Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6DD3E8C62D11EFA0754A44762E951A.roa
File: AF6DD3E8C62D11EFA0754A44762E951A.roa (raw, json)
Hash identifier: 973EmXQL+4X1ZOUFyVwG3n5YL6orbOAMtSFPjJGNOGk=
Subject key identifier: 24:13:D1:86:AC:35:18:11:BF:BC:87:1D:D3:AD:FA:8E:AE:E8:4A:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6DD3E8C62D11EFA0754A44762E951A.roa
Signing time: Sun 29 Dec 2024 21:41:39 +0000
ROA not before: Sun 29 Dec 2024 21:41:36 +0000
ROA not after: Sun 12 Dec 2027 21:41:36 +0000
asID: 17561
IP address blocks: 154.217.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77782 (0x12fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:41:36 2024 GMT
Not After : Dec 12 21:41:36 2027 GMT
Subject: CN=6771c213-3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:fc:ff:05:bc:d6:25:4e:79:7c:ed:02:44:
97:0c:fc:27:8e:93:69:e5:31:0c:4d:6c:dd:26:b6:
dd:28:ce:66:a3:17:11:65:48:3d:76:24:1f:28:09:
95:b3:e8:14:7b:31:69:67:01:19:a0:1e:1b:3b:63:
5e:df:a4:7d:97:ea:3e:80:2b:e0:19:e1:dc:04:7e:
0b:9f:12:d9:52:96:9b:af:36:b7:ef:17:b3:29:09:
3e:b1:47:f3:e8:87:a2:73:fd:8b:ce:69:b4:30:50:
1d:ad:78:51:b6:c8:a3:df:a2:a4:f0:c1:c5:68:71:
37:ec:51:4e:95:42:62:16:03:d2:19:56:71:12:22:
f3:d3:9f:f9:a2:b7:0a:37:56:c7:cc:1d:0e:67:8a:
21:e4:0b:dc:25:61:46:b4:53:0b:b2:a1:ec:25:85:
d3:9b:ca:10:9a:1a:ee:66:e2:cf:d5:2f:d0:f3:e2:
c1:bd:f2:3e:b1:8d:68:45:20:3c:ca:e0:92:93:59:
dc:09:fe:d6:26:86:5a:0f:2c:aa:c9:66:b8:80:24:
34:2e:15:bf:e4:10:57:05:95:ba:a6:25:be:91:c4:
bb:c2:94:55:94:48:14:88:02:dc:fe:88:59:d9:ee:
1b:89:da:97:f9:f9:1b:e2:f3:5f:03:ec:47:77:66:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:D1:86:AC:35:18:11:BF:BC:87:1D:D3:AD:FA:8E:AE:E8:4A:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6DD3E8C62D11EFA0754A44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.206.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a4:23:c4:8a:3e:f4:77:33:29:21:a2:38:61:a9:9d:8b:f5:
26:bf:3f:7a:99:9d:19:5c:94:13:f6:50:1f:bc:c8:e3:07:a3:
db:55:46:59:2a:cf:89:8b:83:26:d5:70:06:a7:53:af:6c:d1:
5a:5d:ec:f8:ea:aa:c1:05:a7:b5:09:f5:95:dc:85:0a:e5:34:
08:05:6e:4e:7d:f2:90:c1:9e:4d:9f:65:f4:f3:2e:dd:ed:6b:
0e:8c:fb:71:60:04:65:83:61:33:4c:23:e1:f7:84:fa:17:0b:
2a:af:0c:b4:f4:2b:0d:30:5d:44:a8:02:f4:bb:d2:53:b8:10:
03:ed:4e:7d:29:0b:c0:d1:bc:5d:d1:62:56:b6:d8:17:91:07:
86:03:2c:a8:b4:05:1b:fa:07:d3:57:91:fd:48:44:27:07:92:
be:92:9e:73:ff:b7:3b:3e:bd:9f:27:4f:0d:ec:48:b3:93:a6:
f5:c4:21:a1:3b:1e:7b:b5:a9:dc:98:aa:d3:6c:23:71:f2:14:
1c:87:70:04:38:95:8c:b9:0c:eb:92:9e:88:2e:7b:fa:14:5f:
64:aa:cb:2d:2c:91:b8:39:21:37:c4:59:2b:5f:e9:db:ee:03:
d3:d3:a0:c2:0b:cd:2f:0e:62:01:db:a1:c1:37:c9:29:fa:b8:
d4:67:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:31:25 2025 by rpki-client