Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5066596EC26E11EFA37A0A82762E951A.roa
File: 5066596EC26E11EFA37A0A82762E951A.roa (raw, json)
Hash identifier: Z1fN2iWb+8Zm8d+4qpBZVAFr+LyYh1vdVfTjKr+cjLk=
Subject key identifier: A6:73:16:60:32:EA:6C:19:3E:6A:4A:22:57:88:18:DB:AF:B9:6B:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012446
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5066596EC26E11EFA37A0A82762E951A.roa
Signing time: Wed 25 Dec 2024 03:14:12 +0000
ROA not before: Wed 25 Dec 2024 03:14:09 +0000
ROA not after: Wed 10 Dec 2025 03:14:09 +0000
asID: 984
IP address blocks: 154.211.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74822 (0x12446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:14:09 2024 GMT
Not After : Dec 10 03:14:09 2025 GMT
Subject: CN=676b7884-7b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:3f:b0:83:60:ce:c4:18:a7:7d:b0:7e:66:
1a:1a:06:6c:83:6c:78:83:ee:5f:4a:aa:d7:ea:05:
78:c7:1d:88:02:94:4e:e1:14:7e:13:71:8d:16:87:
43:d8:d0:b2:08:bd:93:94:3f:04:e0:31:47:b7:57:
8b:3d:dc:b8:5c:88:05:a4:1c:1c:31:a8:db:ae:e5:
f7:dd:b4:0f:55:70:c8:16:67:32:c0:39:fa:55:1b:
9f:83:a6:8c:42:42:c4:6e:00:65:1c:2c:35:9e:31:
4e:a1:27:1f:49:b0:ef:41:78:67:88:90:06:fb:e4:
ee:09:63:a9:71:93:60:18:e9:d4:b1:a1:a2:aa:f9:
0c:56:0f:f9:db:a4:97:80:87:52:e3:74:6c:c6:cf:
ec:1f:8d:82:df:f5:0c:dc:82:7f:84:d6:56:a2:2f:
a0:44:c3:74:88:de:4c:01:a2:b8:74:b3:d7:ed:5c:
38:81:90:0e:cb:56:cd:4b:ae:e5:6b:b5:4a:96:ba:
04:d7:0c:26:e6:dd:2e:c3:f6:0c:3f:76:86:d9:b8:
8e:35:f6:cc:cb:19:02:b7:47:fc:9b:82:e9:7c:07:
c8:ab:82:3e:6e:2d:e6:89:fd:98:23:4b:09:03:35:
f3:e5:78:c1:f5:01:18:c2:bd:5b:59:c9:cf:80:83:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:16:60:32:EA:6C:19:3E:6A:4A:22:57:88:18:DB:AF:B9:6B:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5066596EC26E11EFA37A0A82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:40:6c:66:c6:09:46:29:1d:1c:9c:f2:6a:d6:fe:83:60:88:
f4:d8:32:8c:27:8f:9b:90:57:7e:83:1e:2d:7f:df:d1:fb:39:
ad:18:0a:ea:40:8e:a6:6f:b8:59:a6:4e:4f:c6:2c:99:9c:53:
4c:6b:b2:f8:3b:a8:be:13:25:18:0f:86:47:ae:ba:bd:46:57:
84:a5:0c:55:93:bb:35:bd:27:b1:e5:ac:d5:fc:1f:56:f7:e1:
dd:ea:28:6c:83:2b:5e:ba:0a:44:dc:8e:e9:1f:45:f8:9d:71:
54:d6:c9:e7:31:cd:4d:0f:a6:30:1e:84:01:c1:43:9a:89:23:
da:51:b1:60:14:9e:9e:8a:a7:b9:fd:43:48:b5:69:08:c3:30:
99:ce:e8:f8:c6:1d:6c:17:64:38:84:ac:00:f9:ff:b2:38:96:
37:06:22:c5:12:a8:ed:18:98:8b:c4:50:44:45:43:13:3a:4f:
f5:ed:fb:8b:06:e7:9d:b0:ea:d8:0a:b4:25:75:58:7a:0e:c6:
25:f3:24:86:17:6a:20:b4:37:d8:36:83:79:a8:c9:7e:ab:97:
be:eb:e7:43:6e:0e:96:fb:2a:3f:e1:1a:b6:01:0b:3e:cf:cf:
5d:17:61:c0:bd:2b:ef:1a:ac:4d:11:d9:6a:23:d2:28:18:28:
ec:7a:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:09 2025 by rpki-client