Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3061B4C60111EFA1E775AF762E951A.roa
File: BF3061B4C60111EFA1E775AF762E951A.roa (raw, json)
Hash identifier: Bzi4NBoCU+t2y2cXucjXQ+pwgsxBgBFXZqceYR5aebg=
Subject key identifier: 38:1C:47:57:24:CE:91:3C:B2:67:75:65:98:02:BC:06:6F:71:91:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3061B4C60111EFA1E775AF762E951A.roa
Signing time: Sun 29 Dec 2024 16:27:08 +0000
ROA not before: Sun 29 Dec 2024 16:27:04 +0000
ROA not after: Sun 12 Dec 2027 16:27:04 +0000
asID: 17561
IP address blocks: 154.217.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77412 (0x12e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:27:04 2024 GMT
Not After : Dec 12 16:27:04 2027 GMT
Subject: CN=6771785c-efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:b3:4b:41:28:ba:e0:63:41:4d:70:98:27:
21:97:48:23:2f:2e:42:77:93:ba:79:7a:e3:7c:b7:
01:c7:c0:f1:ac:5c:2e:1a:b1:33:42:9f:9e:4f:80:
f3:f6:ba:0c:70:f6:47:14:45:59:7a:e5:c3:51:c4:
fe:11:bb:b3:ff:16:98:0e:ff:f3:57:5f:a6:bc:02:
5b:09:3a:cf:35:6d:cc:5b:25:33:ab:a3:4b:b7:b1:
0d:45:19:c7:00:89:47:a5:ff:22:1d:9b:08:ae:6a:
92:c6:7e:70:79:78:e8:7f:cd:99:83:0c:9f:d6:9c:
74:b5:63:0d:0f:65:9d:d3:08:2b:8e:10:9f:ba:36:
6c:d3:9d:f6:ae:3f:d4:c3:52:82:d6:72:93:e8:42:
3b:e3:78:66:c0:15:18:8a:f9:e0:2a:a1:10:96:26:
2a:ba:3d:c0:84:85:95:97:86:07:de:3e:b0:0c:e1:
e8:33:2f:90:53:7a:38:56:5c:ae:42:79:b7:93:cc:
f6:9b:f3:39:dc:af:78:15:c2:1f:64:10:fc:c9:c8:
16:d6:aa:ed:ea:53:f3:87:5c:f1:ec:a7:25:ca:74:
92:03:d2:31:3b:cd:0b:ae:78:ff:75:68:5b:8f:9e:
9e:b3:9e:cc:de:7a:fd:c8:19:5c:ad:c9:26:5b:e6:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:47:57:24:CE:91:3C:B2:67:75:65:98:02:BC:06:6F:71:91:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF3061B4C60111EFA1E775AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ce:49:dc:76:7b:0b:6a:a1:62:d0:56:1c:d4:65:a6:8a:65:
df:3c:66:29:3c:66:97:58:32:16:02:2f:54:22:bd:90:23:7f:
7c:d6:4a:a6:de:97:dc:b1:c1:95:12:61:91:d3:7a:f8:08:21:
68:3c:27:2a:8e:f9:76:c6:7b:f1:fa:fc:bd:f4:2b:94:4b:1a:
5e:db:8d:a1:cb:d2:56:87:25:0d:7e:7a:40:24:55:bf:51:90:
53:f6:45:12:c4:34:08:81:6e:d5:03:e0:bb:67:c7:ea:ed:2c:
c6:41:4d:ad:5e:5c:bc:85:4a:bb:81:25:34:79:02:33:56:ce:
2a:e6:2a:00:fd:9a:27:20:0d:3b:6b:1f:8c:38:a2:3b:a6:51:
ae:b4:30:7c:58:62:ca:9e:b2:7b:7e:33:5d:44:20:60:34:3f:
85:27:b3:0e:0f:3f:30:b0:41:12:17:ae:4c:a1:a4:00:26:42:
1e:55:5e:c2:49:42:1a:73:97:35:19:ef:e9:8a:26:a2:e9:bc:
29:d5:58:2c:9f:2a:c0:66:49:ca:c4:37:32:58:a3:fe:8e:e2:
dc:b0:f8:c8:0d:8d:04:f5:4b:69:db:ac:e0:e1:0f:05:d1:d7:
b5:b4:75:ad:bb:34:14:ec:59:fc:83:55:2d:df:2e:f0:cf:35:
4f:e4:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:48 2025 by rpki-client