Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC82C10C94011EFA6B30055762E951A.roa
File: CDC82C10C94011EFA6B30055762E951A.roa (raw, json)
Hash identifier: JaH79MZe8G0dlAHo1/B3VWCNZeHfrC+2MaXnrUP32m8=
Subject key identifier: 14:51:6F:D0:6C:D5:FF:B9:B7:C3:B1:CF:49:CF:91:91:37:12:F4:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013427
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC82C10C94011EFA6B30055762E951A.roa
Signing time: Thu 02 Jan 2025 19:36:04 +0000
ROA not before: Thu 02 Jan 2025 19:36:00 +0000
ROA not after: Sat 13 Dec 2025 19:36:00 +0000
asID: 984
IP address blocks: 154.223.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78887 (0x13427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:36:00 2025 GMT
Not After : Dec 13 19:36:00 2025 GMT
Subject: CN=6776eaa4-aa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:71:e6:33:e5:71:c5:79:79:ea:c0:28:52:
21:c7:d4:b8:13:2e:c3:3e:80:57:74:6c:b2:67:d5:
6f:0a:da:51:28:e6:d0:22:57:b0:81:37:49:19:82:
14:66:7d:28:61:8b:fb:d9:74:e7:1f:4b:cd:d0:d7:
f5:b0:99:d0:16:cf:ca:09:65:9b:dd:91:f9:c4:fc:
a4:28:8a:5d:28:b4:d2:fd:50:38:9e:8e:e2:36:80:
2d:95:08:ec:bb:d8:fa:1f:10:7c:49:af:eb:0f:e4:
04:b1:ab:d7:d7:7c:35:06:d6:cf:01:be:e3:a8:74:
36:ad:71:d3:20:ff:e5:07:0c:5d:71:9d:e2:94:bc:
c9:5f:ed:c6:8c:04:80:41:10:3a:f9:f3:48:0b:73:
39:f8:44:e0:9c:85:a4:35:88:50:95:62:bd:5b:82:
52:a2:c4:e3:30:4d:bb:ab:41:49:fe:04:7f:98:e5:
6e:7e:cb:a0:f9:07:34:4d:49:ad:f2:49:7e:7d:fd:
57:c7:d9:47:b4:c2:54:91:11:f8:68:c4:b7:65:17:
4d:dc:d2:e5:66:33:3a:8e:18:18:a1:9e:3c:75:0d:
0d:3c:4a:8e:96:a7:e7:d0:47:47:9a:b3:05:0e:41:
bf:ed:54:ed:bc:b5:59:75:65:9a:5c:6c:39:d8:07:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:6F:D0:6C:D5:FF:B9:B7:C3:B1:CF:49:CF:91:91:37:12:F4:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC82C10C94011EFA6B30055762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.249.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bf:ad:e9:4d:16:0f:6e:d9:c4:70:f7:0a:44:c9:b2:38:db:
9e:2d:52:89:4d:64:c6:3b:f1:67:9b:4e:6f:56:19:f5:3a:9a:
19:bc:98:0b:c7:98:76:29:a9:fa:35:47:6b:5c:92:d6:71:5a:
26:af:23:db:c4:4a:29:bc:71:02:87:20:2f:ec:7b:cf:80:c0:
1b:6f:1a:24:aa:1f:9c:a5:0f:77:47:09:3d:2e:b2:a3:45:c8:
9a:b9:5a:1e:7c:d6:ca:30:7d:a1:8e:e4:c3:dd:cc:14:d1:92:
ca:a3:06:3e:98:e5:a3:c0:1c:cd:97:ac:62:d3:dd:d1:e9:54:
a6:1d:04:6d:dc:b9:39:1e:44:03:be:56:5c:f1:ae:f1:9a:2c:
01:07:0b:f5:4f:e8:c3:7f:82:0b:4d:92:27:95:0f:f6:bc:14:
a6:c8:8d:fa:3b:ec:89:5b:9d:f1:ff:3e:49:bd:60:26:fc:b0:
7f:72:ac:7c:eb:7e:03:62:b4:b4:82:73:c8:29:01:91:80:6c:
70:84:fe:b8:80:40:d3:d3:6e:2f:57:08:93:11:e0:1b:50:75:
36:50:12:11:31:cb:fb:bc:7d:73:92:eb:fd:8a:36:bb:c1:6e:
b0:64:51:47:24:60:d1:51:67:ff:18:d1:ee:91:e0:b6:77:21:
00:c5:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:43 2025 by rpki-client