Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63D59E86C42311EFB2447A60762E951A.roa
File: 63D59E86C42311EFB2447A60762E951A.roa (raw, json)
Hash identifier: emp1tYfLQ6ScbxynkHexIy+tfGp3dh7eFAztndNyHjY=
Subject key identifier: A0:FC:6E:FF:BD:54:88:56:7B:AA:06:C5:8D:9F:55:1A:92:52:7A:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63D59E86C42311EFB2447A60762E951A.roa
Signing time: Fri 27 Dec 2024 07:22:55 +0000
ROA not before: Fri 27 Dec 2024 07:22:51 +0000
ROA not after: Sun 12 Dec 2027 07:22:51 +0000
asID: 17561
IP address blocks: 154.202.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76253 (0x129dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:22:51 2024 GMT
Not After : Dec 12 07:22:51 2027 GMT
Subject: CN=676e55cf-24e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:17:a3:be:52:5b:8c:6c:3f:50:4d:b9:87:
27:b5:c5:34:f1:ee:66:24:74:31:38:e4:29:90:f1:
98:85:f8:4d:94:ad:cc:c4:a1:27:9d:4f:0c:be:72:
be:55:4c:1d:e0:55:6c:e0:c9:2b:3b:9a:cd:45:e3:
00:c3:7f:de:98:12:05:f0:ae:bb:54:4e:72:ae:09:
f3:8c:59:a1:53:0b:78:3a:7b:e0:6c:1d:11:67:fe:
7b:34:9e:32:2e:23:4a:b9:79:4d:a0:c8:9c:32:da:
cc:31:b4:fc:9d:62:0f:99:e2:22:d8:fe:c5:92:4c:
ef:ba:52:61:9e:66:55:82:5b:55:b2:62:39:73:75:
8a:47:f2:23:84:f5:57:f2:56:ce:b2:a7:7d:07:40:
b5:b6:5b:0f:71:56:1f:a8:3c:bc:56:fd:63:49:37:
49:90:c5:49:f2:4d:e5:72:a7:2d:77:cd:13:2a:bf:
5e:8f:88:e7:4d:51:12:51:f6:6c:d1:cf:8e:06:b9:
5b:64:08:6a:78:5f:92:67:0c:c6:a6:53:32:0f:c5:
8e:ae:78:d4:28:f4:c7:f7:53:e7:cb:3c:d2:cb:d3:
99:83:3e:75:3d:bb:b1:61:17:86:f2:de:d1:1d:9b:
ad:3e:8a:d5:bb:d4:e9:91:4e:1d:2d:e7:69:78:d0:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:6E:FF:BD:54:88:56:7B:AA:06:C5:8D:9F:55:1A:92:52:7A:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63D59E86C42311EFB2447A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:54:cd:95:48:3c:c1:c7:fb:f3:f1:3d:ff:93:6f:28:bf:67:
76:6a:03:f7:70:b2:7e:62:a2:a5:21:fe:48:ee:92:0c:0e:86:
79:de:f3:41:5b:bb:d6:5f:60:94:6c:95:eb:3b:14:f4:75:f7:
c2:95:4c:c6:33:c1:21:10:cb:d0:2a:6c:60:5a:48:24:63:39:
21:9d:4f:17:f0:72:f7:85:63:b1:af:a7:35:0c:b1:7c:69:b6:
d3:df:95:8b:21:6f:7f:08:f1:0d:07:b5:f8:8c:a2:5e:28:40:
5d:7c:e0:84:a6:fc:28:4f:04:0a:79:ea:5f:16:a8:19:bd:d5:
d4:f7:c7:6d:a1:3c:13:4d:ff:97:f6:1e:c6:31:e6:4c:cf:4b:
b1:d1:75:38:89:c4:7b:17:1b:27:cb:85:c6:aa:d2:5b:a9:48:
c4:94:0b:bc:9b:e0:55:56:0e:7e:b9:b4:5e:52:ea:e6:62:0a:
fc:71:92:0a:99:bc:0d:c0:23:d2:4e:9f:10:31:7c:c1:ac:79:
a3:18:20:02:6d:f6:c6:99:21:8f:a9:fb:69:f3:13:cc:4d:93:
99:91:a6:8e:7c:55:db:c1:19:4a:75:73:87:b9:c3:20:1f:68:
57:b4:58:54:b6:56:c9:cf:5e:51:c0:8f:5f:7d:3c:d9:7e:3e:
69:d6:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:17 2025 by rpki-client