Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68BC7D0AC41611EFA2A7B18F762E951A.roa
File: 68BC7D0AC41611EFA2A7B18F762E951A.roa (raw, json)
Hash identifier: 0UrsebTEG5OMjdJTdd0l5TIkS1CiIgChNZT9643ElsM=
Subject key identifier: 39:63:7A:04:DE:BE:93:BB:A1:64:B8:4C:BF:18:F5:CA:62:7A:E8:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01295F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68BC7D0AC41611EFA2A7B18F762E951A.roa
Signing time: Fri 27 Dec 2024 05:50:00 +0000
ROA not before: Fri 27 Dec 2024 05:49:56 +0000
ROA not after: Sun 12 Dec 2027 05:49:56 +0000
asID: 17561
IP address blocks: 154.197.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76127 (0x1295f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:49:56 2024 GMT
Not After : Dec 12 05:49:56 2027 GMT
Subject: CN=676e4008-6578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:69:e3:24:ab:a3:d6:a4:48:12:48:46:e9:
f3:29:b9:ea:12:69:ad:ef:8f:d2:d5:39:09:96:40:
85:13:d6:6a:02:a9:cf:d1:6e:ac:50:b7:21:d0:75:
bd:2f:58:71:ad:3d:ee:04:2b:d3:5f:32:4d:59:29:
65:6e:a0:17:d5:3e:31:ff:6b:1f:8c:36:93:b8:9e:
e3:5b:67:53:50:63:72:02:ae:56:a5:8a:f2:65:f0:
79:cc:03:d2:cb:8f:0b:b0:8b:c4:97:cd:28:11:81:
ff:0c:82:38:27:7b:86:d8:7c:6b:ce:71:7a:33:28:
3e:06:43:4f:a6:49:6e:ca:b5:c1:6a:be:82:da:f5:
8a:d1:2f:98:55:f6:b2:8b:03:bb:65:13:76:60:7f:
9b:71:57:c3:7f:59:65:a1:1c:53:3d:bb:95:df:ec:
b4:83:c3:1a:1a:73:1e:57:60:df:cd:70:9a:06:a1:
56:eb:dd:80:0b:e6:68:dd:81:83:a8:1b:42:ae:2b:
45:fc:35:3c:ca:f3:ed:a5:9a:cd:ee:1c:6e:03:1f:
f1:47:71:fd:12:7a:7d:f7:5f:85:36:24:28:92:30:
c6:03:f8:6b:4f:01:d9:19:8e:eb:cd:93:37:64:09:
c3:76:f6:d9:17:f9:6a:02:c9:c7:6f:8d:65:9d:c2:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:7A:04:DE:BE:93:BB:A1:64:B8:4C:BF:18:F5:CA:62:7A:E8:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68BC7D0AC41611EFA2A7B18F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.31.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3f:08:eb:29:d1:34:94:31:07:5f:74:6f:c6:2e:d6:55:8b:
a5:db:c7:f6:3a:88:cd:e2:d4:17:10:48:19:22:85:33:b8:f5:
1e:5c:98:75:9e:cf:b3:03:6b:0c:57:70:0c:e0:1e:44:3f:90:
3f:70:37:99:9e:39:46:dc:85:11:af:ce:ac:cf:05:75:e7:c0:
49:80:76:45:6a:16:4b:5e:7b:c1:3f:ea:98:8d:cb:8d:97:ec:
6c:08:c0:43:1a:86:8b:39:7d:8b:1a:98:c2:79:79:42:ab:3f:
93:3f:92:a4:8a:7e:3c:46:44:75:d5:21:0a:5f:ce:9c:b3:a2:
8f:37:f0:0b:b9:d9:0c:a7:ac:54:44:92:83:c9:f1:2a:aa:08:
2c:52:98:08:61:bd:75:1e:06:a0:79:a5:3d:21:07:a0:ec:56:
a3:55:b4:19:d6:9a:57:81:7d:48:a2:65:d0:37:80:55:96:47:
b7:15:97:3e:4e:3f:18:38:e8:33:e6:fc:e9:74:f8:cb:65:0d:
fa:04:40:2a:8b:da:c6:95:20:76:c6:6a:81:21:62:5c:2c:fb:
e8:45:45:f7:6a:f1:aa:03:da:0b:22:e7:82:f9:2d:77:7e:53:
17:84:b4:71:c6:b2:35:e4:30:22:2f:d7:ad:ec:cb:f8:ef:a8:
f5:4e:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:11 2025 by rpki-client