Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA7053EF46411EF80389745762E951A.roa
File: ACA7053EF46411EF80389745762E951A.roa (raw, json)
Hash identifier: vRjyrQDt3T/STVuOnTG7eo1R2fIk3HrUVuayFwm03wg=
Subject key identifier: 9B:82:49:C5:80:81:77:C7:9B:E2:88:61:AA:23:AA:7A:C7:50:FE:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01653E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA7053EF46411EF80389745762E951A.roa
Signing time: Wed 26 Feb 2025 17:11:10 +0000
ROA not before: Wed 26 Feb 2025 17:11:06 +0000
ROA not after: Sat 19 Feb 2028 17:11:06 +0000
asID: 17561
IP address blocks: 154.197.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91454 (0x1653e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:11:06 2025 GMT
Not After : Feb 19 17:11:06 2028 GMT
Subject: CN=67bf4b2e-9b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:16:cb:89:3f:b5:32:48:0c:56:c9:06:43:
cd:6e:b4:56:93:68:e8:9f:c8:9d:57:91:3f:20:7d:
0f:61:5e:79:32:cb:c5:9b:c1:78:e7:31:d6:01:b5:
5a:35:98:31:84:5a:b9:85:c3:c7:f5:b9:ab:df:b2:
4c:05:ba:65:fd:eb:8b:20:22:b8:6b:86:18:5c:0c:
23:a7:41:5a:b7:42:db:e7:1d:09:9b:d2:c1:2c:2c:
ab:46:2c:e0:bc:9f:26:38:ee:e8:a1:72:dd:b3:38:
cf:6a:f7:37:61:2f:a9:7f:02:6a:4e:e1:9b:1a:15:
dd:92:be:18:b7:ab:5b:01:81:a7:73:9c:9b:5f:11:
94:cd:63:b5:55:f6:94:d8:d7:d8:32:29:78:17:3b:
83:03:11:c5:34:3e:db:24:d8:b1:43:a8:a3:1d:c6:
2a:fc:ce:09:87:7f:d8:9b:7a:79:4c:c2:a5:89:60:
3c:0b:05:da:8a:ab:b4:07:5f:f9:11:da:1a:dd:f8:
4e:14:5a:96:0e:67:bd:2b:c0:59:b3:96:c0:ef:e1:
93:c6:da:02:73:9f:cc:11:d9:30:58:8b:6b:e8:1d:
5e:bb:2d:e4:dc:09:15:94:b3:fd:12:32:a8:7c:1d:
77:38:08:44:2f:40:7e:b2:aa:a6:f9:bf:a9:86:bc:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:49:C5:80:81:77:C7:9B:E2:88:61:AA:23:AA:7A:C7:50:FE:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA7053EF46411EF80389745762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:47:cb:82:67:ad:ac:73:c6:b0:1d:4e:85:44:06:11:f6:f7:
62:b8:8b:4f:26:16:4a:79:56:ee:b5:82:4e:b8:3e:31:3a:20:
41:68:a5:78:20:09:ab:ef:88:85:c7:ab:cf:a5:10:bf:d6:c3:
e7:49:b3:bb:bb:ce:5a:cf:a8:25:9a:48:85:24:9e:49:c8:b9:
21:a6:47:18:2d:de:94:68:1e:5f:b7:d0:a0:9b:74:f6:09:36:
2f:0e:98:2f:bc:d7:59:cc:11:10:b2:91:2c:2e:57:7b:c1:3d:
56:71:6f:4e:af:c0:42:36:26:27:40:b7:5e:73:b3:24:59:44:
f7:72:6e:ac:0c:d4:4f:19:3b:22:bc:c0:af:2c:5b:c3:8a:c3:
45:c6:e0:eb:2a:87:2c:1e:b0:d0:b7:08:fb:8d:dd:95:52:17:
53:fc:e3:32:b1:6f:40:5a:04:aa:d8:9a:b2:db:3d:b8:af:0e:
33:fe:28:f1:73:d4:19:94:57:83:4b:4f:a4:f5:c2:aa:7e:88:
2b:43:d6:b1:27:4b:0e:ab:ed:d3:89:3d:97:07:86:97:f8:4b:
3f:b4:c9:92:b3:91:65:29:c6:31:c2:12:88:91:02:32:a1:f3:
2d:22:78:b1:fc:c8:a9:f5:20:7e:00:88:be:bf:c0:64:cc:02:
9b:73:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client