Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F9ED34D2DD11EF8CA1DB5D762E951A.roa
File: D3F9ED34D2DD11EF8CA1DB5D762E951A.roa (raw, json)
Hash identifier: 7VvTGKMS8wrwBUw9wnPhD14iJotcp0nr62vAsDxX0s0=
Subject key identifier: 51:4A:C8:CC:9C:BA:C3:6C:B6:99:37:B5:2A:30:BB:79:C8:36:B8:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F9ED34D2DD11EF8CA1DB5D762E951A.roa
Signing time: Wed 15 Jan 2025 01:12:46 +0000
ROA not before: Wed 15 Jan 2025 01:12:42 +0000
ROA not after: Sun 12 Dec 2027 01:12:42 +0000
asID: 17561
IP address blocks: 154.217.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80756 (0x13b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:12:42 2025 GMT
Not After : Dec 12 01:12:42 2027 GMT
Subject: CN=67870b8e-323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:c0:68:54:48:cf:5c:25:75:33:23:4c:45:
e1:73:34:9e:7a:85:be:0f:06:ae:97:c9:b3:5e:44:
37:53:bc:6e:b1:94:09:54:8b:f8:94:c3:7b:ac:bc:
4b:84:d1:56:c9:2d:91:70:60:69:6e:23:c4:24:03:
dc:7c:40:3d:b0:05:0f:19:ca:cf:0c:94:76:26:39:
67:f1:3f:85:e9:8b:97:f7:a4:c5:7d:ed:16:a1:84:
53:b4:f0:98:7f:2d:64:7d:ce:7c:09:ba:2a:ab:1b:
23:6d:7f:6f:03:aa:d9:fc:0b:ac:00:4a:95:18:f1:
b7:fb:65:74:c4:60:cc:7a:b0:0b:0b:4c:ea:b1:71:
88:e9:81:9b:2a:9a:2d:f8:94:09:7f:55:46:c2:26:
34:7d:f0:c5:7f:81:a0:e7:22:b3:c9:ce:c1:5a:87:
53:a1:39:bc:33:f5:f2:58:79:06:0b:3e:64:00:be:
a5:48:f5:f8:2d:f2:ee:86:14:4b:42:a7:3c:e3:2e:
54:b6:15:c1:27:46:17:cc:79:d2:a0:e7:95:88:83:
f2:d9:bf:c7:0a:b5:c4:8d:e5:00:77:34:2d:5d:c6:
f8:70:92:7c:70:7c:43:90:a5:96:c9:4d:6b:c7:15:
1c:c4:03:b8:c7:38:f2:bf:c5:6f:9c:fb:0e:cc:0d:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:C8:CC:9C:BA:C3:6C:B6:99:37:B5:2A:30:BB:79:C8:36:B8:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3F9ED34D2DD11EF8CA1DB5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.238.0/24
Signature Algorithm: sha256WithRSAEncryption
68:54:d9:80:0d:cc:00:85:c8:66:a9:cd:ab:cb:14:a0:61:d8:
d5:5b:ef:04:eb:33:34:57:59:96:c5:7a:c0:0e:c8:7a:10:21:
61:93:87:48:b9:ba:f1:6f:c3:71:d4:4e:df:6d:cc:f3:bf:69:
c1:af:68:f1:97:40:42:63:2a:8f:fd:fa:1e:2e:4d:92:9d:11:
06:bb:5c:06:da:50:24:78:52:7c:60:ef:e0:51:f7:8d:38:b0:
aa:c2:09:92:4d:69:5f:70:d5:cf:9c:7e:fa:da:c9:79:cb:42:
3a:20:63:92:05:5d:fb:e6:3c:a5:43:9a:65:32:29:6c:e4:00:
ff:75:e3:2b:a7:46:1a:1c:b6:40:4d:6d:58:d1:b8:9f:05:fc:
fa:70:33:50:43:c5:76:f1:84:fa:28:28:35:ed:0c:6b:27:9e:
8e:c3:ae:30:a7:c2:6b:41:bf:f6:01:0c:a9:e2:02:9c:c3:0a:
1e:11:49:ad:d9:77:53:ab:2e:b0:a6:e2:a7:e5:2d:33:bf:e2:
7e:65:c7:01:5b:c5:2c:1a:ca:a8:1a:e4:56:b5:4a:53:1d:43:
d8:a5:09:e3:51:ca:d6:4d:ef:b3:d8:00:36:28:5d:08:b1:b4:
de:3d:0c:65:51:ae:b9:36:d8:c0:52:79:e1:b5:e4:72:96:f9:
af:ec:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:46 2025 by rpki-client