Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB480A2C42E11EFB1FF6AA5762E951A.roa
File: 6CB480A2C42E11EFB1FF6AA5762E951A.roa (raw, json)
Hash identifier: CqYzR8YPZu7/BSAGeu1hc5ijpzfrU8xRrtp7j7x6K8E=
Subject key identifier: BA:B0:F7:DB:7B:C2:4F:1D:D2:C3:96:75:04:19:6F:9F:91:0F:02:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB480A2C42E11EFB1FF6AA5762E951A.roa
Signing time: Fri 27 Dec 2024 08:41:54 +0000
ROA not before: Fri 27 Dec 2024 08:41:51 +0000
ROA not after: Sun 12 Dec 2027 08:41:51 +0000
asID: 17561
IP address blocks: 154.203.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76357 (0x12a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:41:51 2024 GMT
Not After : Dec 12 08:41:51 2027 GMT
Subject: CN=676e6852-f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:ab:40:c9:1e:75:82:30:e8:58:6b:c6:ca:
ad:80:32:11:f1:07:a2:21:df:6c:f1:d8:ab:12:b0:
9c:1c:02:c2:db:53:b6:84:80:80:82:a2:71:72:28:
f2:b4:45:49:40:e7:3a:5a:1d:eb:5d:78:25:30:05:
63:59:49:8e:0e:63:1d:5b:62:6d:8a:a2:87:10:97:
9f:48:46:a7:25:bb:c9:d9:98:f4:7f:73:94:d0:9c:
4b:82:ad:db:53:c9:80:d4:52:11:e5:8b:98:ad:09:
72:a8:13:71:20:de:ab:97:c7:ac:1c:0a:4e:ba:2c:
4e:28:86:a0:b9:48:5c:7e:1e:4e:8f:87:2e:6e:e1:
82:21:62:09:41:de:f7:7f:1e:04:94:2e:3c:fa:4f:
3d:9a:d8:03:d7:c8:57:ea:ce:7d:82:de:7f:07:f8:
93:2e:c7:86:26:95:b1:57:8f:41:43:c3:1a:7e:bf:
9b:f2:2c:cd:f6:7d:73:e9:93:a3:75:2d:47:5b:f2:
47:3c:37:33:91:94:25:2f:d3:3a:c0:65:20:4e:e1:
2b:c6:a4:1d:0d:1e:38:05:47:16:33:7e:6d:6d:ae:
16:9a:e0:4c:d0:14:6f:f6:33:02:65:36:44:93:72:
22:7e:95:53:94:b9:0e:64:be:4d:64:34:d9:88:1a:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:F7:DB:7B:C2:4F:1D:D2:C3:96:75:04:19:6F:9F:91:0F:02:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CB480A2C42E11EFB1FF6AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.10.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6e:47:e5:5d:87:0b:63:2e:09:aa:a1:a7:b3:2a:1d:4f:30:
c6:b4:56:ce:90:de:be:6e:67:fb:92:88:0e:03:df:7b:e3:05:
1b:68:c4:04:7a:3f:ec:13:a2:4a:72:bb:9d:31:e6:4d:6f:fd:
22:66:78:30:73:6f:05:be:43:4f:87:e2:08:1a:b2:2f:60:aa:
8d:b9:1c:eb:b4:2b:97:9f:80:4e:25:f9:ad:2d:97:54:0e:78:
9a:19:5a:f2:39:1c:e7:6f:15:f0:33:93:d9:67:df:63:83:0b:
eb:9b:36:b0:08:f6:a4:c8:07:2b:7b:cd:0d:b0:53:ab:6f:b4:
51:74:c3:4e:03:a2:08:19:ff:4c:8f:ac:41:95:3b:b0:90:cb:
8d:69:d7:09:5c:e5:8f:8a:82:bc:93:bd:de:24:c3:96:40:04:
d2:d8:07:fa:18:d5:3d:5b:5f:6e:14:ca:bb:e9:43:17:af:61:
c2:b8:78:c8:1f:08:ec:1f:5e:d6:3e:cb:c2:ef:94:ea:40:4c:
d5:c1:ef:c7:ef:d0:34:58:6c:d4:fa:b2:95:67:e1:14:c1:79:
aa:e0:88:14:20:32:39:60:ab:16:db:58:66:5c:a6:90:69:cb:
30:13:42:0a:28:06:4b:cc:78:c4:87:b5:27:ba:52:b5:eb:ea:
87:96:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:49 2025 by rpki-client