Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A43FD16EC63811EF8F8E8B88762E951A.roa
File: A43FD16EC63811EF8F8E8B88762E951A.roa (raw, json)
Hash identifier: dynYrjtlp7v927oYEs1uudS490zs/6e3JJR7S6fzK3Q=
Subject key identifier: 47:FB:EE:CA:1E:E3:B1:52:AC:DB:99:1A:12:12:D0:29:0F:1A:69:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A43FD16EC63811EF8F8E8B88762E951A.roa
Signing time: Sun 29 Dec 2024 23:00:05 +0000
ROA not before: Sun 29 Dec 2024 23:00:01 +0000
ROA not after: Sun 12 Dec 2027 23:00:01 +0000
asID: 17561
IP address blocks: 154.217.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77873 (0x13031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:00:01 2024 GMT
Not After : Dec 12 23:00:01 2027 GMT
Subject: CN=6771d475-da16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:e4:bc:0a:18:0f:71:c5:44:f5:e9:73:a6:
6f:54:32:63:3e:54:8d:a1:34:70:f3:0e:fc:8f:34:
08:8b:87:7e:73:48:d6:58:dc:25:e0:8c:df:9d:43:
2a:7b:5f:39:35:75:d8:7f:62:93:f5:26:78:ed:1e:
43:af:81:f2:11:ba:07:ba:11:64:81:d1:5d:34:43:
6f:e1:7d:c8:4b:2c:52:13:fb:fa:b2:e5:17:d4:4c:
39:4f:af:de:d1:15:5b:1d:b1:39:a1:09:d7:17:b8:
d7:34:14:1f:27:b9:a0:50:9f:6c:a7:e3:f9:aa:3e:
78:ee:5e:8c:9d:d9:8a:2f:97:25:79:be:b4:5e:95:
93:74:5e:eb:4e:82:59:ef:9a:47:c3:32:bb:e1:7b:
d3:ae:92:de:73:02:13:1d:8b:43:1d:41:35:95:b1:
f0:b9:cc:f0:8b:7a:87:25:dc:0b:39:52:35:a0:32:
70:1a:6d:de:11:6e:2d:63:10:4a:da:3d:a3:d8:ef:
83:47:fc:ed:b3:57:5d:2f:16:d8:81:a4:ab:2b:49:
8d:79:af:14:c6:01:00:61:77:9d:56:21:35:b8:a5:
70:b5:15:f1:85:ac:be:49:e3:d5:7d:34:71:02:5c:
e0:a6:9e:8c:8b:03:c1:e0:7c:2e:19:d9:b0:41:f4:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:EE:CA:1E:E3:B1:52:AC:DB:99:1A:12:12:D0:29:0F:1A:69:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A43FD16EC63811EF8F8E8B88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.252.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:f9:22:07:40:64:a9:2b:03:d7:6e:6e:9f:d5:78:d0:a5:
0b:18:ab:44:94:48:9c:2c:41:54:d8:47:e0:26:01:a9:90:5d:
37:fb:70:d1:55:d8:a9:be:64:f1:8b:eb:ed:67:fc:0e:58:5c:
6d:f9:77:c1:e1:3a:41:65:4b:02:58:fb:8b:ee:f6:e5:f1:e3:
98:d5:63:4c:39:66:2b:3d:55:8e:64:27:ce:77:47:54:ee:ec:
18:3d:9c:60:69:b6:6e:1b:72:e2:e0:95:7c:39:75:29:a9:96:
9c:4b:a5:e3:b9:1e:e6:26:e0:60:af:62:a5:04:b2:d2:dd:79:
8d:f3:dd:a7:c5:eb:17:f8:01:80:9a:29:40:4d:d4:48:d0:2f:
dc:dc:7e:0c:e1:01:36:92:ac:bf:ac:cd:e6:43:b9:2a:c9:2c:
64:1e:a2:65:0e:45:83:a9:10:f5:79:87:ca:c4:43:c7:ab:1a:
42:e7:10:78:da:cc:d9:31:eb:1c:62:06:d1:cb:8a:e7:f9:c9:
59:97:46:f6:f3:bb:d0:82:43:62:3e:4b:b4:72:e7:ab:16:23:
ed:fd:46:92:99:41:07:93:f4:44:4b:73:46:5b:1a:f7:c0:f2:
40:f5:5c:70:7d:15:44:d7:43:49:a7:ab:77:1a:00:03:a4:0d:
2d:89:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:28 2025 by rpki-client