Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5408517AC3DC11EF9814D48A762E951A.roa
File: 5408517AC3DC11EF9814D48A762E951A.roa (raw, json)
Hash identifier: j1QNkO7Ysz1RJyg3wK+T+Ce4N6Op/nsFvoeFCLPSTpI=
Subject key identifier: 16:7C:97:0A:07:92:3C:5C:6D:86:47:91:77:E2:B7:47:E4:3F:0C:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5408517AC3DC11EF9814D48A762E951A.roa
Signing time: Thu 26 Dec 2024 22:54:14 +0000
ROA not before: Thu 26 Dec 2024 22:54:11 +0000
ROA not after: Sun 12 Dec 2027 22:54:11 +0000
asID: 17561
IP address blocks: 154.86.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75954 (0x128b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:54:11 2024 GMT
Not After : Dec 12 22:54:11 2027 GMT
Subject: CN=676dde96-9cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:99:1f:fb:7b:ef:37:47:5d:c0:9c:dd:e6:
00:ed:e1:88:69:2f:a4:15:50:64:b1:63:d1:d0:19:
bf:6f:13:a9:1e:b2:f2:bf:c3:aa:30:2e:52:1a:dd:
7d:3a:00:e5:36:a4:6c:38:55:7c:e5:7b:28:d1:82:
64:a0:aa:28:01:cf:74:30:39:32:00:9a:42:f7:a7:
7e:dc:95:aa:d4:bb:5b:83:32:0f:17:4f:83:5a:c9:
73:cb:8d:c5:89:ab:0c:eb:94:f8:56:9f:16:ca:5e:
89:94:08:d2:03:34:7b:b4:02:0a:95:f5:42:b7:84:
6d:02:0e:05:cc:88:8b:50:f9:1e:e8:03:1d:bb:db:
f5:f2:4a:b6:b7:72:a2:9f:e3:d3:38:d1:23:a5:e3:
5e:cb:84:26:21:5a:e9:ef:f8:89:4b:a2:4b:cd:48:
9d:e1:b6:c7:9a:d2:8e:28:91:3c:c5:8c:7a:28:17:
4f:db:e1:b8:32:c6:14:87:4f:67:b4:eb:4c:c1:8d:
9b:c2:7a:1f:99:72:2f:ed:09:bd:a3:22:df:f2:0e:
28:f2:8e:aa:dd:51:f5:7f:7e:31:f4:6c:9e:24:e9:
ef:09:55:af:80:06:ee:34:37:6b:89:4f:d4:eb:27:
f1:94:a9:44:a0:c0:49:8e:e8:17:dd:2c:09:9d:fd:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:97:0A:07:92:3C:5C:6D:86:47:91:77:E2:B7:47:E4:3F:0C:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5408517AC3DC11EF9814D48A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:da:6a:a5:b4:db:40:cd:3e:56:13:ee:39:0a:29:61:04:7b:
02:6a:ab:ac:31:34:d6:d4:aa:dd:4f:29:77:07:e6:a1:06:79:
b9:05:88:c0:87:3c:09:63:be:e5:21:a6:d5:d0:34:43:68:03:
8e:7a:6a:b3:6d:93:dc:b9:3a:6a:80:da:11:da:d9:3b:b9:04:
2a:28:af:28:89:20:d8:23:ff:53:b9:75:7d:47:5d:88:18:2c:
84:52:d0:13:95:3a:fc:17:3e:a2:5a:e3:21:c6:40:c0:1f:67:
b6:58:3b:a8:3f:2f:65:66:6e:f8:66:5b:fe:23:59:fe:e4:e5:
d8:37:70:c0:c6:0c:84:e6:fb:f5:36:e0:7a:c4:83:7c:0e:f1:
ae:6f:30:0e:75:79:0d:72:c3:82:cc:ab:25:ac:6b:64:6a:6f:
2f:ef:b9:27:db:26:a8:db:f7:8b:72:45:27:ed:51:74:b2:ee:
41:77:fb:d4:91:ef:79:51:35:41:69:04:dd:ee:6c:45:d3:f4:
ad:61:df:55:dc:ac:39:38:ab:d4:ef:6a:9f:ca:2c:51:3c:53:
08:a9:83:e4:ce:65:7e:fc:1b:22:bc:2c:7c:29:62:3e:2b:99:
a5:67:36:61:6b:40:3e:ed:66:97:a8:2b:2c:d4:ba:14:a7:d7:
35:e0:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:55 2025 by rpki-client