Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4B6B758C91111EFBBACD6AB762E951A.roa
File: A4B6B758C91111EFBBACD6AB762E951A.roa (raw, json)
Hash identifier: FDX5VHHt5wDjHOP5GYEXbeUMCzHOp5MPFiVxQUDBLjU=
Subject key identifier: 6D:67:15:84:4D:EF:ED:7E:28:95:08:58:78:BE:18:7B:35:20:CF:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4B6B758C91111EFBBACD6AB762E951A.roa
Signing time: Thu 02 Jan 2025 13:58:29 +0000
ROA not before: Thu 02 Jan 2025 13:58:25 +0000
ROA not after: Mon 13 Dec 2027 13:58:25 +0000
asID: 17561
IP address blocks: 154.221.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78509 (0x132ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:58:25 2025 GMT
Not After : Dec 13 13:58:25 2027 GMT
Subject: CN=67769b85-1caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:79:dd:b9:3f:43:9e:f7:76:eb:57:27:5c:
32:8f:65:32:74:a7:27:02:8a:54:04:d4:a9:2e:6d:
8b:05:42:99:7f:24:c5:58:59:ab:1f:88:85:b3:d8:
cb:24:fc:5d:cc:13:fc:ca:68:9a:b5:cd:f5:e4:a8:
b5:3e:1f:63:81:df:32:a1:0e:79:22:b6:3c:ec:d4:
3c:8b:4a:0d:de:b7:3a:90:7f:ba:ec:8a:75:f4:fd:
71:f6:0c:c7:f5:45:94:df:d0:1c:a9:ca:73:87:89:
df:52:fd:56:a6:79:48:6a:2b:89:ef:e6:6e:c6:75:
b2:b4:8c:68:6f:22:3a:40:0c:00:48:5d:8c:59:e0:
4d:6e:f9:5a:2d:5f:08:fa:9b:e2:3d:21:03:da:02:
fe:d0:1b:a7:3d:82:e6:e1:1b:ef:9a:47:fa:a0:e4:
db:c1:35:da:5a:ad:1f:be:b8:30:fb:0a:23:f9:c7:
7b:f7:39:28:51:d3:32:72:e2:fa:34:36:95:63:c6:
4a:5f:d0:44:78:e4:fa:03:95:15:76:dd:7e:6a:fa:
59:58:de:b4:ea:6e:df:11:51:ad:0e:19:d9:f7:47:
f0:97:b3:12:80:90:54:96:4b:6d:7b:ba:e1:cf:75:
b6:d4:49:0d:38:f3:4b:36:4e:37:3b:a4:be:cd:d0:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:15:84:4D:EF:ED:7E:28:95:08:58:78:BE:18:7B:35:20:CF:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4B6B758C91111EFBBACD6AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.227.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9d:27:a7:4a:32:d6:6b:59:5f:5c:29:02:f7:6d:a4:3a:76:
7f:3a:ae:96:1b:d1:41:51:05:0e:aa:5e:a2:71:17:4f:0e:d3:
99:f0:1a:7c:25:a7:b3:a5:5c:0c:d4:dc:13:9a:95:b6:ef:46:
e8:f3:f6:11:1f:de:3a:95:c2:22:7c:c8:2b:a3:55:c3:77:a2:
a6:18:f6:f7:24:13:c6:cb:44:fe:92:ef:23:7a:2a:d9:03:cd:
84:99:b8:5d:84:d9:88:48:a3:31:e8:b7:98:09:29:44:da:71:
3c:e0:f7:19:ae:aa:91:47:64:1e:65:b7:ba:6e:9b:74:6d:86:
5d:09:5e:45:58:df:b6:f3:8d:c6:e6:94:c2:5d:c5:aa:af:47:
06:21:f6:ff:50:35:da:3c:4f:78:bc:c2:c6:83:98:17:ab:00:
c2:fe:c7:fe:0e:87:7f:6f:23:4f:fc:25:05:0c:f2:d5:75:d1:
63:9a:55:c1:bc:2b:01:99:89:a7:62:14:7a:3b:e0:03:f6:44:
4b:12:b8:4c:89:c1:e8:dd:6d:cc:57:9c:73:7d:a0:62:b0:47:
6e:6b:45:37:7b:c5:6d:e2:8c:34:e6:01:df:2c:c5:36:4f:9a:
62:4e:b2:52:be:de:ba:3f:0c:cc:97:92:4a:54:eb:f5:09:f6:
0f:36:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:02 2025 by rpki-client