Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C619E0C8BC11EF8BEF6D98762E951A.roa
File: 64C619E0C8BC11EF8BEF6D98762E951A.roa (raw, json)
Hash identifier: f22Fbu46QJ3mAnC/Zs0bnZDDiNSD05DRViZVR6upP9c=
Subject key identifier: 8E:D7:0D:21:7E:F9:9E:B8:BE:7B:30:F9:AE:B7:2C:70:E0:4B:C4:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C619E0C8BC11EF8BEF6D98762E951A.roa
Signing time: Thu 02 Jan 2025 03:48:14 +0000
ROA not before: Thu 02 Jan 2025 03:48:11 +0000
ROA not after: Mon 13 Dec 2027 03:48:11 +0000
asID: 17561
IP address blocks: 154.221.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78298 (0x131da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:48:11 2025 GMT
Not After : Dec 13 03:48:11 2027 GMT
Subject: CN=67760c7e-be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:05:6e:d0:8f:fe:31:98:ae:89:a4:09:76:
2f:da:e2:1e:08:49:1d:20:16:17:5b:90:c9:0b:2e:
e2:ee:ab:48:13:d0:f2:78:8e:0e:37:38:7e:c6:8a:
45:0d:c2:af:68:4d:33:b3:00:5d:e4:b4:6a:cd:57:
3f:7e:df:01:cd:b2:61:e3:b5:29:14:32:c3:c3:5e:
f2:93:c0:96:a6:9b:86:c9:ae:60:3e:6a:d8:50:a2:
da:af:2c:9c:96:48:1e:92:66:e5:f4:40:f5:04:47:
84:c6:73:0b:0a:5f:b7:72:36:dd:f0:a0:c3:bf:1e:
40:28:90:29:80:65:63:ca:b5:1a:cc:33:75:c7:88:
02:c5:a2:1c:9d:9a:c6:3f:b8:df:2f:a6:cb:42:89:
d1:93:46:d0:1b:81:03:ba:cd:70:36:d7:67:09:ea:
ff:10:3f:2b:e9:86:21:71:83:5c:44:9f:cd:ee:c1:
f4:6f:ee:6c:1c:d9:ff:a6:4f:72:f2:b6:a0:15:83:
84:5f:ad:04:12:10:17:44:f4:66:f8:35:8a:29:26:
fa:64:92:c6:3b:19:ec:ae:b7:69:98:fe:01:fc:ca:
91:2d:83:2e:d8:fb:03:8f:8e:e4:d1:27:81:67:5d:
a7:a9:50:b0:68:a3:61:04:84:aa:dc:8b:64:a5:7b:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:0D:21:7E:F9:9E:B8:BE:7B:30:F9:AE:B7:2C:70:E0:4B:C4:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C619E0C8BC11EF8BEF6D98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4d:25:4f:c9:c3:63:1a:4b:8c:35:5b:30:aa:d8:b9:62:d2:
56:17:6b:3d:82:1f:de:a8:c8:61:e4:3f:55:d1:a2:dc:1f:b6:
e4:21:c2:f4:05:45:ba:c3:a2:07:62:2f:be:8e:83:1e:4d:4a:
75:ce:51:6b:27:0e:0c:c3:28:f8:b3:01:32:c2:86:5b:08:a4:
a0:1b:28:d7:a5:07:aa:39:34:2a:4c:b1:8a:70:0a:f6:f9:d0:
a1:b1:b4:17:58:98:ec:a5:0b:a2:0f:88:42:f5:d3:1c:92:84:
36:77:53:17:ee:70:1a:06:e0:54:2b:c5:ac:85:60:e2:86:1d:
41:03:c7:d7:cb:4c:0c:45:0c:33:66:d1:5c:29:c0:b0:37:8f:
49:dd:87:ba:d2:c3:60:c0:58:5a:88:2b:bb:58:15:cf:97:44:
c0:04:46:c2:e1:b6:98:8b:42:57:dc:f1:e5:4b:d1:82:ec:9e:
c4:72:f7:7c:48:2b:cc:25:2b:82:d6:94:c7:dd:43:dd:3d:c5:
c4:a5:1b:17:fc:a2:9e:00:4d:87:48:9b:5c:9e:28:bf:fb:1b:
42:64:ba:75:ab:76:5f:7c:d6:d8:29:67:5d:76:b2:b3:d1:da:
38:11:71:1f:e8:17:d9:6b:c4:01:80:53:f8:88:8e:1f:c4:a3:
f8:0c:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:09 2025 by rpki-client