Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A469997CC3C211EFA8055D6B762E951A.roa
File: A469997CC3C211EFA8055D6B762E951A.roa (raw, json)
Hash identifier: DZEtv26ybZf4Wjro1JgEPpb6FN8CQ8RYi7CV78obmlQ=
Subject key identifier: 42:D3:41:80:ED:9B:DC:EE:B6:3C:67:8C:D5:1C:9B:74:B0:F7:ED:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A469997CC3C211EFA8055D6B762E951A.roa
Signing time: Thu 26 Dec 2024 19:50:22 +0000
ROA not before: Thu 26 Dec 2024 19:50:18 +0000
ROA not after: Sun 12 Dec 2027 19:50:18 +0000
asID: 17561
IP address blocks: 154.81.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75694 (0x127ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 19:50:18 2024 GMT
Not After : Dec 12 19:50:18 2027 GMT
Subject: CN=676db37e-6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:f4:73:8b:9d:8b:2f:e5:41:49:3a:e7:a9:
6c:c7:c5:f7:9b:3d:18:52:d4:f6:e5:0f:0f:38:43:
db:7c:b7:65:d4:47:1f:f6:d1:c8:18:fd:74:a0:77:
39:a1:b6:f2:59:3c:dd:3a:a6:57:b2:d5:ad:50:60:
df:c9:6a:bd:67:3d:18:65:89:c7:24:53:b7:70:ef:
93:d2:63:21:51:ca:0f:5e:dd:12:4b:52:de:88:3e:
d5:53:03:5c:07:b7:2f:d1:53:60:33:f6:15:5e:d9:
d5:ac:1f:4e:19:ca:7f:3a:e9:5f:7c:18:7f:29:c5:
05:6a:7e:a6:ed:e6:27:87:d1:53:28:73:66:3b:df:
80:64:36:d3:70:e1:b4:0c:cb:f2:c2:26:a0:6a:51:
02:d8:72:91:76:58:4c:d8:56:6f:30:2d:b8:0e:bc:
77:28:c3:dd:f9:5d:94:9a:32:32:1c:9c:09:1f:f4:
39:45:72:09:dd:f0:1f:10:37:5e:4e:a8:97:83:d2:
23:bf:64:23:c6:b6:cf:0b:0f:24:2a:21:63:41:3a:
4b:4e:28:ee:9d:8b:47:60:3d:7c:08:91:35:79:c0:
61:bb:19:86:47:4e:a3:19:cf:55:7d:72:f7:2f:e5:
c1:17:7d:ce:a0:ef:92:51:5d:d1:42:00:de:40:f1:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:41:80:ED:9B:DC:EE:B6:3C:67:8C:D5:1C:9B:74:B0:F7:ED:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A469997CC3C211EFA8055D6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.62.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d0:a9:d0:1b:4f:ac:0d:37:04:6f:6e:c8:4b:cd:e3:bb:9c:
92:95:7c:60:62:4a:4d:c0:fd:62:01:b1:fc:9d:d4:d6:bb:26:
a8:2f:fa:60:93:80:09:29:c3:e4:5a:26:a0:6a:d2:16:e4:30:
ce:48:ef:6a:3d:7c:9d:af:2f:95:8f:18:cd:22:da:6e:31:31:
16:07:62:cc:fe:a5:1e:b3:77:19:b1:09:5c:87:c1:50:17:81:
9c:f8:8f:e0:24:c2:cd:42:d6:a4:46:8e:86:5c:e3:f1:68:48:
b2:f0:8f:57:e8:e9:f0:a6:9a:35:e7:47:fd:2d:da:f4:24:bd:
70:5b:33:72:b6:6f:31:ce:5d:6d:bc:34:a2:52:48:98:99:4c:
2e:7d:65:fd:9b:fc:d9:2c:bf:2a:92:89:42:bc:e3:ef:4a:20:
03:8b:71:21:7b:15:78:ba:61:0a:75:df:02:e3:a6:4b:de:6f:
5b:52:9b:e5:0e:2c:6a:81:07:86:58:6e:0d:7a:8e:a5:0b:64:
6e:ad:4c:c5:60:f2:24:68:50:1f:5b:98:fe:fb:f0:07:8c:b4:
a7:a1:e8:76:a1:ac:e0:1a:02:69:85:d8:02:6f:87:eb:2c:c9:
88:c7:61:93:5c:ac:11:a6:3d:8c:7d:8f:7b:f2:d3:57:0b:52:
ef:af:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:26 2025 by rpki-client