Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0442540C52B11EFBE032666762E951A.roa
File: B0442540C52B11EFBE032666762E951A.roa (raw, json)
Hash identifier: kVYtU95NsockXhoYP0avjyu6z6Dl9PhScw4qeENvmzU=
Subject key identifier: C1:DE:A7:D0:F6:56:CD:89:2E:4A:26:EC:0B:86:51:9A:08:92:FB:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0442540C52B11EFBE032666762E951A.roa
Signing time: Sat 28 Dec 2024 14:54:50 +0000
ROA not before: Sat 28 Dec 2024 14:54:47 +0000
ROA not after: Fri 12 Dec 2025 14:54:47 +0000
asID: 984
IP address blocks: 154.204.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76731 (0x12bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:54:47 2024 GMT
Not After : Dec 12 14:54:47 2025 GMT
Subject: CN=6770113a-fb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:7c:25:96:00:1f:fe:17:1f:91:87:cb:48:
79:05:56:d3:b0:39:ce:2a:5d:9f:8b:78:75:d9:d6:
bb:b7:03:49:99:b2:22:52:5b:68:76:08:f9:4a:38:
d1:ee:30:58:3c:2c:0e:5d:3e:b2:1b:b1:46:cf:83:
be:5c:24:95:e4:1f:07:18:3b:4c:51:53:a4:49:b6:
e6:9a:40:eb:c5:ec:88:96:0a:d9:fe:06:d6:1d:a1:
65:b4:b0:4a:5f:da:fa:65:c3:06:ca:16:7f:97:10:
e0:02:48:0a:72:5b:cd:fa:8a:99:38:36:6e:84:f4:
ab:cf:64:84:d3:b5:e3:dd:6c:d2:87:ae:9c:92:d5:
12:f8:a0:a2:28:af:ff:93:9e:77:d6:ea:73:e0:ec:
90:02:37:8e:4c:75:75:40:4c:78:48:49:a5:82:33:
fe:d2:05:d9:8c:22:a3:0d:4b:31:ef:c6:0b:61:09:
c0:10:a7:49:e3:40:cf:d2:5f:4a:c7:4b:22:52:c1:
79:cc:1c:5d:ce:70:3f:ab:31:f0:46:53:00:82:13:
92:00:13:e5:83:0a:d9:b8:54:e1:2d:5e:4f:16:43:
15:b0:2a:f5:7f:a8:89:23:3f:25:7e:59:00:2c:3b:
05:6e:be:df:bb:d2:52:88:0d:4e:ea:1e:58:83:d0:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:A7:D0:F6:56:CD:89:2E:4A:26:EC:0B:86:51:9A:08:92:FB:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0442540C52B11EFBE032666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:76:20:3b:78:ee:fe:4f:c4:32:e5:8f:6e:17:86:40:68:d5:
00:6c:e0:9f:5a:58:25:a7:bc:0c:7b:c3:3d:24:0b:01:83:41:
5d:b4:e6:50:36:c0:a6:10:e0:d9:e9:56:f4:17:41:9b:fe:c5:
a3:a6:88:f4:d4:75:b3:3a:ec:fc:68:33:e8:28:6d:9b:f9:ca:
49:10:7b:61:26:72:1c:52:28:89:a7:60:cc:2b:d6:84:e3:b2:
b6:90:36:a4:e8:03:22:36:c6:81:97:e6:bd:38:3d:38:6d:5b:
54:4c:a8:c1:1a:1a:66:cf:8e:5c:93:2a:20:f9:d7:e1:a8:61:
1c:2b:ea:28:91:7e:a7:06:8b:9a:e0:87:6e:45:3e:a7:6d:5a:
da:a6:e7:c5:ea:18:f3:d4:d2:a8:e3:3c:23:8c:e2:d0:fe:b5:
1c:7b:40:a0:ed:3a:d9:f5:f7:6c:2c:9a:31:5b:c3:35:95:f4:
10:7c:b8:7d:84:67:f4:e9:4d:f1:c2:39:5e:a9:ad:19:a9:87:
65:90:e3:f2:0b:76:95:f4:77:9c:1e:00:07:05:aa:df:f6:1d:
24:48:c2:84:fe:40:5e:a6:c5:33:fb:b2:33:59:4f:d6:e3:4d:
bc:1c:5f:66:76:73:77:a0:ff:64:9d:39:e8:a8:96:b1:4f:90:
b5:bf:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:56 2025 by rpki-client