Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75855DA0C62211EFAAE1197D762E951A.roa
File: 75855DA0C62211EFAAE1197D762E951A.roa (raw, json)
Hash identifier: SMp5yijBTvXT48QoDGUdAekq9n7HKdV0MonfPBRHQtc=
Subject key identifier: 6E:C5:36:FA:C6:68:6B:A2:F1:9C:51:64:5B:30:F0:C1:20:A3:F9:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75855DA0C62211EFAAE1197D762E951A.roa
Signing time: Sun 29 Dec 2024 20:21:17 +0000
ROA not before: Sun 29 Dec 2024 20:21:14 +0000
ROA not after: Sun 12 Dec 2027 20:21:14 +0000
asID: 17561
IP address blocks: 154.217.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77688 (0x12f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:21:14 2024 GMT
Not After : Dec 12 20:21:14 2027 GMT
Subject: CN=6771af3d-2567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:3d:e8:1d:aa:1a:ac:04:82:cb:2b:3e:4c:
5f:6a:45:80:97:f3:f6:a7:fe:9b:85:3d:6e:39:e4:
c8:39:10:23:5a:59:4b:46:41:79:61:39:8e:c3:ce:
f8:96:3a:cb:49:03:21:8d:2e:da:f8:43:f0:8b:aa:
81:1b:f8:3a:3d:43:08:5b:73:8e:27:5f:b8:9b:f5:
59:eb:ea:f5:34:f1:f7:b6:78:4f:4c:70:9d:a4:0e:
73:5c:14:93:f1:38:46:04:66:0a:ae:64:cf:3a:09:
de:6d:5f:c9:8e:03:db:f5:99:a6:80:83:61:f8:46:
36:79:f4:e3:13:d1:ec:67:9d:6e:5e:97:33:ed:72:
cb:9b:cc:78:6b:95:08:d2:42:2f:73:c3:62:38:64:
c1:76:b4:54:1a:b4:42:1e:dd:ea:5c:7d:a0:82:90:
44:ef:c8:96:d7:63:4c:70:6d:3b:65:89:9d:fb:f4:
0f:69:3c:4c:33:66:49:52:63:11:7b:b8:e6:85:2b:
95:5c:a2:80:fd:cf:69:1c:49:dc:82:8d:99:68:ec:
44:58:28:ac:a0:cb:db:01:bc:a5:83:ee:d9:1f:f4:
6c:da:6c:bf:bc:1d:c1:86:86:a2:7d:37:99:2c:c4:
86:42:66:47:fe:24:a0:69:d3:84:89:51:97:00:d1:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:36:FA:C6:68:6B:A2:F1:9C:51:64:5B:30:F0:C1:20:A3:F9:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75855DA0C62211EFAAE1197D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.159.0/24
Signature Algorithm: sha256WithRSAEncryption
99:db:62:e2:43:ae:3d:c4:56:9e:62:e4:53:15:e3:43:c6:93:
a4:58:83:5c:1f:dd:a7:6e:6e:1c:f0:4e:82:b7:3e:f9:99:55:
d4:32:fd:50:06:bc:62:fb:ee:15:de:74:6c:92:e7:72:67:ae:
a4:f8:24:5c:54:c4:74:b1:0e:14:3e:7d:8b:ff:57:c9:d6:96:
af:a2:7c:25:33:4e:c9:db:de:86:40:4c:51:af:de:62:dd:09:
68:80:b2:88:c3:a7:0c:e4:e8:73:d0:b2:f7:f7:bb:f3:60:6b:
7d:cb:be:b2:e3:30:af:bc:5d:bf:56:b2:af:6e:f0:b1:81:53:
6e:1d:b9:47:f3:78:da:e5:f2:a2:b9:22:eb:5c:53:68:9d:9f:
80:5f:ef:c2:1b:e7:63:4e:02:4a:9f:50:1d:dc:97:bd:e3:b9:
3f:ce:2f:ec:46:14:9a:f1:4d:18:09:09:89:7f:f7:39:e0:a0:
45:38:57:b4:f1:3d:92:b8:5f:15:94:07:1f:8d:72:74:cf:7b:
01:1c:b1:12:bc:9f:97:cd:31:87:f3:a8:34:a7:0e:37:ac:bb:
38:63:7e:64:f2:98:1a:83:ba:37:5e:30:86:d1:6c:b6:37:3c:
a1:8d:1a:65:31:c6:1c:50:c8:4d:0d:b3:a0:9d:3c:fc:00:4b:
38:ac:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:52 2025 by rpki-client