Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75BCBC12C61A11EFBCCAD14B762E951A.roa
File: 75BCBC12C61A11EFBCCAD14B762E951A.roa (raw, json)
Hash identifier: yg5VnY45iVy5E4AOAcOQbUM4oPKXo0GQDW9k2bqFhiw=
Subject key identifier: 69:69:C9:B1:19:80:41:FF:3E:8F:AD:37:0E:58:18:FD:E5:E4:4D:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75BCBC12C61A11EFBCCAD14B762E951A.roa
Signing time: Sun 29 Dec 2024 19:24:02 +0000
ROA not before: Sun 29 Dec 2024 19:23:58 +0000
ROA not after: Sun 12 Dec 2027 19:23:58 +0000
asID: 17561
IP address blocks: 154.217.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77622 (0x12f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:23:58 2024 GMT
Not After : Dec 12 19:23:58 2027 GMT
Subject: CN=6771a1d2-34fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:ad:1b:d2:eb:e7:0d:ca:24:f1:18:50:53:
9a:8b:f9:cc:b3:a4:08:f6:3d:1d:9b:55:8a:95:bb:
20:5e:0b:93:f6:f0:fe:85:b6:b7:2e:b5:7e:6d:90:
11:74:2c:6f:29:7d:15:3e:ed:33:44:0a:bc:b5:80:
7b:9e:b3:16:09:ae:c3:d4:95:5c:cc:e5:fd:09:dd:
be:2b:6c:3a:99:2e:99:a0:09:4c:bf:91:d4:cf:49:
32:85:25:5c:b9:fd:7e:4e:b8:e4:87:e1:69:54:0d:
3e:22:48:20:3e:13:4f:36:a6:17:ca:fa:11:20:46:
d0:ef:2d:48:75:63:dd:2d:28:c8:b5:af:95:b5:15:
20:78:e4:12:24:a6:80:8e:3f:2b:13:1c:6d:79:8f:
ee:e9:7f:af:8b:00:bb:d2:59:28:f7:ca:0a:29:2f:
28:3f:f3:ca:14:de:4a:25:42:a6:d2:e0:42:25:eb:
9f:24:50:f3:f5:80:6f:1d:4e:d2:3b:40:a1:f0:4c:
0f:eb:74:90:b1:ba:36:dc:2d:d9:0e:5e:69:0d:37:
89:18:f8:35:56:40:ee:1e:db:80:10:5c:22:a0:32:
10:b8:7d:6a:3f:1b:89:4a:fa:cd:70:f3:fa:61:29:
24:a9:a2:a0:fa:95:69:36:af:aa:a8:d3:c2:7f:d4:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:C9:B1:19:80:41:FF:3E:8F:AD:37:0E:58:18:FD:E5:E4:4D:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75BCBC12C61A11EFBCCAD14B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:03:3d:c7:9c:68:ee:b5:1a:60:b3:89:ac:17:c9:86:af:29:
48:3f:fa:6d:4f:da:c2:33:ed:5d:e5:08:0f:63:52:0d:26:a2:
d0:25:0c:79:88:ad:88:ca:52:59:a3:bb:b9:c8:7c:7d:81:79:
a2:5f:9f:f2:23:00:f7:2a:16:14:f3:f9:9a:9a:ab:92:74:95:
90:b6:fb:3a:06:e3:c0:42:6d:07:90:30:85:97:ff:ac:a3:10:
9c:34:24:81:1c:af:53:48:6f:6d:c5:89:4e:b8:6b:97:76:7d:
22:22:bc:cd:04:a2:7c:f4:74:cd:f6:f0:e5:e3:af:a3:15:27:
14:fe:77:8d:96:d7:ac:42:74:32:56:22:14:d3:85:09:a7:68:
4e:23:fd:15:7d:f4:aa:58:b2:32:bf:71:0b:07:3a:17:f6:f2:
66:41:f5:94:df:63:c1:e1:cc:45:63:d2:a5:7b:72:8e:da:6b:
26:a0:6c:be:ca:8d:b3:00:ac:d2:52:ce:54:bb:aa:86:5d:74:
5c:d8:5b:cb:d2:2f:e7:ca:a5:de:35:03:fa:81:19:aa:27:19:
96:4f:ee:0d:6d:05:45:18:37:22:e8:f4:56:cb:3c:f3:6e:0d:
e2:2c:4e:97:ab:73:a4:15:7c:e4:df:9a:87:16:57:9b:85:fa:
83:a5:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:51:17 2025 by rpki-client