Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EDE87EC91511EF98655747762E951A.roa
File: D0EDE87EC91511EF98655747762E951A.roa (raw, json)
Hash identifier: xzDpsO86a+PFp6B7nJkNrry+F/zLRbK+ft7ET3DcLmw=
Subject key identifier: 4C:16:5E:CA:35:01:A4:55:9E:BE:58:F7:42:1E:29:86:6D:59:16:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EDE87EC91511EF98655747762E951A.roa
Signing time: Thu 02 Jan 2025 14:28:21 +0000
ROA not before: Thu 02 Jan 2025 14:28:17 +0000
ROA not after: Mon 13 Dec 2027 14:28:17 +0000
asID: 17561
IP address blocks: 154.221.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78543 (0x132cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:28:17 2025 GMT
Not After : Dec 13 14:28:17 2027 GMT
Subject: CN=6776a285-6ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:07:12:47:ae:62:41:45:b0:ef:68:aa:01:
11:a0:6f:22:1b:f2:22:86:f4:fe:0b:5a:ad:05:c4:
a4:6f:44:01:b7:fc:65:d8:8b:1b:d4:e4:c6:20:90:
55:e2:ff:4a:d3:07:92:97:8e:82:50:20:8d:fc:55:
87:23:53:8d:ac:14:8c:d3:da:6b:c4:9a:4b:39:cf:
04:b8:00:6c:38:a6:f2:e7:1f:fd:68:6a:a5:2f:19:
20:5a:ee:36:1c:51:53:a5:cf:ea:0f:6c:b2:44:73:
a6:ad:67:f3:ef:63:e2:e2:78:5c:1c:fb:06:19:ee:
05:69:69:61:27:20:07:89:24:67:27:f9:4a:b3:75:
f0:4d:2f:95:d6:54:7b:14:7b:a5:fd:5b:fa:e5:b9:
c9:7c:97:9a:eb:23:35:20:21:d8:a2:f2:d6:e3:43:
cc:16:42:42:3d:93:51:34:ad:33:09:bb:2d:c2:c6:
f5:30:e6:35:78:3c:a7:97:39:b3:e0:12:c2:c1:18:
fd:a7:ec:86:0c:d1:69:0a:92:d5:c5:1b:fa:05:94:
c4:bd:c5:34:3c:85:3b:a1:54:19:c1:6a:d0:e2:25:
98:24:0c:c8:70:48:7a:1a:0a:ec:f0:a9:ce:b7:70:
48:10:77:c9:7e:a6:d6:3b:9b:f3:de:aa:a0:fa:20:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:5E:CA:35:01:A4:55:9E:BE:58:F7:42:1E:29:86:6D:59:16:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EDE87EC91511EF98655747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.244.0/24
Signature Algorithm: sha256WithRSAEncryption
99:74:9b:c9:07:d6:01:af:82:6d:7a:6d:47:b2:b2:f8:8b:c8:
d5:00:cc:c3:cb:e3:87:1c:8f:d9:af:65:ea:4b:98:e3:20:f9:
d0:75:3f:e4:8d:f2:b9:e3:f5:8c:c8:f7:f1:f8:59:67:d4:e0:
65:1d:ed:22:e5:ba:b5:b0:c6:61:17:b3:37:ad:42:22:18:e4:
cf:41:01:1e:a4:19:f7:30:f9:2d:5d:8f:14:98:0d:84:20:e5:
40:e4:9a:95:13:7c:a1:64:28:3a:16:9c:ff:d4:aa:19:78:76:
ae:93:b5:58:fc:15:27:49:de:0a:00:6a:6e:a1:30:51:2f:55:
a2:a5:b1:5b:1e:15:4e:10:aa:e6:d9:0b:4d:ec:f6:e7:45:b0:
7f:8c:ee:72:05:fe:a1:ba:6b:93:c4:ca:a1:82:52:cf:95:fc:
30:a8:59:09:0e:82:c0:95:dd:2b:f7:18:da:96:6e:4d:a1:7c:
db:9f:6c:83:ff:bd:10:4d:09:57:b2:c7:fc:10:7d:e1:2f:9c:
e2:3c:ce:0e:1e:8e:f2:ab:ac:c2:f3:14:08:03:58:72:18:d4:
8f:2f:7c:28:6e:87:aa:3d:f9:a4:d6:aa:d6:20:86:5e:4d:40:
1f:45:04:88:32:01:de:e5:c1:ff:b0:24:5d:17:6e:af:f2:a5:
7b:a7:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:06 2025 by rpki-client