Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD1CF14C36011EF89E86F80762E951A.roa
File: 2BD1CF14C36011EF89E86F80762E951A.roa (raw, json)
Hash identifier: 0AOFikMrSwBEvpem9HRZriAh44i+fP7bBY7jiRwfGlg=
Subject key identifier: 21:58:0E:0B:F0:B9:E9:69:25:EF:54:D5:84:4E:A8:EA:24:19:D1:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012640
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD1CF14C36011EF89E86F80762E951A.roa
Signing time: Thu 26 Dec 2024 08:05:29 +0000
ROA not before: Thu 26 Dec 2024 08:05:25 +0000
ROA not after: Sun 12 Dec 2027 08:05:25 +0000
asID: 17561
IP address blocks: 154.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75328 (0x12640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:05:25 2024 GMT
Not After : Dec 12 08:05:25 2027 GMT
Subject: CN=676d0e49-98c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:e5:57:10:7a:35:a2:d6:f0:7a:3a:d5:02:
95:8e:45:a4:e3:43:6d:6a:56:4a:af:fa:bf:b0:e7:
27:4a:cb:f4:2f:9b:96:2d:ea:a0:68:5c:12:c6:9d:
9d:79:7e:41:94:88:18:62:1b:33:6e:0f:9e:21:41:
6a:0a:09:32:6d:41:35:05:ba:0f:73:cd:d6:70:07:
0e:2c:bb:2a:d3:cd:56:3d:03:12:ce:d2:5c:8a:11:
a8:4a:45:a8:cc:45:b9:ba:3c:5a:56:ea:67:99:f7:
df:c1:4c:ad:06:6e:be:f2:9b:d1:94:6e:6c:fa:ee:
2d:86:c3:4a:55:10:d2:14:4c:c3:ee:de:7a:30:1d:
d2:53:64:05:9f:86:c4:3b:6c:1b:c5:4b:0b:1e:bb:
19:2f:3f:a3:3c:40:32:8e:85:0b:54:b6:bc:3c:12:
5c:c1:e1:7a:d2:d5:0f:68:fa:cf:bc:54:98:50:4f:
84:cc:d0:b4:d5:f5:11:d9:2d:15:1c:30:b9:de:8e:
82:81:5f:51:c3:c6:66:fe:ec:0d:15:71:50:6a:b3:
a2:86:a2:40:e3:7d:d4:c2:85:ea:81:6a:70:20:bd:
ad:35:56:ed:06:b7:3f:d3:fb:0b:39:7a:63:62:01:
36:b6:fd:3a:84:0b:b8:dd:28:cd:df:c5:c7:32:73:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:0E:0B:F0:B9:E9:69:25:EF:54:D5:84:4E:A8:EA:24:19:D1:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD1CF14C36011EF89E86F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f8:14:4a:5a:db:5d:82:e0:f9:fb:45:b8:5c:d3:8c:96:cf:
43:4a:ee:b8:27:f6:8f:f2:01:6f:17:c6:44:02:dc:09:d4:ab:
6d:9b:ff:55:6f:6c:5f:b3:31:1c:1d:03:7d:38:75:1d:9b:f7:
29:63:1a:0c:fb:6a:eb:7f:6c:06:f2:db:c7:79:4c:e5:b0:83:
97:ee:ff:10:6a:4e:3c:49:c8:7a:57:33:91:d8:45:b2:bf:14:
55:d4:29:22:25:9b:f3:66:b7:36:69:85:9d:53:e9:62:c6:84:
f0:e7:a8:20:25:f2:38:2f:35:9b:7d:df:f8:83:e6:b7:60:91:
22:55:41:17:9e:e2:72:43:21:8b:97:e1:9d:f8:b7:b0:8f:1d:
ee:11:47:7a:86:4f:76:23:d0:a8:c2:13:79:c0:07:5d:e7:ec:
f5:7f:a0:b3:97:3b:ee:ad:3c:47:94:f3:35:5a:db:4b:af:ab:
07:17:f5:b5:28:99:1a:81:d5:92:bf:76:48:78:47:9e:c6:00:
ff:fb:84:cd:d9:58:60:94:64:12:0e:2e:03:40:e7:de:0a:40:
d9:56:dd:88:90:09:34:90:83:73:fd:8c:44:63:ba:7b:3e:4e:
c3:6e:28:d1:42:37:4a:b0:42:f1:7c:46:12:d3:0b:86:a6:4f:
7f:7e:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:00 2025 by rpki-client