Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD7D28EC51F11EFA2DB9196762E951A.roa
File: 5AD7D28EC51F11EFA2DB9196762E951A.roa (raw, json)
Hash identifier: flm2F8YcLq3KpjdSGzogwfbAtVbGl0clvEs9f6PZxt4=
Subject key identifier: A3:2E:27:0D:5C:2C:77:05:5D:7C:48:97:22:83:EF:86:99:4C:7C:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD7D28EC51F11EFA2DB9196762E951A.roa
Signing time: Sat 28 Dec 2024 13:26:33 +0000
ROA not before: Sat 28 Dec 2024 13:26:29 +0000
ROA not after: Sun 12 Dec 2027 13:26:29 +0000
asID: 17561
IP address blocks: 154.203.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76615 (0x12b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:26:29 2024 GMT
Not After : Dec 12 13:26:29 2027 GMT
Subject: CN=676ffc89-ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:8c:55:85:4f:1a:6f:37:04:09:90:1f:cf:
6c:e8:ca:3b:40:7b:22:b9:e8:31:05:b2:a1:bd:1e:
24:8a:ca:e5:35:a2:1e:0c:00:81:19:82:e4:33:72:
e3:9b:97:f3:42:46:f1:c4:cf:64:5f:d7:a4:f9:f8:
03:64:7f:ce:2d:cb:15:55:a6:54:80:1c:4d:57:b5:
5c:a3:ea:c3:e4:d1:02:b5:c0:0e:7f:80:d7:50:9b:
28:b4:c9:96:be:1d:6c:c4:35:9f:16:18:3f:65:47:
ba:b4:d2:38:62:e1:71:2b:d0:02:11:e9:5a:f1:79:
9a:2a:99:fa:8d:51:5b:fa:f4:c5:c7:3c:3b:fe:ac:
8e:8e:3c:b7:8d:b0:c6:40:46:1e:bb:3c:75:e8:36:
ab:32:2d:e8:a5:c9:60:38:7f:eb:44:2c:b1:b8:2e:
1e:5c:e3:b4:58:12:71:fc:34:9c:28:58:13:79:64:
80:fb:f4:8b:91:32:d1:e0:8a:69:89:65:6e:60:d3:
69:c0:3b:0f:ad:e3:45:89:aa:37:b7:b2:74:bb:c7:
bb:89:72:2a:35:ea:a0:8c:ac:af:9a:55:47:cf:b6:
ce:62:b8:47:8b:fa:0d:0e:91:d6:18:31:4c:c7:06:
8b:8f:d0:1e:a9:d0:39:26:f8:9f:87:94:db:71:fa:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2E:27:0D:5C:2C:77:05:5D:7C:48:97:22:83:EF:86:99:4C:7C:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AD7D28EC51F11EFA2DB9196762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:25:21:b5:96:f6:b1:9c:1d:13:e6:ff:fb:da:10:9c:8f:4b:
7d:65:cd:76:c5:90:54:0b:c0:b0:4b:3c:43:00:cd:2f:f1:65:
ae:3a:72:36:92:00:41:4a:ab:97:61:e4:19:93:7c:ae:da:0b:
50:59:9e:e5:ee:cc:11:2f:15:79:45:a1:40:7f:e9:c9:e9:d6:
4b:a2:94:8e:7e:44:90:34:4f:ba:86:de:d8:89:b7:7c:e0:2d:
31:88:df:05:f1:38:44:84:ec:ca:ee:00:57:bd:97:b7:16:d3:
7a:4a:b4:50:eb:e7:68:30:21:22:5f:24:40:fc:ea:3d:70:f5:
07:86:11:8a:22:f6:af:a8:bc:e6:c6:89:fe:c6:26:47:53:73:
15:88:7b:70:1a:4e:fb:3e:a3:f9:23:41:5b:6f:04:11:a0:65:
c9:a0:98:08:69:23:02:a0:6c:72:27:15:e6:db:a4:9d:78:5b:
26:28:05:e8:28:f2:6c:ad:95:aa:34:4e:71:60:8d:28:11:de:
10:35:f5:9c:2d:0a:ac:ee:29:e8:41:75:3c:7e:f9:62:34:b9:
0e:0f:6c:df:c3:48:15:15:89:1b:c1:04:7b:eb:17:83:59:3f:
90:6d:d9:5f:6f:f6:0c:bc:5a:fa:c9:b0:e0:6b:98:7f:29:e1:
79:40:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:57 2025 by rpki-client