Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F21628BEDE11EFBFBA1071762E951A.roa
File: 63F21628BEDE11EFBFBA1071762E951A.roa (raw, json)
Hash identifier: xFaB1kHnTeR5rNo1Y53bHt6KNMvbZO+0lBtSqmlgWyw=
Subject key identifier: 2B:FF:72:DD:8E:56:69:01:C8:57:BC:5B:E9:AA:A2:23:9D:96:21:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F21628BEDE11EFBFBA1071762E951A.roa
Signing time: Fri 20 Dec 2024 14:26:24 +0000
ROA not before: Fri 20 Dec 2024 14:26:20 +0000
ROA not after: Wed 25 Jun 2025 14:26:20 +0000
asID: 55020
IP address blocks: 154.84.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73032 (0x11d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:26:20 2024 GMT
Not After : Jun 25 14:26:20 2025 GMT
Subject: CN=67657e90-dbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:aa:60:6a:ea:43:1f:46:63:5b:e9:c7:7c:
21:4a:50:23:bf:a3:cc:dc:80:45:cf:cb:a2:fa:63:
a8:28:d9:94:76:f0:70:d0:57:1d:d9:c6:89:47:d3:
5a:08:7e:58:4c:e7:fe:ef:c9:23:e5:c2:7f:58:cf:
9a:2f:85:76:f7:76:6f:a7:a5:6d:3e:03:3d:5b:a9:
de:b9:cc:82:af:59:14:ca:8a:4c:2b:48:6b:5e:ba:
dc:0a:be:e2:6c:09:eb:88:19:dd:d9:40:71:c5:c4:
71:14:c2:f4:7b:8d:76:8c:68:b7:f8:a9:6c:6c:cf:
b1:b2:0b:a2:3b:0f:e7:e7:2b:06:71:30:9d:56:b9:
87:66:8f:46:87:d6:e8:14:e6:c0:ac:80:3f:4b:68:
a7:d6:9b:0c:cc:4a:89:01:dc:12:c5:35:85:88:95:
14:ed:09:94:b7:e3:42:05:e1:08:6f:0a:6e:99:03:
f6:09:d5:3d:c5:ef:c3:42:f2:92:8a:92:04:7a:30:
06:d1:aa:02:5a:f0:81:88:05:de:23:f2:06:46:e9:
2d:c2:8f:3c:00:88:2e:43:93:6e:71:ce:02:3f:c0:
c2:b0:83:b0:3c:26:cb:4c:e0:d2:5e:bc:46:1f:b5:
1f:db:a7:0f:f1:e4:7f:5f:57:30:87:ae:4d:a5:88:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:72:DD:8E:56:69:01:C8:57:BC:5B:E9:AA:A2:23:9D:96:21:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63F21628BEDE11EFBFBA1071762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e9:ed:7f:9f:23:98:41:e0:2a:92:20:37:4d:43:e2:26:78:
8a:fe:57:22:04:4a:2c:ee:5a:ac:22:b1:a5:2b:fa:45:5c:e4:
a0:ce:5a:7d:6f:75:b0:29:b2:b8:81:8d:3f:c7:ea:c3:e7:93:
43:00:10:93:c2:f1:88:76:79:6b:91:25:b3:d8:36:90:3a:0d:
65:27:cc:6f:22:a7:34:ce:a1:5c:ce:16:cf:98:df:c9:20:aa:
8e:36:35:04:2c:7d:28:35:6e:88:f1:01:e5:2d:c8:95:53:98:
0e:be:45:7c:f7:36:98:b6:d4:50:2b:15:35:ba:59:38:03:6e:
0b:e1:66:46:60:14:09:8b:11:4f:95:ff:cd:00:c4:39:47:45:
b4:9a:a5:5e:64:03:f9:09:36:ec:b5:36:82:ff:16:84:e9:56:
20:5d:a4:3d:e4:fd:fc:ca:d4:98:f4:5e:8f:be:63:a2:67:98:
7a:c4:46:ff:35:4c:5e:37:2f:9a:c5:cd:98:5f:c0:64:95:cf:
80:d6:69:11:fc:68:44:60:29:d7:c2:99:91:81:8a:3a:b9:51:
26:3e:8b:f7:2c:ed:a1:66:4b:d1:70:66:99:6c:ac:ad:bc:c1:
bf:bb:98:1a:61:0b:f1:1b:b9:ba:ac:5a:c1:34:f4:7c:7c:65:
62:04:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:50 2025 by rpki-client