Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667C5470C3D511EFA8441660762E951A.roa
File: 667C5470C3D511EFA8441660762E951A.roa (raw, json)
Hash identifier: mEuQ5FPOFChO4ParVLuDpwfc9gwNiA4HTV1byvTmGp4=
Subject key identifier: 87:A9:C1:7A:89:A9:57:6E:AA:3F:8A:4D:92:71:75:CB:A9:66:51:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01286C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667C5470C3D511EFA8441660762E951A.roa
Signing time: Thu 26 Dec 2024 22:04:39 +0000
ROA not before: Thu 26 Dec 2024 22:04:35 +0000
ROA not after: Fri 12 Dec 2025 22:04:35 +0000
asID: 984
IP address blocks: 154.84.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75884 (0x1286c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:04:35 2024 GMT
Not After : Dec 12 22:04:35 2025 GMT
Subject: CN=676dd2f7-78ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:90:b0:53:73:ce:ae:11:56:13:ac:28:3f:
de:c8:5a:39:07:b7:0b:92:db:77:a4:5e:e2:28:64:
e7:e0:61:17:10:72:86:19:2d:9c:60:90:e5:2f:73:
2c:9e:bd:81:0b:81:80:c6:fb:9c:b3:64:00:c8:a8:
8d:ae:74:6d:cb:c7:6d:07:28:24:18:a3:98:de:0d:
2f:ed:25:64:29:73:07:b1:c9:6d:0c:ed:70:c4:67:
88:38:bd:4f:ec:bc:f9:a1:c4:30:49:ad:ba:f6:a5:
4a:7b:91:23:81:57:a2:a9:d6:52:c5:3a:0e:57:e1:
9b:b3:e3:06:a2:2d:f0:b4:cf:dc:d1:16:e6:e6:1c:
b3:bb:92:b7:0e:0d:40:de:8c:46:4b:02:db:b6:54:
c3:e4:ce:de:0f:d8:87:00:46:41:5f:5e:a9:48:9f:
fd:eb:97:f8:c8:02:b4:1d:01:3f:2e:df:36:9a:94:
15:80:5c:0b:56:76:14:7b:d4:c3:cc:28:a2:00:62:
44:49:9d:f6:5c:6a:e6:26:ab:de:ef:9f:ac:0d:a1:
14:94:17:76:17:33:ae:d7:7e:ca:f1:54:f9:93:e8:
fd:8a:49:11:35:c8:15:ec:7a:80:35:e7:f7:e1:21:
26:d6:2c:1e:dc:3b:43:bb:d1:62:40:f0:63:6c:69:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:C1:7A:89:A9:57:6E:AA:3F:8A:4D:92:71:75:CB:A9:66:51:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667C5470C3D511EFA8441660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:2a:da:17:22:e5:1c:fd:63:c8:23:d2:dd:e4:d9:83:75:
25:69:dd:cc:0e:3b:4d:3d:41:20:ef:e7:be:a3:09:be:a8:2e:
ca:58:c3:40:87:3c:ca:ad:94:9b:d3:6c:f2:cf:d6:5f:8d:d0:
53:aa:98:44:0c:5a:ab:bd:da:85:e7:19:ad:9d:63:a5:90:f3:
13:0c:4a:f6:35:55:05:75:43:9a:ed:ae:e5:8e:c5:13:d8:63:
fe:c4:b3:00:01:1f:96:80:4a:4f:bf:24:65:57:cd:3c:1a:3d:
64:62:8a:4a:e3:df:81:d9:b7:dd:db:a3:18:b5:7c:7d:d1:9f:
ea:50:0e:2a:e5:f5:b8:8a:0f:b4:56:6d:24:ac:f4:a4:3c:24:
9a:07:26:df:0e:16:e6:b5:01:b7:a5:8d:50:8c:87:fa:30:13:
0d:8b:65:88:4d:87:ec:d0:6f:f1:48:a9:7f:ec:36:5e:7b:1c:
e9:f2:34:a1:72:17:cf:73:61:1a:9c:d9:1b:7e:37:2b:d6:7b:
97:9e:21:7d:15:4f:56:a4:bd:5f:42:9f:da:d0:47:7e:aa:b0:
41:ea:10:b3:8d:1c:67:64:e1:4f:77:37:9c:68:5e:c0:d9:05:
d5:91:4f:ef:02:61:1a:c2:62:69:f1:41:79:76:42:0a:85:cc:
2e:c4:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:59:57 2025 by rpki-client