Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBFAA3AC61711EFB555D1B8762E951A.roa
File: 9BBFAA3AC61711EFB555D1B8762E951A.roa (raw, json)
Hash identifier: mIabOlQ21ZZVH/IvD2iecwa/QJh/udUGczFq4lZ8QB0=
Subject key identifier: 02:AA:17:AA:04:A9:46:3A:A6:21:DF:C5:6A:B8:60:F0:00:2E:B5:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBFAA3AC61711EFB555D1B8762E951A.roa
Signing time: Sun 29 Dec 2024 19:03:37 +0000
ROA not before: Sun 29 Dec 2024 19:03:34 +0000
ROA not after: Sun 12 Dec 2027 19:03:34 +0000
asID: 17561
IP address blocks: 154.217.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77598 (0x12f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:03:34 2024 GMT
Not After : Dec 12 19:03:34 2027 GMT
Subject: CN=67719d09-84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:fa:d4:84:f4:dd:da:db:a0:70:84:cc:8a:
59:ed:47:d8:64:55:2d:e6:c8:47:4a:f6:10:89:6f:
5c:ab:99:a1:0d:70:51:2e:82:e6:67:18:69:08:9a:
b0:a2:c3:9c:43:1c:f4:e9:e3:c2:6a:af:4b:2f:83:
b5:65:1f:1b:eb:7c:84:0f:3b:f2:c6:d7:9f:30:4f:
e9:f2:46:61:6d:b7:0a:ce:7c:63:84:45:72:b6:80:
70:82:27:06:a6:81:d0:3c:f7:bd:d3:e5:19:d0:05:
d8:c4:9d:31:d9:77:59:a3:a7:f4:43:5b:bd:20:9d:
1b:88:c5:ef:0f:4c:97:ef:2f:7d:4f:ff:2a:13:f3:
72:96:34:45:10:41:03:bd:cc:d6:9f:dc:a0:72:80:
62:fc:8f:ba:3f:1f:e4:43:1a:38:9d:ce:d0:84:0f:
00:4a:e2:d9:6c:26:87:0b:56:39:10:de:b9:cd:7f:
bb:50:39:3f:de:14:2f:2e:18:c6:b4:30:c4:b9:bb:
d4:49:3c:bc:d1:38:58:70:96:ec:84:3e:68:17:07:
36:9d:1f:4d:e3:18:74:16:0e:0a:4a:b0:54:40:7b:
91:24:1f:02:04:1a:21:f0:12:ec:08:b3:6a:7c:0f:
f7:13:d0:f0:db:0a:1b:05:48:da:c9:18:0f:21:08:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:17:AA:04:A9:46:3A:A6:21:DF:C5:6A:B8:60:F0:00:2E:B5:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BBFAA3AC61711EFB555D1B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:2a:a2:fa:31:28:4e:be:b6:85:e8:76:62:c8:d3:60:5c:
43:45:ff:a3:4c:32:d1:48:db:a8:f5:81:52:9d:4d:b7:4a:ad:
d5:6c:e5:42:e9:26:9f:6a:f1:86:62:64:2e:63:f6:96:08:39:
6e:99:b9:e9:1f:ad:b4:84:ef:1f:06:ab:ae:e0:a8:14:f9:8f:
e4:9f:81:92:15:ef:09:55:af:64:13:a9:91:5f:bc:f8:96:e2:
a3:77:21:70:8b:b1:05:15:fe:bc:ee:b2:2b:98:c9:e6:dd:3a:
0f:ac:9f:44:b7:be:16:6d:b9:4f:2e:4b:30:bd:d3:88:94:8d:
e9:15:91:b0:5e:0a:04:41:20:08:0f:a8:dc:7c:9a:ab:84:ba:
b2:37:d3:1e:07:00:0e:2f:bd:3e:0e:70:70:92:fd:6f:55:37:
57:4f:5d:d3:7c:65:14:83:13:43:db:72:09:70:a5:ad:fa:66:
13:7c:d2:42:9c:d5:bd:d2:b1:6b:36:d1:3d:e9:42:4e:e1:b3:
aa:9d:b3:4f:c5:f3:8a:79:2e:67:65:dd:d8:66:1d:eb:c0:37:
56:80:a7:df:a3:08:44:51:a0:c6:a4:b5:60:d5:d4:9d:60:03:
53:b4:66:68:2d:0f:8d:a9:a7:8f:b2:ad:ec:a1:e9:0d:c0:77:
36:47:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:45 2025 by rpki-client