:84:86:63:eb:98:48:26:5f:cb:ae:c7:3a:
b6:05:e1:01:3a:3b:ca:04:21:78:89:f4:19:2d:9d:d0:68:c6:
ef:77:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:31 2025 by rpki-client