Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA4ADDAC91611EF80DDDF4D762E951A.roa
File: CAA4ADDAC91611EF80DDDF4D762E951A.roa (raw, json)
Hash identifier: Rz4wHcocfIj23AHdnUW8KKZZBpWcIdB/cvBbvLoU/jg=
Subject key identifier: 16:5F:33:48:8A:3D:17:B0:57:BE:42:8E:F9:C2:E2:93:28:1A:5A:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA4ADDAC91611EF80DDDF4D762E951A.roa
Signing time: Thu 02 Jan 2025 14:35:20 +0000
ROA not before: Thu 02 Jan 2025 14:35:16 +0000
ROA not after: Mon 13 Dec 2027 14:35:16 +0000
asID: 17561
IP address blocks: 154.221.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78551 (0x132d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:35:16 2025 GMT
Not After : Dec 13 14:35:16 2027 GMT
Subject: CN=6776a428-28f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:f2:c9:2f:18:b8:10:b5:54:71:cd:de:a4:
ca:b2:83:e5:07:ab:1c:35:43:44:2c:38:41:02:44:
88:3d:3a:69:2b:4f:40:ea:fc:f5:e0:f5:a3:8d:67:
d7:f1:dd:71:10:2f:3f:e6:41:e6:47:92:db:3d:c1:
17:9a:8e:b0:36:11:48:89:4d:98:f2:3a:d6:14:6a:
6d:e1:31:3d:c6:6c:66:26:cc:27:e3:81:1d:67:f6:
3a:66:f6:e7:3b:32:58:2d:90:1b:b8:f3:c4:25:94:
af:4c:03:68:b0:95:5e:54:12:10:52:0e:88:b3:e3:
55:3a:a0:fb:d1:ba:46:1c:f9:8b:2e:3e:66:f0:11:
d0:b1:48:7e:21:73:8e:bb:8e:a4:de:6a:b9:a1:6b:
d8:a0:b7:55:52:51:9a:f3:63:8e:2e:bd:f5:7d:50:
9a:a0:31:c1:fe:17:d9:77:c0:25:fb:a3:bb:b8:81:
96:e7:5a:d1:0c:e9:7e:97:57:2b:07:69:f7:04:a3:
d8:f6:af:49:2f:6e:c9:f6:32:b2:ba:ea:6d:83:10:
43:65:3a:f6:3a:df:40:2f:b3:7e:56:2f:b5:8f:26:
b4:c5:c4:e2:95:d7:f0:3b:b5:55:76:11:7a:5b:e4:
4e:a0:65:a2:6a:b2:9c:7e:71:9c:e0:1e:b3:17:8b:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:33:48:8A:3D:17:B0:57:BE:42:8E:F9:C2:E2:93:28:1A:5A:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAA4ADDAC91611EF80DDDF4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:86:38:cc:10:2f:99:eb:66:30:84:84:f3:fb:0b:c7:b5:93:
8f:0e:d8:88:f6:ae:01:8c:59:71:35:0e:3b:29:07:f2:33:e8:
0a:fd:f5:3e:7c:75:f8:79:cf:1a:75:4f:7d:a5:0b:2c:cd:22:
45:8c:03:71:57:11:2f:da:f8:8c:76:f0:06:f5:4f:f4:43:10:
b2:7b:12:e7:12:10:da:fb:b8:f1:1b:6f:25:46:77:58:5c:c8:
03:a9:47:4c:14:7a:02:60:6e:05:1e:f9:b1:c3:18:5e:f2:09:
df:56:99:2a:bb:6f:59:f0:b8:32:da:9c:6d:f1:bf:18:5d:2a:
06:4f:84:e0:9f:6f:2a:07:42:17:a3:3c:81:a3:a6:ad:66:e3:
05:89:1c:5d:a8:14:5d:6d:82:95:f6:bf:e7:bb:7a:0b:dc:70:
6b:60:4c:3b:6c:7c:2a:0f:8f:57:51:5b:85:fd:33:a9:ab:30:
8a:fa:9e:94:a7:6a:10:59:75:c2:90:aa:38:db:65:a7:8c:ec:
a3:2a:fc:0b:a0:b2:34:2d:90:21:02:02:04:e5:a2:25:ac:28:
c3:d7:dd:8d:10:2b:17:d2:ea:b8:82:19:7d:2f:45:00:64:28:
93:c4:1d:c1:02:ab:f4:8e:a6:56:3c:cd:b2:b6:1c:43:8a:4e:
99:25:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:40 2025 by rpki-client