Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A927982C5F911EFAC42017D762E951A.roa
File: 7A927982C5F911EFAC42017D762E951A.roa (raw, json)
Hash identifier: EzGqybtdJtiuyVAwVHZw1JzVGes9nTkE9hqiCgWRX10=
Subject key identifier: F1:B5:FD:4B:B6:AC:85:65:F5:BE:33:2C:53:74:E7:7A:95:06:BD:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A927982C5F911EFAC42017D762E951A.roa
Signing time: Sun 29 Dec 2024 15:27:56 +0000
ROA not before: Sun 29 Dec 2024 15:27:53 +0000
ROA not after: Sun 12 Dec 2027 15:27:53 +0000
asID: 17561
IP address blocks: 154.213.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77342 (0x12e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:27:53 2024 GMT
Not After : Dec 12 15:27:53 2027 GMT
Subject: CN=67716a7c-1b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:df:e8:5b:73:91:31:cd:08:49:34:86:df:
72:fd:8a:60:dd:75:0b:03:9b:7d:43:6b:fd:74:cb:
44:ad:03:24:60:04:af:de:c3:6a:09:5a:af:e1:f8:
de:e6:fd:9d:a1:a1:d1:5f:cd:2a:eb:1c:93:68:e3:
9e:07:51:43:9b:53:67:7a:65:f9:30:ed:fb:12:fb:
63:eb:4c:09:35:c9:6c:5b:f6:02:1c:3f:c0:db:b3:
66:0d:df:3e:a0:db:ab:1b:6d:99:0c:5e:63:6a:1e:
0c:a4:67:c5:7a:c4:d9:93:5e:5d:bc:bf:de:dc:fe:
66:0a:9d:d6:00:20:fc:49:a7:3d:b0:ef:1f:40:19:
22:2e:cd:d7:87:19:62:6d:cb:8c:c0:6f:d2:c4:a2:
02:f5:a2:e3:a5:3d:fd:ae:94:8b:21:7f:b1:b4:dd:
8e:35:a9:f7:09:06:d6:d1:25:ac:b8:0f:7e:3b:02:
10:c8:eb:e7:c0:ea:d4:e5:8a:d0:4e:7a:a8:9d:f5:
fe:f4:47:4a:df:84:6b:ea:42:54:67:d8:81:f2:ef:
97:72:8d:80:b8:1f:fa:9c:4f:ed:a9:b2:ef:38:db:
41:e0:be:f1:24:87:42:6a:d2:71:08:9c:3c:11:a6:
ee:94:2e:d8:1e:be:5a:f5:89:31:32:93:24:61:94:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:FD:4B:B6:AC:85:65:F5:BE:33:2C:53:74:E7:7A:95:06:BD:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A927982C5F911EFAC42017D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:9f:52:e9:db:7e:e2:9c:33:d8:e8:1c:cb:71:73:c1:43:5b:
b1:e4:cc:9e:4d:a0:a7:73:16:cd:85:06:51:ef:fd:3c:bf:4c:
be:8a:13:63:37:71:88:0b:cc:0b:04:99:89:5c:c2:d5:d5:84:
e2:5b:42:73:27:54:f8:27:8a:b4:55:50:4b:c8:be:0d:b6:f6:
7d:97:84:51:f9:1d:a5:97:b3:d3:71:f7:55:99:6a:eb:1d:42:
31:fe:ce:30:e1:b7:57:2c:33:49:be:0e:7d:aa:2d:38:ca:4c:
7a:d1:ae:5c:5d:dc:a6:17:ef:77:95:f7:5f:4a:f6:c1:75:25:
33:16:7c:be:2b:0d:df:aa:9a:65:39:61:88:22:ef:a7:d4:20:
c1:19:cb:bf:e3:ab:35:d2:e4:24:4e:50:b0:92:b5:a7:cb:64:
3b:4f:a2:ce:8e:d5:90:be:76:f8:8a:fa:65:a0:f7:12:18:08:
4c:d0:a5:4d:5c:f2:86:ba:e2:68:cf:e2:1f:70:71:34:39:9c:
98:00:dd:aa:6a:72:22:3c:58:bf:55:cb:55:f0:ef:58:45:2f:
6f:2c:2d:b3:56:b4:d3:7f:84:10:df:3e:14:3a:36:88:78:27:
f1:10:5f:b3:2a:76:79:34:26:b8:b6:ec:f7:5d:08:6c:28:a3:
32:84:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:59 2025 by rpki-client