Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB4538EC61411EF950742A5762E951A.roa
File: 4DB4538EC61411EF950742A5762E951A.roa (raw, json)
Hash identifier: ppeoVcvtTm/GAaxumpTGL1UQqHNaYGho+1LvgvcTg0s=
Subject key identifier: A8:DD:5A:3B:EF:CF:64:8D:D4:26:15:F2:E0:18:B3:9E:B9:C0:6D:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB4538EC61411EF950742A5762E951A.roa
Signing time: Sun 29 Dec 2024 18:39:58 +0000
ROA not before: Sun 29 Dec 2024 18:39:54 +0000
ROA not after: Sun 12 Dec 2027 18:39:54 +0000
asID: 17561
IP address blocks: 154.217.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77570 (0x12f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:39:54 2024 GMT
Not After : Dec 12 18:39:54 2027 GMT
Subject: CN=6771977e-4851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:6b:99:91:07:a5:d3:2f:6e:ae:06:2d:b5:
0d:a9:fb:35:a9:37:af:cb:e8:e4:d4:02:3f:cf:9c:
de:a6:cd:83:c9:77:b2:4b:d1:f5:8a:ae:72:ad:c0:
84:ec:51:c5:71:f0:c9:1e:d7:2f:ff:d4:56:87:03:
b4:42:a3:98:ae:00:79:0f:d8:cd:d2:ed:fe:c2:60:
dd:ff:3b:15:72:15:d5:19:98:7c:ce:88:08:18:63:
42:c7:7f:c4:c2:62:0c:7e:89:da:83:6c:a4:09:01:
30:6c:e9:96:b5:6a:3e:0b:3c:e1:e7:b3:af:43:8d:
cd:ba:7b:5c:48:b1:73:82:d1:27:93:0c:c9:86:3d:
ff:79:55:e7:ca:7f:da:71:f9:73:6a:92:0d:15:7a:
e5:bb:6a:73:b2:3d:d9:77:55:db:05:9d:ad:ab:c3:
7c:cd:70:8f:a3:ab:08:ef:d7:e4:35:f0:5d:00:41:
d7:7f:98:f5:f9:c3:25:17:16:51:60:2e:9f:0b:7f:
1f:7e:06:73:1c:9d:27:5f:06:3e:47:68:de:58:f2:
b2:be:88:77:35:64:f1:9c:5f:c1:1e:e4:e7:7d:fb:
ad:7b:12:72:57:c3:19:50:3f:82:5e:2f:cf:65:31:
db:2d:74:a1:21:8e:4d:a2:bc:7a:ca:b4:10:8c:bd:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:5A:3B:EF:CF:64:8D:D4:26:15:F2:E0:18:B3:9E:B9:C0:6D:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DB4538EC61411EF950742A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f1:01:13:39:78:3a:45:ee:17:3c:4f:22:06:07:d9:51:a8:
5e:7e:da:47:76:dd:a0:a9:6b:21:92:dd:fc:b6:d8:1f:98:ca:
48:e3:92:79:ee:01:9e:cb:1c:98:ee:5d:f2:13:d0:a0:b2:8c:
d9:12:02:81:9c:fa:28:ce:76:b6:d7:a9:16:0f:7e:dd:15:af:
58:32:ac:63:00:f4:0a:fe:1b:28:5f:bc:8d:8c:a3:1c:a2:c6:
b8:dd:7f:ac:0d:07:e2:28:96:b8:67:9b:e1:69:31:8d:cb:8f:
93:f7:04:af:29:ae:e7:10:75:cb:7f:f8:bb:6c:d3:23:47:81:
f9:05:5d:db:49:ab:dc:3b:b8:73:76:69:15:1a:fe:76:71:ab:
22:8b:d4:35:fc:cd:a2:ae:4a:8d:6b:27:db:06:6a:4b:3e:00:
99:41:d3:93:2c:2b:e9:f2:43:c6:d8:36:3d:95:ff:8b:24:87:
f4:e2:43:47:c5:40:ab:9d:6e:60:dd:14:f1:11:0d:50:79:a6:
82:62:5a:4b:83:29:e5:12:62:2c:a3:96:4e:5b:f5:f4:0f:d8:
75:82:31:8c:d5:1e:48:3a:c6:55:b8:a2:73:18:1f:3d:30:9f:
96:ee:49:0f:ad:25:da:f6:19:d7:a9:cf:1b:f4:d3:11:ed:64:
5c:25:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:02 2025 by rpki-client