Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9EE6BCCC52611EF9A2E0C48762E951A.roa
File: C9EE6BCCC52611EF9A2E0C48762E951A.roa (raw, json)
Hash identifier: UbsqJuJJ9GXqyfLwdnm5mpD0OSMTvJLJPNnwvHQ2L3k=
Subject key identifier: 77:C8:23:C6:39:B7:55:93:6B:95:CB:CE:5B:70:3B:FB:35:44:AD:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9EE6BCCC52611EF9A2E0C48762E951A.roa
Signing time: Sat 28 Dec 2024 14:19:46 +0000
ROA not before: Sat 28 Dec 2024 14:19:42 +0000
ROA not after: Fri 12 Dec 2025 14:19:42 +0000
asID: 984
IP address blocks: 154.204.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76685 (0x12b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:19:42 2024 GMT
Not After : Dec 12 14:19:42 2025 GMT
Subject: CN=67700902-9ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:48:cf:3e:0f:c9:86:ca:75:85:82:c9:b1:
37:db:b1:43:83:5f:68:25:4a:30:c6:5b:e9:05:8b:
6e:75:2e:55:3b:ff:3c:a3:7c:ff:98:b0:e9:65:14:
2b:c0:26:9c:b2:90:03:35:e4:51:e8:4f:23:ac:e6:
a8:56:91:18:a7:99:81:f1:ba:4e:70:52:d0:90:f5:
ec:27:37:b5:31:63:ab:d3:29:8c:1c:92:83:64:2e:
12:94:58:e8:b4:73:8d:3b:e7:d5:e7:24:44:f6:9a:
8e:02:9a:c9:0f:22:59:ef:0e:5a:fd:47:b3:3b:7d:
68:0d:26:34:1c:0a:ee:87:1c:33:08:4f:f9:d4:f4:
6b:e9:ab:1a:ef:fb:5e:67:56:8d:f6:7f:17:59:eb:
5c:b5:01:2f:6a:7d:21:c9:6c:c3:d2:ed:83:97:80:
87:7e:45:2b:36:73:81:9b:fb:9c:38:ba:d5:5f:2c:
b2:3d:41:9e:0a:45:0b:6e:1e:09:ec:0f:a9:1b:82:
69:d1:c6:fe:ac:04:8a:6c:7c:ff:ab:4b:4c:9f:39:
fd:a2:3a:b5:5b:b0:36:cf:4d:78:9c:02:57:96:c5:
40:0a:b3:1d:35:05:d4:42:ba:a9:57:73:91:d6:4d:
df:e8:26:ab:62:91:0d:01:03:60:c8:f7:0d:a4:ab:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:23:C6:39:B7:55:93:6B:95:CB:CE:5B:70:3B:FB:35:44:AD:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9EE6BCCC52611EF9A2E0C48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:af:60:30:57:34:cb:0f:4c:70:d9:ee:a4:d2:8d:e9:54:6b:
88:de:bd:2f:06:b8:ed:16:8e:82:eb:a8:5c:bc:2f:67:a3:56:
a9:aa:ac:c2:7b:fd:62:cb:97:aa:c1:7f:b4:97:96:ef:42:46:
1c:fb:54:39:37:89:3d:53:d1:1e:72:dc:73:5a:2f:3c:95:3e:
ea:bb:18:b2:b9:21:f4:a5:85:81:73:09:5c:35:1f:6f:37:60:
c0:84:14:4e:d8:c0:c2:2c:0a:f7:16:4e:d5:3b:5a:55:b1:b0:
32:f7:43:e1:e0:d1:72:f5:cd:13:f0:ae:4e:fe:b8:24:a4:ba:
88:4b:f4:c3:f2:60:47:ce:57:3c:ac:d1:92:ac:5d:d5:c1:fa:
62:90:47:9c:f8:47:ad:0f:d1:ce:bf:95:46:7d:8d:5e:d4:42:
7b:e9:b4:21:6a:63:7c:f4:b1:2f:a4:bf:f1:e2:47:e0:d2:39:
9a:f3:9d:d3:c5:15:2e:ce:9d:c9:49:05:0d:80:34:b4:5c:b2:
a7:18:1d:87:f9:a3:7a:58:fc:74:43:f2:31:36:c6:d1:0d:0f:
ba:26:ac:71:f1:f0:0d:72:4c:8f:60:44:17:d2:98:51:09:fb:
93:1b:4f:ca:70:53:41:54:36:91:26:70:dc:73:42:67:a3:5b:
96:5a:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:42 2025 by rpki-client