Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E78FEC3DD11EF89875491762E951A.roa
File: 524E78FEC3DD11EF89875491762E951A.roa (raw, json)
Hash identifier: iu9q2nhYqaAW5mM4O7I8Rgp7cwrebjitPPGIuUFk8pk=
Subject key identifier: EA:21:C4:BE:C9:37:9B:CB:07:90:9F:7A:62:AE:FF:F3:0E:32:C6:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E78FEC3DD11EF89875491762E951A.roa
Signing time: Thu 26 Dec 2024 23:01:21 +0000
ROA not before: Thu 26 Dec 2024 23:01:17 +0000
ROA not after: Sun 12 Dec 2027 23:01:17 +0000
asID: 17561
IP address blocks: 154.86.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75964 (0x128bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:01:17 2024 GMT
Not After : Dec 12 23:01:17 2027 GMT
Subject: CN=676de041-a21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:c0:4a:a9:03:4d:e9:41:67:b0:9b:6e:b3:
b6:c1:d8:3c:bc:9b:93:ba:50:62:76:08:37:b1:d3:
fe:84:15:b3:e3:39:a8:1f:d1:aa:f5:f2:92:b3:a8:
dd:36:2c:ee:71:ca:1d:00:8e:52:43:ff:10:d8:d9:
48:8b:c2:82:87:22:c7:ad:12:ba:7e:aa:32:f7:bc:
84:af:61:d7:ef:bc:30:5e:db:45:ed:66:d3:be:83:
88:08:09:9a:76:e5:2f:d6:86:53:17:c5:79:a3:de:
3b:0a:7a:b4:67:45:cc:a1:eb:13:0f:33:27:2a:93:
55:75:4c:31:bb:0b:3f:ad:27:f6:8e:3a:60:67:f8:
07:1d:2c:a1:32:e5:cb:c7:37:28:dc:af:5f:fd:b0:
ef:09:f5:40:3e:55:91:30:a5:b9:ba:f8:dd:29:c0:
6f:51:f2:01:6a:44:be:85:50:5c:63:79:20:99:8f:
39:e7:cd:5e:27:63:6c:a1:8e:0d:7e:35:98:4b:83:
b3:53:61:ec:ad:69:1c:fb:69:8b:c5:3c:01:81:ba:
f1:73:1d:c5:1d:f5:bc:5a:ac:27:74:e0:48:2c:81:
64:ce:8c:63:bd:5f:f9:00:5d:92:0b:7d:54:34:b3:
3c:82:e2:be:fa:4f:20:b3:ad:c4:16:50:18:bb:ba:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:C4:BE:C9:37:9B:CB:07:90:9F:7A:62:AE:FF:F3:0E:32:C6:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E78FEC3DD11EF89875491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a9:b6:dc:b0:03:20:f4:37:49:d1:85:e4:36:e5:81:b9:d5:
80:6d:48:4d:f4:3d:87:9a:8e:c0:aa:1a:97:02:47:03:22:13:
e2:b5:74:a8:0f:e2:a0:68:e2:b8:3f:95:03:df:5c:b5:c5:5e:
86:61:ac:0b:51:cf:1b:63:74:7d:03:c0:3a:b1:d0:fc:ca:da:
b7:aa:16:09:7b:31:b4:88:34:50:bb:1a:d4:36:0b:43:3a:5c:
d8:ca:42:ad:41:18:00:8f:3c:fa:de:bf:d0:8c:02:67:5a:22:
0b:f4:98:6e:e3:e5:17:7f:91:0d:f6:bf:1a:45:78:28:87:6e:
af:fb:9b:2b:c6:4f:ce:19:be:52:2c:bd:b1:30:20:25:c9:23:
e3:2f:57:7c:f3:ac:13:ef:fc:46:7a:f6:1c:2a:b0:60:40:82:
25:60:0f:56:d2:0d:34:fa:09:e0:f2:5e:96:d8:8c:78:f0:b3:
a7:cd:db:6d:d0:2b:af:da:6a:c0:67:56:7d:7d:98:6c:1f:84:
24:11:b7:43:72:13:39:d7:7c:32:5a:6c:2a:35:b7:82:e6:2b:
e5:a3:b8:27:4b:a3:5e:14:b6:8b:0c:80:7f:56:44:56:5b:09:
18:fe:a5:13:5f:e9:61:e3:1b:23:77:c7:51:f5:c9:44:b5:73:
d0:8b:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:27 2025 by rpki-client