Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BF3F14C38111EFADB1EA51762E951A.roa
File: 66BF3F14C38111EFADB1EA51762E951A.roa (raw, json)
Hash identifier: b7K+EzJmK528RFJMy5M8rk8cpc7Y7tTPOCcc1a+VWPQ=
Subject key identifier: C7:0E:A6:2C:3C:CB:59:28:EE:B1:80:84:5B:AA:43:D2:AB:3E:C3:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012762
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BF3F14C38111EFADB1EA51762E951A.roa
Signing time: Thu 26 Dec 2024 12:03:21 +0000
ROA not before: Thu 26 Dec 2024 12:03:18 +0000
ROA not after: Sun 12 Dec 2027 12:03:18 +0000
asID: 17561
IP address blocks: 154.94.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75618 (0x12762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:03:18 2024 GMT
Not After : Dec 12 12:03:18 2027 GMT
Subject: CN=676d4609-5bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:4b:7d:e1:1e:74:56:83:ec:29:8d:a7:5e:
4d:4e:2d:d8:66:48:68:4d:99:3e:42:a0:9a:36:89:
75:89:70:a5:e2:0c:c6:78:24:48:dc:26:f6:1b:57:
3b:5f:10:d8:8e:37:b6:ae:e0:d7:46:78:6b:a1:10:
96:f8:26:b1:c5:9c:04:a4:8c:49:ba:a5:b9:0d:a4:
8b:88:27:d6:3a:b3:45:19:b3:a6:9c:1e:4d:c2:88:
df:72:ee:99:ed:f8:82:5f:89:37:63:a6:60:5b:54:
e3:a9:4f:29:ed:c7:54:fc:56:35:a3:29:48:ee:3e:
75:ab:06:dd:91:93:9c:12:ab:1c:41:45:ac:a1:08:
e6:3b:51:2e:1d:28:c5:98:09:a9:70:59:58:55:f0:
6a:7e:a7:a9:cb:3b:31:d2:bb:dc:d9:8e:33:29:ba:
08:df:05:9e:bf:d4:1f:32:62:94:ac:e5:a8:ca:ea:
98:89:1f:5a:e5:22:f0:46:cc:b3:1f:b2:bd:39:df:
ee:41:a3:59:4b:0e:3d:8b:a3:b5:f2:4f:c1:7f:b5:
d8:4b:d6:7c:2f:ae:19:ab:49:d7:6f:23:50:cf:e6:
4c:40:a0:c7:ad:8f:58:1c:74:9f:5f:87:b3:50:f3:
f6:68:5a:43:37:c3:50:da:10:2b:c0:04:03:fc:e9:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:A6:2C:3C:CB:59:28:EE:B1:80:84:5B:AA:43:D2:AB:3E:C3:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BF3F14C38111EFADB1EA51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.200.0/24
Signature Algorithm: sha256WithRSAEncryption
39:03:4a:6e:78:82:df:db:e7:a8:45:5f:3d:89:73:69:04:fe:
2d:f9:95:39:f5:09:02:e8:8e:6e:e2:43:47:e6:c4:d7:d0:ae:
9b:6a:3c:e7:0b:4a:3b:59:73:2d:53:d1:93:38:83:74:d4:a3:
fd:e0:67:1b:f1:42:5a:27:df:4e:be:35:76:59:fd:47:e3:49:
c6:26:b4:83:d7:a3:04:20:91:1a:ab:15:a1:6e:84:c1:72:2b:
10:7f:24:e3:03:92:a7:e1:0f:0d:fd:c6:b5:e0:5c:8d:84:23:
e8:06:7b:4b:af:6e:bc:82:0b:0b:e3:de:8e:b3:f8:7a:cb:fc:
73:9b:0d:ab:34:c7:d7:3e:57:fe:16:a2:04:6a:a9:a1:ea:32:
3b:10:6e:df:48:a8:bb:62:8e:a5:18:11:9b:3b:35:d4:b8:c8:
73:fe:10:74:3d:a0:c0:af:59:4b:ff:72:a0:88:eb:b4:75:b6:
a4:67:8e:97:4d:ed:78:c4:2b:0a:0f:3c:6c:2c:2a:40:fe:18:
36:d4:76:3e:50:8c:c4:e6:63:83:4f:11:ff:b3:f4:9d:b3:2c:
58:ae:ac:c9:ce:b5:64:68:e8:47:c4:99:f7:ec:7a:7f:fd:95:
50:7a:54:1c:e4:9f:59:52:7d:79:ab:ee:c7:d3:0b:00:67:49:
cd:4f:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:06 2025 by rpki-client