Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72493180C26B11EFB717526F762E951A.roa
File: 72493180C26B11EFB717526F762E951A.roa (raw, json)
Hash identifier: qIRVHJg+1ESF4IoML+NZZTx5ESWs+S274sACNtFNxYs=
Subject key identifier: A4:53:C7:7E:8B:1F:83:DE:47:B8:E2:5F:4A:64:0A:4D:81:6D:BD:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012426
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72493180C26B11EFB717526F762E951A.roa
Signing time: Wed 25 Dec 2024 02:53:41 +0000
ROA not before: Wed 25 Dec 2024 02:53:37 +0000
ROA not after: Wed 10 Dec 2025 02:53:37 +0000
asID: 984
IP address blocks: 154.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74790 (0x12426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:53:37 2024 GMT
Not After : Dec 10 02:53:37 2025 GMT
Subject: CN=676b73b5-ec07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:56:71:4e:34:98:eb:f5:29:17:04:44:5c:
55:03:72:75:30:51:60:3c:9f:cd:37:4b:1d:c5:64:
61:4a:5d:32:1f:ca:e9:96:6d:6a:64:c6:c8:76:0c:
f2:92:4a:ef:4c:82:62:18:7a:08:3d:ea:ac:40:71:
dc:fe:0c:de:a5:db:04:d7:77:19:36:19:18:57:51:
67:9b:b0:75:17:f8:33:82:bb:f0:63:69:a7:40:1e:
aa:75:0c:69:22:e0:9c:ab:98:7e:6f:bb:68:0d:f8:
6f:f0:28:d3:9d:b8:84:86:40:b5:fd:2e:45:1a:ee:
b3:ff:ab:86:ea:d4:d0:f3:0c:3f:eb:2a:23:bd:97:
e2:8f:fe:27:1a:c0:85:44:f8:2e:10:4c:67:92:c1:
80:5d:eb:7a:fd:e2:54:c1:14:0f:ed:bc:de:de:25:
8f:20:85:e1:8d:dd:20:bc:83:1f:b2:52:7b:b1:68:
4b:a9:08:d9:72:5d:21:0a:98:8b:a8:b7:d1:0d:15:
b6:f3:bb:75:af:a4:ef:0e:56:26:f6:ef:66:97:c6:
b4:ad:99:7c:d6:a1:db:be:35:bb:da:ca:46:49:b1:
81:0d:31:48:4d:7e:64:da:f7:1c:1a:88:c8:f0:55:
78:fe:6f:98:6b:9a:f9:00:b7:e8:a6:c1:cc:bc:a5:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:C7:7E:8B:1F:83:DE:47:B8:E2:5F:4A:64:0A:4D:81:6D:BD:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72493180C26B11EFB717526F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
12:88:f8:df:84:fc:f7:7d:de:db:05:33:df:27:fb:2f:29:f6:
37:a5:da:db:ce:71:b4:3d:ba:c9:7a:1d:66:6d:dd:98:8d:01:
e9:1a:db:e7:da:99:29:db:a1:b6:e4:76:30:04:69:67:48:b6:
0d:6c:4d:ce:ac:a2:e1:9f:d9:e1:db:de:62:de:c1:17:a3:17:
39:66:f3:5b:c4:ea:9e:bf:c1:5c:3d:80:3d:bf:b8:c1:e6:d8:
91:87:9f:eb:c6:70:4e:54:b5:61:5e:31:df:2f:b8:89:ab:9c:
db:95:ff:bb:e4:97:ae:75:5f:04:33:90:3d:f9:b3:55:04:fd:
68:7e:79:3f:c8:07:07:d3:f2:39:94:b8:a2:e6:46:9c:d2:53:
43:94:7c:06:57:a3:da:42:cd:a1:dd:82:78:53:aa:d0:1d:7c:
fe:22:9e:ae:6c:2c:50:4a:49:96:fd:db:b2:50:ad:05:bd:64:
1e:89:7f:be:a2:c1:2d:c4:82:f1:dd:82:7f:85:b0:b9:2c:1c:
3b:e3:f5:9f:ab:0d:b0:61:8d:13:6c:34:8e:95:79:94:d1:a2:
ea:10:46:96:cf:af:ad:07:76:56:71:73:5b:43:0d:ed:d8:7f:
53:f5:99:60:08:61:43:ea:99:ad:8e:67:ae:bd:06:3a:53:98:
b8:6e:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:36 2025 by rpki-client