Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6102E8C36111EFB0701789762E951A.roa
File: 7A6102E8C36111EFB0701789762E951A.roa (raw, json)
Hash identifier: p9NkulCo3O2AYaEjc3aUK0887SbzJYljQ4rr8tp8fLk=
Subject key identifier: B7:D6:6C:5E:52:A8:72:7E:09:D5:A2:40:4A:78:C0:FD:64:B2:40:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01265C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6102E8C36111EFB0701789762E951A.roa
Signing time: Thu 26 Dec 2024 08:14:50 +0000
ROA not before: Thu 26 Dec 2024 08:14:47 +0000
ROA not after: Sun 12 Dec 2027 08:14:47 +0000
asID: 17561
IP address blocks: 154.91.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75356 (0x1265c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:14:47 2024 GMT
Not After : Dec 12 08:14:47 2027 GMT
Subject: CN=676d107a-1264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:4d:a1:09:95:56:55:bf:fd:63:d4:78:4d:
3a:39:99:ec:b3:e9:65:9b:45:92:23:27:bd:c7:e6:
67:c1:a1:a3:3b:fa:e7:fa:ba:ab:c1:23:52:39:84:
c5:c8:02:2b:97:f5:3c:45:c3:70:5a:0b:3e:ed:a6:
0d:75:8a:03:0c:fc:23:05:69:c0:c2:f4:96:12:11:
46:05:e1:91:35:d7:83:a0:d5:68:4e:bd:00:c3:cd:
29:7a:73:35:60:26:a0:59:63:54:ab:d0:2b:f6:ea:
4f:af:d6:ed:35:db:b2:9a:73:8f:f0:b7:ca:bd:0c:
15:69:90:e6:46:36:78:e6:d4:03:c6:b9:53:9f:41:
52:7c:5d:79:5b:8e:0b:21:8e:5f:ba:31:5b:64:1f:
bd:eb:d6:01:04:58:0c:55:dd:ca:7b:53:ee:45:81:
d7:50:a0:2b:1c:7d:3f:e8:9a:76:85:71:56:36:de:
7c:ac:28:72:b4:9d:d8:53:f1:45:41:42:f1:93:80:
f3:c1:c1:d5:ca:4d:4f:48:b7:8a:cf:4e:8c:36:1c:
78:4e:6b:a9:15:78:55:40:10:b3:a8:b8:89:ec:46:
79:7e:f7:cb:eb:a5:6e:a7:f5:b1:d6:5f:50:25:6c:
e9:83:4d:84:af:22:b1:59:9b:ed:1b:cc:f2:67:55:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:6C:5E:52:A8:72:7E:09:D5:A2:40:4A:78:C0:FD:64:B2:40:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6102E8C36111EFB0701789762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a5:9c:6e:f5:ef:27:31:86:3b:1f:9f:25:68:4c:e0:f6:6c:
4e:38:b0:13:5f:a5:7e:67:d0:7b:ec:66:74:3e:f1:76:1d:4b:
8b:30:d4:28:a6:fc:a6:bf:7a:79:3a:46:d4:bc:7a:07:1d:90:
58:2c:71:cb:12:7b:6b:39:68:9c:90:c6:7f:40:a8:38:8a:97:
52:64:3e:f5:20:fc:1c:71:fb:b2:42:29:d4:11:31:1e:df:89:
6f:f6:f1:2a:fa:c1:59:38:2c:43:f5:04:ed:0d:42:57:0b:98:
1e:92:60:89:58:59:23:2a:c0:54:fa:c2:1e:22:a5:b3:20:7b:
3b:ab:1b:9f:36:52:d7:7c:57:60:0c:b5:76:ae:e7:cf:a7:44:
a7:8b:dd:01:1a:40:a6:73:a4:42:a7:01:14:b6:37:43:64:28:
f1:d4:4e:2f:3b:7b:5e:88:8b:43:8b:c5:bb:f9:ad:01:f3:a0:
2f:06:71:bb:89:4b:74:8a:80:d1:ee:81:4c:7f:c6:4a:9d:7c:
4e:8c:4e:8d:9b:31:69:55:98:2a:7e:63:ee:96:ab:f6:2f:83:
34:06:b1:69:ad:5c:54:e3:60:4e:bb:96:e5:01:30:91:ce:d5:
3b:1c:f6:45:9b:a8:3a:50:1e:d5:d5:8a:ed:84:ca:3f:1a:a0:
dc:ef:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client