Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842FCB30C54E11EFA74AF0BE762E951A.roa
File: 842FCB30C54E11EFA74AF0BE762E951A.roa (raw, json)
Hash identifier: NMU/6G/OVZLw+pmiHGO9qMqtwS5N4GldpwRmIu2C37o=
Subject key identifier: 1A:17:C2:29:C5:16:36:6C:2C:4C:34:AC:DF:89:AB:3D:C4:93:E2:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842FCB30C54E11EFA74AF0BE762E951A.roa
Signing time: Sat 28 Dec 2024 19:04:09 +0000
ROA not before: Sat 28 Dec 2024 19:04:05 +0000
ROA not after: Fri 12 Dec 2025 19:04:05 +0000
asID: 984
IP address blocks: 154.210.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77049 (0x12cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 19:04:05 2024 GMT
Not After : Dec 12 19:04:05 2025 GMT
Subject: CN=67704ba9-6b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:86:78:88:cb:d6:2f:88:10:e2:a5:3f:21:
17:81:33:61:b1:4f:52:68:d0:a8:74:2d:16:62:d3:
27:96:90:08:4d:d6:8c:3f:4d:66:af:59:fb:5b:d3:
60:81:10:4d:80:59:ff:d3:fd:f7:bc:0f:b1:0e:23:
0b:75:77:9d:ab:00:81:89:b5:92:b7:11:79:97:48:
d3:26:d1:a2:54:92:b0:fb:c8:77:76:08:8e:3f:ce:
5b:3c:55:e0:a1:c3:98:96:4f:78:93:02:4c:8c:d0:
85:a6:c4:0d:49:c9:ac:30:83:5b:73:35:4c:27:32:
6f:53:86:1d:84:15:90:fa:f4:af:97:c4:b2:2d:38:
aa:a9:6d:d0:d8:49:08:40:39:09:7d:2b:8c:82:ff:
4e:b4:a0:da:32:d8:42:c9:d2:be:0a:43:51:06:2e:
8c:ab:51:b0:d7:8e:07:9b:a0:21:5f:63:56:9b:61:
8b:78:97:22:ec:44:12:e2:2d:79:00:c4:e4:e1:9a:
bb:17:5b:4f:b6:a9:b7:d1:78:32:62:2f:bf:d2:ee:
2d:98:88:dc:ae:53:22:ec:77:12:51:23:13:56:7a:
21:cf:59:8f:72:b1:a1:a5:21:4a:bb:4c:c7:fd:33:
47:68:2d:e2:8b:9f:19:5f:d8:4b:a7:da:75:a6:6d:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:C2:29:C5:16:36:6C:2C:4C:34:AC:DF:89:AB:3D:C4:93:E2:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842FCB30C54E11EFA74AF0BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.6.0/24
Signature Algorithm: sha256WithRSAEncryption
08:df:d4:15:b1:10:b5:fe:c1:b7:c1:59:c9:e6:59:69:38:f5:
a0:6a:6e:ee:2f:dc:83:2f:63:56:40:d9:55:80:9a:14:40:2c:
9c:14:f3:53:ce:82:61:6e:6c:9f:06:b4:85:c6:b5:a1:b8:57:
d8:c7:76:ce:ea:fb:15:0d:9d:72:ad:fe:36:86:8a:76:33:3c:
36:8f:10:8d:eb:2d:a2:37:d4:75:92:53:5b:8a:dc:1d:0e:f9:
b5:02:c8:1b:a1:6b:b9:74:2c:da:e2:ce:40:5b:45:13:f2:eb:
bd:9e:9c:bb:30:1e:54:be:ec:ee:54:18:ed:4d:d2:da:b9:72:
ee:ad:7b:4c:65:61:29:f9:e8:a0:05:0f:28:e4:ab:eb:fa:46:
f1:81:01:a6:7b:e3:9e:70:00:d0:f0:a0:c3:1c:49:7b:bf:ea:
28:35:a6:e1:4c:a0:68:d8:e2:c2:99:a0:c3:dd:93:67:bf:50:
05:4f:7d:fc:3d:83:70:b7:ad:f2:9e:88:07:57:4a:0e:1c:8e:
e9:be:88:b2:8b:0d:29:57:05:fe:39:57:90:73:00:65:ee:ac:
9a:c1:90:46:41:eb:16:d9:b5:92:91:5f:d7:73:99:4d:90:e3:
f4:7a:1b:ab:fb:49:7b:9b:1b:2a:a3:37:5b:60:92:79:1a:22:
9f:c3:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:44 2025 by rpki-client