Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ECD35EC53C11EFAB391F4E762E951A.roa
File: 48ECD35EC53C11EFAB391F4E762E951A.roa (raw, json)
Hash identifier: vuvES9pd6m7qOXEe0euPGYEvH9X5Yy47KBM/W6DLhwQ=
Subject key identifier: 44:35:B0:2C:49:9F:0E:EE:04:88:F6:92:D3:C2:AA:16:E9:36:A1:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ECD35EC53C11EFAB391F4E762E951A.roa
Signing time: Sat 28 Dec 2024 16:53:38 +0000
ROA not before: Sat 28 Dec 2024 16:53:35 +0000
ROA not after: Sun 12 Dec 2027 16:53:35 +0000
asID: 17561
IP address blocks: 154.205.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76881 (0x12c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:53:35 2024 GMT
Not After : Dec 12 16:53:35 2027 GMT
Subject: CN=67702d12-975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:24:b9:df:11:db:3b:ed:13:5f:9f:a8:16:
97:5c:d8:49:db:a8:c8:d5:5a:f0:41:c2:28:4b:38:
e5:b7:25:2b:fb:df:b8:85:6e:76:06:6b:fe:37:b1:
eb:91:e2:0e:66:d3:ea:1f:20:3e:78:42:44:5e:c2:
0c:3c:52:d1:e9:c1:36:5e:02:56:5e:36:97:9a:e2:
4c:86:08:9e:88:0b:e1:d2:f6:72:14:28:49:d3:fc:
6a:9e:a1:b2:f6:0c:b1:da:98:e0:69:cb:d8:2c:3b:
7a:50:a2:bf:35:00:b3:ea:31:c9:5f:31:c5:ea:b5:
c1:d6:4a:cc:98:d2:c1:ca:a9:ad:fc:47:a0:e9:75:
3d:92:de:2c:fb:76:e8:40:90:fe:30:f8:ff:4a:60:
9e:26:c9:cb:57:2e:ff:8f:ae:85:2c:a1:b6:a1:2b:
a1:17:81:98:eb:16:91:7a:81:cd:8c:9e:68:5c:7e:
cb:fc:b3:e2:a4:7b:8f:5e:f0:c3:7b:ab:e5:de:b6:
6c:9f:26:ce:e5:66:46:b2:51:20:a3:9c:3a:a3:91:
e4:a9:11:e2:d5:b4:89:b1:94:11:2e:13:24:c2:69:
df:f4:85:a9:e0:e8:34:29:8b:0f:dd:f9:ab:79:fc:
33:10:47:01:cc:4e:68:4a:79:af:ea:e3:a3:f2:6e:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:B0:2C:49:9F:0E:EE:04:88:F6:92:D3:C2:AA:16:E9:36:A1:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48ECD35EC53C11EFAB391F4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.249.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0e:c3:27:c7:3e:dc:d5:bd:1b:25:52:94:9b:e8:01:63:2c:
6d:c3:b5:03:81:e0:d3:3c:58:58:64:e3:ab:0f:bb:c3:db:45:
96:16:1f:07:ab:76:86:4e:98:23:ed:75:07:95:d7:e6:5b:d4:
e9:b1:1e:27:fc:fd:89:07:20:0d:f8:05:1a:a1:8a:00:d5:0c:
4e:58:f1:36:4d:0f:38:cd:f5:8f:db:e0:c1:97:23:89:84:c7:
64:cf:c1:01:dd:f1:86:b9:37:39:21:c4:ff:ff:63:7b:12:72:
a1:8b:9d:e7:76:aa:33:fe:5b:49:98:0b:fa:b1:5f:f9:58:37:
34:55:be:cf:9b:98:b6:7d:e2:7e:77:b2:cf:7d:97:23:18:77:
a9:98:1c:ba:5c:44:67:2e:e8:5f:fd:57:99:38:c3:69:d9:db:
11:f6:7f:05:44:75:06:83:0f:83:c5:16:00:8a:3d:c4:b0:52:
be:b4:7f:92:51:d7:03:19:48:f6:b9:9e:20:bd:7f:e7:a5:18:
27:e5:81:f6:91:85:b0:c5:28:d4:91:82:0d:9d:58:e5:35:10:
89:ff:68:8a:1a:e6:4a:91:31:03:6b:8c:b5:b2:f7:e2:d3:3b:
30:4a:ba:7c:bf:ba:54:e2:f8:20:5b:f3:5e:d7:5e:93:08:cf:
eb:c3:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client