Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDF729AC91611EF9BADC14B762E951A.roa
File: 8DDF729AC91611EF9BADC14B762E951A.roa (raw, json)
Hash identifier: SvEzDw+sr9pjVR+AOB/2wOaXQoqg6F6aPYbcBCE0CL4=
Subject key identifier: E7:A4:5F:1B:2E:0A:19:0C:90:9A:A7:08:49:CE:81:FC:F9:47:0A:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDF729AC91611EF9BADC14B762E951A.roa
Signing time: Thu 02 Jan 2025 14:33:38 +0000
ROA not before: Thu 02 Jan 2025 14:33:34 +0000
ROA not after: Mon 13 Dec 2027 14:33:34 +0000
asID: 17561
IP address blocks: 154.221.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78549 (0x132d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:33:34 2025 GMT
Not After : Dec 13 14:33:34 2027 GMT
Subject: CN=6776a3c2-0565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:27:bd:13:b9:b2:6d:c4:6b:11:27:2a:eb:
db:85:60:52:5d:de:22:99:23:39:3b:08:51:ae:05:
99:91:7c:31:73:22:da:b3:c2:09:3b:11:77:85:ee:
1c:24:e1:65:e3:1f:f3:0c:43:9f:34:04:da:9d:9c:
e1:5e:18:b5:78:92:69:3c:0c:44:6d:3c:96:6f:6a:
ee:9c:7a:9f:42:6b:8a:9d:2d:91:3f:07:b0:c8:81:
91:7d:a1:20:95:43:50:3f:c3:fa:2e:69:22:97:fd:
02:c4:5c:d6:10:cd:3e:f9:24:e0:f2:fe:50:d7:21:
2f:5e:fd:35:34:87:34:42:80:b0:78:f0:f9:c3:b3:
ff:4c:86:cd:7f:13:83:e7:6c:14:c6:99:f7:90:55:
53:c5:34:a8:71:b8:bd:1d:a9:1d:19:c6:60:06:b7:
77:be:66:4b:17:5d:f9:f7:32:08:f5:5c:0f:03:4a:
45:ae:61:f6:ef:a5:d5:47:89:7a:68:e7:51:f0:ad:
63:dc:3a:77:ad:f6:37:e0:6c:70:b3:14:3a:20:db:
17:b8:49:fb:e4:f2:cf:0c:36:df:7c:b8:ff:42:a3:
31:ac:f0:b1:32:1d:b6:77:21:25:b5:31:cb:b8:a1:
6f:15:d0:10:c3:9f:67:df:b4:89:15:dd:bf:bd:fe:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:5F:1B:2E:0A:19:0C:90:9A:A7:08:49:CE:81:FC:F9:47:0A:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDF729AC91611EF9BADC14B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.247.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a0:89:c8:14:15:c4:39:e2:69:58:7d:fa:e0:2f:36:f5:64:
cc:42:c2:7b:bb:6c:1b:6d:e5:4a:b6:7a:a7:e4:b5:e0:16:20:
fb:24:b5:bd:a6:be:b2:7d:26:de:2a:36:7c:32:7c:6c:3e:eb:
ee:7f:dc:20:05:a2:4b:01:97:69:7a:a2:ae:84:de:85:62:9a:
74:fc:a4:b6:17:e0:fa:4b:59:1c:9e:44:20:7d:9b:27:64:7e:
c8:3e:4b:31:db:be:d0:ad:f4:8b:51:0c:b4:24:50:82:09:a1:
25:3f:17:ad:b1:42:b9:7e:55:fc:f2:58:4e:75:9c:43:f6:51:
56:d8:60:68:d4:64:e9:0c:fb:e7:ca:88:34:b8:c3:58:e6:bc:
9f:75:47:ad:5f:ea:0b:2f:c7:35:7b:b9:c1:bb:a5:ed:11:06:
0b:de:39:09:47:fb:b1:1c:53:49:2e:7c:ca:57:aa:ae:2a:d7:
ea:40:ce:7b:d6:a4:a2:33:44:ac:44:a2:a1:85:b2:02:f0:01:
47:82:4d:17:f0:c3:f9:cb:00:d7:12:d8:c8:e6:82:85:87:90:
6a:e2:ba:4f:92:8b:31:b8:48:b5:9c:48:ef:6a:06:23:61:c3:
3e:f4:bd:e2:dc:6a:df:99:01:1d:e3:13:c5:ea:a0:29:bf:6f:
6f:8b:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:16 2025 by rpki-client