Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5118FD0C51B11EF9BD53281762E951A.roa
File: D5118FD0C51B11EF9BD53281762E951A.roa (raw, json)
Hash identifier: 2vcYKIk1Gzm0s86qq1UUFsDxr8neRsQCKipAp55soO4=
Subject key identifier: AE:D9:2C:DD:E4:27:31:00:52:E5:8F:A1:CB:3B:96:43:F4:BB:E3:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5118FD0C51B11EF9BD53281762E951A.roa
Signing time: Sat 28 Dec 2024 13:01:20 +0000
ROA not before: Sat 28 Dec 2024 13:01:16 +0000
ROA not after: Fri 12 Dec 2025 13:01:16 +0000
asID: 984
IP address blocks: 154.203.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76583 (0x12b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:01:16 2024 GMT
Not After : Dec 12 13:01:16 2025 GMT
Subject: CN=676ff6a0-a140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:db:e0:dc:49:81:51:b0:3e:4b:be:41:ac:
dc:2d:51:ba:92:df:da:ce:ae:7b:6e:60:4c:2a:b4:
04:25:4c:c4:0e:cc:d4:dd:52:1d:0c:18:c4:da:8e:
86:5a:b4:b9:6e:ec:13:66:1e:a9:c3:56:19:f5:67:
ac:46:31:cb:95:ca:a1:12:a5:99:61:b4:e9:8b:e6:
17:e9:49:8f:df:b9:7b:9e:13:c6:79:f8:25:0d:fe:
8d:d6:8a:ae:3d:1c:02:0b:af:5d:1e:50:a3:3d:bc:
54:d7:ee:40:f2:a1:87:6a:90:d5:58:2f:46:ba:67:
e6:fd:a4:6d:73:d4:5c:5e:93:2a:cf:11:c8:ff:39:
5e:fe:0a:47:e1:c4:34:ff:72:90:fc:cd:0a:89:00:
ae:0d:bf:da:ff:4d:e4:77:0d:2b:a0:3d:e8:31:af:
48:af:ac:ba:b3:aa:ba:22:96:ee:a9:5f:0e:f8:1f:
23:1e:17:ec:b3:ba:8b:62:e1:7e:9d:e9:49:e9:14:
a5:82:04:7e:0d:48:4d:17:a7:69:93:46:36:9c:37:
50:14:40:c7:b6:db:07:ba:26:23:7c:65:bd:92:34:
25:79:2c:cc:53:34:4d:33:f2:63:56:89:19:09:a3:
36:60:92:ff:d2:02:1f:98:fc:51:00:bf:88:56:97:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:2C:DD:E4:27:31:00:52:E5:8F:A1:CB:3B:96:43:F4:BB:E3:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5118FD0C51B11EF9BD53281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b2:d7:e5:c0:c8:ae:ff:81:c7:59:66:5f:c9:92:5d:2d:b2:
be:18:0a:09:ea:aa:62:c5:1b:e1:d1:d1:09:54:96:f4:b2:be:
1a:58:b1:e5:3f:d2:1a:6c:01:5b:1d:81:23:d0:49:b5:24:23:
0d:88:b5:9b:04:b8:e2:aa:14:90:2c:46:1e:c1:2d:5d:c2:d5:
fb:6d:80:b4:d4:d3:c9:34:b7:91:c3:3b:b0:91:d8:91:b9:64:
2c:1a:cf:33:a5:85:dd:ae:9e:f7:9a:94:9d:f4:7e:b6:1b:37:
69:3d:d4:db:3e:4f:74:80:e1:f2:55:ab:f9:00:77:83:ad:48:
89:7a:9a:44:15:82:bd:a8:a0:84:af:03:68:1f:33:12:a8:ad:
de:8d:df:07:5d:a1:c1:2f:23:1d:d0:cd:c0:3e:c7:91:01:e3:
38:23:f8:30:6c:88:5b:6a:06:5f:ec:46:e6:bc:fa:f1:c6:7a:
47:96:62:00:6e:46:1e:c6:cc:6e:16:a5:f7:92:eb:39:0f:19:
3b:b3:10:af:9e:9b:8d:dd:6c:c1:c9:97:53:77:72:ed:31:cf:
b5:b4:65:7a:27:2e:0b:cc:5e:59:a2:b9:47:87:69:d8:79:53:
7e:a2:7c:c1:a3:b1:77:b3:de:0b:4c:0b:4b:f1:aa:e3:98:48:
75:10:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client