Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410DF7B0C61511EF85E101AA762E951A.roa
File: 410DF7B0C61511EF85E101AA762E951A.roa (raw, json)
Hash identifier: YnnAGjjNKjN/J59nvo/pCMaQjx8g2OqTPkJE/ORUnt4=
Subject key identifier: A3:52:D1:07:D3:00:6C:69:19:F1:02:C0:59:8E:DC:50:F2:26:B5:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410DF7B0C61511EF85E101AA762E951A.roa
Signing time: Sun 29 Dec 2024 18:46:46 +0000
ROA not before: Sun 29 Dec 2024 18:46:42 +0000
ROA not after: Sun 12 Dec 2027 18:46:42 +0000
asID: 17561
IP address blocks: 154.217.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77578 (0x12f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:46:42 2024 GMT
Not After : Dec 12 18:46:42 2027 GMT
Subject: CN=67719916-6cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:57:c7:8e:14:e3:13:11:bc:38:fa:82:df:
2f:93:6f:d1:05:19:16:54:7f:46:7f:81:fe:65:1f:
31:ec:9e:07:41:52:a8:1d:9d:23:e5:de:da:ac:42:
c9:a9:53:34:03:e0:2f:c9:c5:22:1d:bc:66:59:f9:
53:5a:af:f6:c8:ea:b2:35:7b:d6:67:c3:70:ab:40:
85:56:18:71:a2:bc:66:81:5a:82:64:f3:71:2b:ff:
5b:59:01:5f:d2:14:da:c2:e5:70:73:30:12:97:fa:
15:15:62:1e:ce:15:3a:29:ee:f6:4b:7a:e1:6c:5e:
80:8b:0e:e6:92:83:4f:b9:dc:1f:9c:46:56:de:e6:
a8:9a:42:7f:e8:a7:9f:62:7b:a5:74:1d:50:57:db:
86:c6:a0:cb:61:4e:69:ac:14:d9:28:cf:81:61:f0:
2c:2b:6d:f3:0b:47:91:45:8e:95:89:d7:27:bd:99:
e9:b2:e3:70:5b:b8:f8:05:7f:aa:7d:9b:aa:68:08:
e6:55:09:8f:83:45:be:d8:54:c2:fe:48:6a:43:e6:
4f:d2:9c:18:62:8d:0e:0f:31:11:df:81:05:41:00:
eb:cf:03:4a:aa:1e:db:e3:92:ab:60:b4:29:7f:61:
2a:c6:25:e8:f2:6b:3e:1c:da:7f:2d:5b:f4:33:cb:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:D1:07:D3:00:6C:69:19:F1:02:C0:59:8E:DC:50:F2:26:B5:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/410DF7B0C61511EF85E101AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
92:50:6f:25:79:3e:29:7a:d9:09:52:39:09:c5:3b:b4:49:e3:
1d:eb:2d:96:fb:07:71:91:c7:e4:36:95:54:23:af:dd:67:f4:
f4:1d:02:5b:d9:56:39:15:60:cf:c5:8c:b9:ca:e9:85:b1:13:
3c:ee:a6:91:f0:61:0e:1a:3b:52:09:16:5a:c9:53:73:b8:a2:
e3:32:83:2d:d4:6b:cc:0e:bd:f2:1f:13:72:df:56:68:0e:ae:
00:96:7b:89:d3:78:93:c4:db:21:df:46:68:08:63:ef:ed:e0:
ed:12:fe:1e:b5:98:4a:4b:48:d9:d5:a1:08:6f:8d:84:af:b4:
d4:ba:45:8b:7a:05:10:56:d1:00:26:9a:53:ba:5d:7a:e4:2b:
ef:08:68:13:7e:64:d5:b5:f4:11:27:4c:c5:0b:06:36:af:86:
a2:9a:fd:17:55:25:19:08:50:35:a1:20:3f:86:0d:39:1f:06:
25:91:38:10:12:8c:b1:39:97:c5:a2:fa:61:3b:a5:73:fb:44:
7e:9e:60:39:ea:aa:25:40:23:c1:6d:8f:7c:14:15:ab:24:76:
d7:e2:a3:2c:d4:4a:e1:51:39:f1:b9:c3:85:94:81:1d:7b:ea:
e6:e0:33:9f:e5:9d:b4:e4:12:0f:55:95:d7:d2:f8:13:5e:42:
0f:23:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:36 2025 by rpki-client