Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D493218C62811EF93EF8FA0762E951A.roa
File: 2D493218C62811EF93EF8FA0762E951A.roa (raw, json)
Hash identifier: sLNcQyLsv6eJvYW0tw0vAUcpJDaYIrWk9FNQuVRaUks=
Subject key identifier: CE:B4:35:66:FE:3E:E8:84:2E:14:95:F3:E8:93:39:93:E8:18:4B:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D493218C62811EF93EF8FA0762E951A.roa
Signing time: Sun 29 Dec 2024 21:02:13 +0000
ROA not before: Sun 29 Dec 2024 21:02:08 +0000
ROA not after: Sun 12 Dec 2027 21:02:08 +0000
asID: 17561
IP address blocks: 154.217.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77736 (0x12fa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:02:08 2024 GMT
Not After : Dec 12 21:02:08 2027 GMT
Subject: CN=6771b8d5-36c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:77:61:db:3b:8f:1b:e2:8e:4f:63:4a:7b:
d9:b5:79:84:3a:61:a1:fb:8b:0d:f3:d7:c0:96:61:
29:e5:24:9f:cc:18:86:dd:26:ba:bc:08:f1:9a:a3:
ad:5b:e2:0f:81:6f:24:1f:c2:62:a2:76:ae:aa:7d:
38:f4:a6:8f:f7:6c:8f:d1:11:f4:ba:f3:2c:39:81:
3d:75:08:06:a1:ac:7a:b8:bf:99:2b:c2:2b:d3:00:
89:e7:de:d0:cd:27:ba:6a:b6:19:40:41:a9:8c:59:
59:0a:68:2d:3c:dc:42:ca:d4:d6:23:d2:00:f9:3c:
60:e1:6b:94:4a:b7:7c:b9:15:e4:a1:fc:69:52:0d:
00:e6:9d:59:88:1c:e7:5a:d5:fc:d8:60:a7:6f:82:
e1:68:b1:16:25:21:97:0d:22:d7:0b:31:66:ae:ce:
18:94:d9:ca:37:1e:a3:2b:b6:98:63:4c:99:ef:4f:
89:b0:df:d5:8b:28:19:f9:9f:99:d4:72:6f:22:e3:
4a:5e:7b:38:d7:2b:93:10:ea:be:45:33:29:d9:10:
ef:80:9d:df:d7:bc:cc:d8:d0:8e:3b:29:8b:10:57:
f7:1d:d5:cb:e5:03:32:2e:3c:d1:4b:80:5d:97:d1:
f6:d1:61:c7:d5:29:56:f5:e7:f2:79:aa:8d:f8:36:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:35:66:FE:3E:E8:84:2E:14:95:F3:E8:93:39:93:E8:18:4B:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D493218C62811EF93EF8FA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ce:b7:f2:b4:f3:04:b5:aa:19:b6:f7:18:39:92:52:e1:66:
67:c7:b2:c6:d4:48:38:09:a0:d4:26:37:99:03:e8:6f:82:87:
92:f8:51:07:5d:5a:e5:0b:7f:1e:02:0b:9a:8c:51:15:89:7d:
bd:73:b4:d3:e5:05:48:19:52:16:91:bc:3c:78:e0:9c:23:07:
df:07:cc:f0:72:1a:85:7d:47:b2:b3:26:3e:b1:84:a6:0a:cf:
2f:94:49:d5:df:6a:12:36:bd:03:79:a5:2f:fd:c3:ae:d3:5b:
fb:6c:25:84:77:aa:e1:32:f8:2a:fd:6c:d9:c9:4d:8a:50:32:
2c:17:d3:24:0e:b6:b9:50:85:49:06:ca:8d:73:17:04:3c:b2:
f9:f7:36:d8:83:9a:f6:9f:62:99:f9:f7:af:88:38:2a:19:a1:
7c:90:29:39:0c:e2:1c:cf:fc:87:35:1a:c6:6f:2a:31:c7:1d:
a9:a0:1c:73:4c:f7:3e:8d:c7:5b:bb:1b:3b:9e:af:15:9d:cd:
22:c1:c1:d1:21:3b:14:9f:d9:a2:7e:76:3a:cd:fe:0f:c9:0c:
e1:82:c3:42:50:dd:52:75:b4:d7:af:f3:3e:f4:41:0a:03:38:
03:d4:50:84:bb:08:4a:41:cf:2e:36:30:60:68:1c:a5:3b:ca:
9d:57:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:49 2025 by rpki-client