Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5777350EC53711EF84CD27AE762E951A.roa
File: 5777350EC53711EF84CD27AE762E951A.roa (raw, json)
Hash identifier: ApmRD8utTz8JyM4Ia1/ZnbKLDKBxSlxtPk2RCREp5oY=
Subject key identifier: A6:11:E6:14:82:F2:0D:13:A7:A9:0A:C9:E9:AF:F9:CE:39:A9:09:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5777350EC53711EF84CD27AE762E951A.roa
Signing time: Sat 28 Dec 2024 16:18:15 +0000
ROA not before: Sat 28 Dec 2024 16:18:12 +0000
ROA not after: Sun 12 Dec 2027 16:18:12 +0000
asID: 17561
IP address blocks: 154.204.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76835 (0x12c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:18:12 2024 GMT
Not After : Dec 12 16:18:12 2027 GMT
Subject: CN=677024c7-343d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:f6:6d:36:f0:ac:07:00:5c:c7:09:52:47:
6e:b1:2a:21:fa:ea:70:df:d9:ff:d4:5e:b0:0f:ef:
9d:5b:25:0e:5c:a2:34:2e:c7:9f:ac:a3:fa:8f:16:
f4:cf:42:e6:48:92:8a:d7:d2:a0:50:74:f4:f0:1f:
8a:84:46:16:64:53:d8:9e:08:e3:1b:35:a8:f6:3e:
28:27:cb:ea:c3:0d:a0:0b:5c:dc:58:9e:9f:10:81:
f3:a4:c2:e2:cc:c2:af:92:75:c4:a3:9a:7a:d0:a9:
12:8f:07:a1:b3:8a:22:92:22:ad:4a:db:6f:7f:79:
0e:49:08:03:b8:1c:10:ca:10:db:db:5c:3a:00:5e:
74:78:b1:5a:14:73:f7:ec:51:6f:e9:4a:0d:e0:4d:
78:8e:9d:4d:23:65:c4:0f:92:ef:c2:67:6c:95:db:
96:10:bb:12:da:74:66:88:bc:a8:f5:fd:52:9e:b6:
ff:60:a4:30:cd:6c:60:0a:58:5c:e2:3f:b5:56:28:
13:bc:f2:9d:01:ae:e3:4c:65:a9:c5:46:d1:e1:1b:
e7:a5:1a:50:c5:85:a9:4e:ac:83:df:3f:55:b5:ef:
67:2b:2d:55:9d:12:2f:78:41:fc:07:f9:ef:e6:59:
3d:7f:70:e5:c3:f4:4b:78:de:3d:0f:7a:7a:9a:fc:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:E6:14:82:F2:0D:13:A7:A9:0A:C9:E9:AF:F9:CE:39:A9:09:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5777350EC53711EF84CD27AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4e:f9:2c:f1:9f:c8:54:49:ec:63:6a:98:f2:a5:f9:f4:4b:
f2:d3:9b:80:66:7e:ac:69:b3:c4:ff:3e:03:c5:cf:bb:fa:f9:
af:75:7e:eb:c0:17:ec:c5:f7:1e:f0:c4:ed:05:47:3e:f1:34:
a3:c8:8d:03:c7:bd:bf:65:e6:7c:c0:e5:e2:07:63:86:44:c5:
c5:94:c2:f9:61:fb:ff:d3:99:67:5c:52:b8:04:1c:d9:9d:f5:
50:f6:c8:1d:ec:df:8f:27:34:e5:a2:07:02:36:0f:4c:cf:6c:
91:ec:64:48:58:e9:14:73:60:fe:88:db:34:8e:57:b3:33:06:
2a:8e:3d:23:8d:36:dc:30:fe:e8:eb:3a:df:e3:21:5a:69:a7:
df:03:7d:25:1e:80:87:35:65:f0:1f:1f:e4:a6:02:dd:2a:4d:
c0:7f:0c:8d:f2:6f:0a:f9:4e:6f:e5:7e:a0:25:72:8c:25:6c:
69:2e:35:f8:01:53:08:00:89:d6:20:37:e6:22:90:7d:e3:d2:
72:8d:cc:74:a3:c3:d0:b8:52:80:6d:f0:94:7d:52:d0:44:df:
a4:e5:9b:e8:c1:45:82:78:2f:31:78:68:fc:2b:f3:33:ff:1c:
6e:20:9c:99:76:ee:49:01:58:5a:01:c1:2d:d1:99:1d:ce:2e:
7f:2a:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:59:55 2025 by rpki-client