Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606FCEE8C41D11EFB7E37EBB762E951A.roa
File: 606FCEE8C41D11EFB7E37EBB762E951A.roa (raw, json)
Hash identifier: 0s8hoPZFInFU7VDfH523Wi0gc42L97biKEM8eWlpWTc=
Subject key identifier: 26:C1:FA:38:C7:43:5F:58:3D:E9:16:E1:93:02:18:1C:A3:F2:47:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01299B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606FCEE8C41D11EFB7E37EBB762E951A.roa
Signing time: Fri 27 Dec 2024 06:39:52 +0000
ROA not before: Fri 27 Dec 2024 06:39:49 +0000
ROA not after: Sun 12 Dec 2027 06:39:49 +0000
asID: 17561
IP address blocks: 154.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76187 (0x1299b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:39:49 2024 GMT
Not After : Dec 12 06:39:49 2027 GMT
Subject: CN=676e4bb8-01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:99:ed:af:ca:6b:4f:0e:ec:65:d4:c6:cf:
1e:f5:05:21:00:4f:92:15:88:c3:50:b6:f9:cd:18:
9e:e3:76:4d:4a:27:03:93:ae:ba:6c:a8:fa:19:56:
15:ec:ce:e7:53:d4:9c:fd:6b:fc:82:a7:d1:93:2d:
db:8d:40:e4:2f:cb:4d:20:0e:9e:2d:ec:3a:af:d9:
f0:0e:49:08:0c:c0:17:e0:ec:1c:44:db:42:6f:2d:
06:7d:db:af:e9:20:33:2d:a1:e7:fb:73:ef:e7:13:
69:6a:1e:7e:00:db:99:c9:8a:bb:d2:8d:1c:23:15:
48:c6:eb:fe:a7:48:86:76:9d:19:98:18:af:d4:90:
1b:ae:38:f2:2d:ca:e4:a8:16:36:55:d0:08:9d:d3:
0d:fb:b6:08:ac:8d:03:19:80:e6:a3:fe:0f:b1:52:
17:fd:14:e7:2d:19:36:1f:1a:5b:e0:a7:b9:4d:e5:
4b:e4:e2:21:70:34:56:5b:07:76:91:57:8b:11:fc:
b0:d6:f0:50:02:5d:e7:67:6a:23:9f:3f:18:b0:9b:
01:99:9b:a3:5d:f6:7f:d4:3e:3f:61:b5:9c:c2:7f:
ab:79:a9:47:db:06:63:fa:a9:ab:f8:96:02:dd:0a:
27:65:9f:2e:4b:67:39:aa:aa:21:41:d6:ad:0d:ff:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:FA:38:C7:43:5F:58:3D:E9:16:E1:93:02:18:1C:A3:F2:47:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/606FCEE8C41D11EFB7E37EBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:91:f8:89:2b:c8:16:77:b1:8d:28:58:ea:99:59:5c:5b:4d:
1c:5b:c5:c9:c6:3c:13:e9:e7:ea:66:89:5e:26:88:1e:4f:5d:
a3:83:49:7b:96:ae:29:32:f1:c4:72:63:3c:78:a9:82:f2:0e:
8c:b7:5d:47:c6:ac:a7:85:ff:01:a9:87:49:95:14:fd:01:07:
12:d1:54:d4:7d:32:dd:c7:56:34:83:60:57:11:8f:20:39:34:
b4:f5:8a:33:e1:f5:5d:db:47:02:28:44:29:90:e5:e8:39:3f:
d9:10:cb:96:1b:8c:02:e2:68:e7:ac:aa:ab:c2:06:93:59:f2:
6b:0b:64:18:14:2a:aa:02:e5:f8:23:58:f5:d2:55:0d:55:25:
ee:37:4e:36:cc:2e:34:ba:63:47:ab:92:15:dd:47:f7:ed:67:
ee:8b:f4:68:91:b1:06:0c:64:27:de:78:1e:cc:8b:ef:f2:82:
de:5e:fb:92:77:9b:b9:7d:a1:65:53:4b:fd:08:b0:cd:e4:cf:
8d:83:31:32:0f:1e:cb:44:eb:94:b4:12:ea:a9:36:97:af:60:
3f:47:70:06:bc:7a:ca:a0:f8:1f:3b:5e:4c:c7:81:56:71:9a:
78:f6:95:20:89:66:ef:a3:0f:d9:7e:57:cb:24:3c:83:8d:04:
63:e4:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:13 2025 by rpki-client