Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2FE7140C53211EF88C1388F762E951A.roa
File: A2FE7140C53211EF88C1388F762E951A.roa (raw, json)
Hash identifier: sJw3MNrYIwyTsXsWFpBdh2E9QYE9PbzyKU+6uyLVQ+Y=
Subject key identifier: 53:87:DD:53:E8:F4:C9:C3:5C:34:2C:78:44:8F:63:14:D6:CF:C7:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2FE7140C53211EF88C1388F762E951A.roa
Signing time: Sat 28 Dec 2024 15:44:35 +0000
ROA not before: Sat 28 Dec 2024 15:44:31 +0000
ROA not after: Fri 12 Dec 2025 15:44:31 +0000
asID: 984
IP address blocks: 154.204.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76791 (0x12bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:44:31 2024 GMT
Not After : Dec 12 15:44:31 2025 GMT
Subject: CN=67701ce2-a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:6e:85:cd:53:2b:af:93:06:ac:7b:5f:90:
f3:45:4f:a0:4c:d7:5d:20:e8:8d:c4:c6:f8:49:7c:
eb:83:bb:c1:33:42:8f:df:67:fc:d6:28:a3:5a:2e:
f6:d1:76:dd:d0:a5:bd:4b:e6:a7:5f:0b:c5:c3:bf:
e2:b7:4b:84:6d:6a:23:89:11:8b:cf:ea:cc:33:fe:
ea:a5:34:a6:e8:7b:0c:72:0f:5b:9b:f8:d8:2a:89:
b5:3e:33:1d:9c:98:72:77:63:22:c7:f1:bf:e6:27:
d1:f4:c6:6a:a1:59:8c:91:fd:98:ef:32:5f:9c:36:
26:d7:50:fb:66:c8:dd:ac:24:22:b4:2f:d1:e9:84:
44:e6:2c:cd:15:98:98:e6:5b:8c:01:cd:37:63:b7:
3f:86:10:92:64:29:c1:c4:90:f2:bd:7d:21:2b:ec:
02:26:e5:6d:a7:ee:e7:26:55:30:8a:6f:cf:f5:f1:
2a:e4:ec:9c:13:2c:e4:27:a8:9f:2f:04:5e:16:a3:
79:b5:0d:6e:b3:f9:2d:94:13:72:37:eb:b1:1a:6f:
f8:b8:f2:50:49:f2:3e:09:5e:6a:75:9d:b8:86:d6:
b7:9a:6a:e7:7f:51:76:99:8a:c2:f2:58:9b:fe:ac:
e8:00:b2:d6:b1:b7:49:44:ae:f6:5e:aa:c4:69:41:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:DD:53:E8:F4:C9:C3:5C:34:2C:78:44:8F:63:14:D6:CF:C7:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2FE7140C53211EF88C1388F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:df:b2:ba:48:ef:ca:33:7b:c4:2f:29:42:c1:b5:ac:f5:
ca:ce:a0:3b:bf:b1:ce:42:16:55:63:bd:96:76:dc:4b:43:f8:
30:cc:a9:2e:f2:04:1e:b9:97:92:6c:1b:61:c7:2b:97:ae:a7:
99:42:8c:c0:f6:93:d7:f0:ee:bf:0b:18:9e:02:78:cf:0b:3d:
2d:83:1f:a8:cf:b2:f7:e9:2a:1d:48:f6:46:55:27:25:6a:ad:
7e:38:15:f6:8a:ae:d9:d6:91:d1:ab:7b:8a:f9:b3:d4:ba:d5:
fd:a0:d0:b8:50:21:89:e1:90:d7:bf:f4:6a:bf:bd:53:93:54:
ab:f2:eb:2b:57:b1:fb:a6:70:bd:71:d5:a8:ce:e3:87:84:48:
82:fd:68:38:22:2f:b7:c9:87:bc:ac:df:c2:96:99:38:1d:38:
d4:17:13:0f:90:0e:d3:2d:eb:60:ae:6b:e7:c3:c8:9f:97:09:
65:9f:50:d6:c3:1e:2b:bf:07:80:d6:12:46:1f:11:09:78:f0:
86:d7:c4:8a:8d:6b:32:9f:6a:08:76:71:46:25:d9:44:5b:17:
dc:0b:85:53:73:58:f7:3c:f0:d4:53:54:9e:42:60:5c:bf:06:
10:99:5e:2d:cb:60:b5:3b:5b:ff:5e:f2:ce:31:1c:bf:49:7e:
6a:f7:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:00 2025 by rpki-client