Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8716BEB8C52F11EFB42C357C762E951A.roa
File: 8716BEB8C52F11EFB42C357C762E951A.roa (raw, json)
Hash identifier: urqcXfbLDZohkuFQ9lUuDlpWYofLENfxcNmenB2U6Mc=
Subject key identifier: BD:BE:CC:F2:CA:74:47:81:66:44:C4:CC:60:C1:51:FD:49:2E:6E:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8716BEB8C52F11EFB42C357C762E951A.roa
Signing time: Sat 28 Dec 2024 15:22:19 +0000
ROA not before: Sat 28 Dec 2024 15:22:16 +0000
ROA not after: Sun 12 Dec 2027 15:22:16 +0000
asID: 17561
IP address blocks: 154.204.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76767 (0x12bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:22:16 2024 GMT
Not After : Dec 12 15:22:16 2027 GMT
Subject: CN=677017ab-ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:70:41:a7:e6:8f:60:a1:e5:52:5d:21:fc:
1d:a6:14:d7:dd:24:f8:d6:64:94:16:e8:1a:93:36:
e0:88:3f:2b:68:ae:f4:53:33:1d:64:1f:43:b3:94:
cb:66:50:a4:1e:89:5c:42:e0:d2:3c:f4:d1:6b:ba:
d9:df:49:56:af:14:96:a7:49:0d:54:82:f4:e5:50:
b0:30:32:f9:4f:cf:5e:a1:1c:de:39:38:0f:32:2d:
0b:b6:78:b1:27:3d:3b:27:75:bb:66:40:64:3e:90:
06:65:e3:3c:19:ed:e6:5b:02:f6:a2:87:04:74:da:
84:1a:f0:67:06:89:ce:8d:a4:d7:b0:15:00:5f:28:
1f:fa:5d:32:2b:00:26:1b:92:83:32:1d:60:85:77:
fd:06:f7:0b:af:57:c0:29:03:c6:13:b0:00:73:a2:
c4:3e:60:c1:6f:69:ab:66:cb:a8:62:f5:4d:48:16:
e6:90:f1:24:87:8f:77:cc:28:d6:e6:a6:12:0a:c5:
81:de:77:67:f3:84:5c:07:1b:8a:3f:0b:36:4f:07:
72:78:9c:60:df:61:b7:81:ed:cd:5d:63:7a:23:f7:
1f:3d:33:f0:a8:df:46:f0:ff:2c:8a:34:4e:08:30:
af:4a:10:ae:3a:41:6c:fb:a3:8a:40:ea:5e:e9:ef:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BE:CC:F2:CA:74:47:81:66:44:C4:CC:60:C1:51:FD:49:2E:6E:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8716BEB8C52F11EFB42C357C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6e:ad:ef:05:82:13:47:5f:31:ff:a3:92:cb:4b:6a:f0:09:
21:ad:78:57:2c:e3:97:12:62:65:ee:02:0d:11:2a:3f:7e:b3:
0e:69:8e:f2:91:fc:4e:91:dd:5f:1c:24:20:e9:17:a8:27:bc:
ac:f5:c6:99:3c:65:53:04:f1:a5:1d:0d:37:1c:a5:d5:2a:37:
89:0c:92:b6:e2:93:fc:e3:22:bd:44:28:98:47:ec:d9:03:4a:
88:a3:07:89:84:55:2b:3a:35:6f:25:08:67:da:c9:bf:5a:fd:
f0:29:5b:33:9b:c5:4b:f6:10:96:3d:31:45:72:40:d9:b7:9a:
a1:2f:b8:78:8d:e4:32:e7:39:af:b0:fe:3e:d9:7c:ca:41:a0:
6e:89:06:6f:2d:05:4b:2e:17:54:55:8c:a4:61:94:36:4b:31:
20:7f:4c:88:02:60:94:03:a6:4c:fd:ec:4d:00:57:78:b4:b8:
7e:5a:ed:f1:2e:8f:f6:c2:e1:af:71:8b:41:94:c4:e4:30:d4:
d9:36:f6:3f:ec:e3:8f:70:7f:03:57:4a:a9:e8:65:ab:8f:c0:
d4:bc:5d:6b:53:af:ac:22:64:86:b6:f4:38:67:ae:15:da:91:
a6:83:d7:b7:3a:9e:0a:1d:93:20:38:41:59:2a:27:79:fd:f4:
fb:df:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:55 2025 by rpki-client