Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4264500EC5EE11EF93AEC7B6762E951A.roa
File: 4264500EC5EE11EF93AEC7B6762E951A.roa (raw, json)
Hash identifier: KaVg/NoUgUoIGVs6lCE3NcdSdCQwht03JlnEUs4WoMs=
Subject key identifier: ED:91:70:47:21:4F:9E:9A:89:B5:5B:04:D3:81:C3:10:19:53:8B:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4264500EC5EE11EF93AEC7B6762E951A.roa
Signing time: Sun 29 Dec 2024 14:07:38 +0000
ROA not before: Sun 29 Dec 2024 14:07:34 +0000
ROA not after: Sun 12 Dec 2027 14:07:34 +0000
asID: 17561
IP address blocks: 154.211.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77248 (0x12dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:07:34 2024 GMT
Not After : Dec 12 14:07:34 2027 GMT
Subject: CN=677157aa-11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:cc:52:5c:4a:b4:5d:f8:13:8c:10:84:d7:
3c:1c:71:98:89:dc:c7:d0:18:82:25:93:1c:dc:52:
74:9f:93:1b:f5:54:d0:a4:96:69:2f:99:10:29:81:
dc:1e:a9:aa:cf:a4:00:67:1f:ae:32:74:9b:79:5f:
a4:ad:52:01:ba:19:60:4a:5b:75:ea:56:fc:3f:f2:
d9:72:ef:bb:4b:14:c3:fb:bd:40:2d:2a:26:55:ea:
42:91:ab:cb:ee:a7:04:a7:6f:4b:9e:ad:5e:45:08:
c4:34:ba:e1:3a:f8:22:da:5a:d5:e7:fb:61:b4:31:
70:bf:92:cf:91:61:d1:08:1d:3c:11:4e:15:a5:7d:
a8:3e:6a:de:0b:b1:60:50:7e:8c:ba:69:0b:4d:6d:
69:54:90:de:00:a2:2f:e8:85:1b:d6:3f:87:71:8d:
cb:24:c9:f7:59:6e:18:61:b4:0e:45:2b:39:5d:de:
ca:c5:6b:6d:9d:d4:e3:be:54:c7:d3:6c:61:8d:1e:
ed:71:64:72:c9:16:3c:71:d1:75:2a:f0:26:16:3c:
3c:a6:f2:fd:f4:6d:9b:22:b0:d8:5f:69:53:df:6a:
ce:5a:8d:e8:ed:cf:79:fd:ca:c0:b1:bd:1a:4d:bd:
c8:e6:36:cc:f5:e4:d3:85:16:ce:1b:12:ef:3e:47:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:70:47:21:4F:9E:9A:89:B5:5B:04:D3:81:C3:10:19:53:8B:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4264500EC5EE11EF93AEC7B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.39.0/24
Signature Algorithm: sha256WithRSAEncryption
94:70:8c:e8:41:f9:89:fb:3e:c5:42:03:9e:ee:16:1b:0d:86:
31:cb:3e:3c:b5:9b:5a:92:f3:ce:25:c3:c6:e7:49:ac:d3:b6:
e1:f1:f9:d3:8a:69:cc:8e:c8:a1:50:6e:38:9b:a1:94:47:cf:
c4:db:4c:80:93:c5:9e:b4:67:57:0c:2e:dd:23:73:30:73:76:
2c:3d:b3:14:8e:20:76:97:15:88:cc:0d:d6:7f:f9:dc:9c:67:
a3:cd:5b:70:e2:62:53:f4:a0:a2:63:62:7d:74:f1:b5:37:da:
7d:31:b5:9b:7c:44:af:2d:4a:51:29:dd:c9:d8:a4:8b:af:95:
c8:ed:f4:67:9d:31:30:1f:9b:50:ea:67:e6:bc:ab:6a:e1:a3:
30:60:bc:10:48:57:45:98:ed:66:2f:e0:62:e7:08:10:6f:2e:
b7:37:1f:1b:a9:1a:f5:94:01:dc:71:d5:b6:98:53:66:57:b6:
1c:87:78:e5:1d:89:80:f0:63:d3:54:ba:dd:df:a0:95:cf:02:
0e:dc:9c:47:55:42:d5:4c:ca:46:8d:f9:55:6a:b9:f0:20:d1:
53:89:fc:0b:05:b0:82:37:97:9b:75:57:e7:fe:34:41:67:41:
7b:2e:83:b7:2e:f4:a1:82:ad:61:00:0e:5c:53:05:1b:94:91:
2c:45:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:31 2025 by rpki-client