Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6226D5EF61211EF8CF06D52762E951A.roa
File: D6226D5EF61211EF8CF06D52762E951A.roa (raw, json)
Hash identifier: kTS0KTYa7sA0DxDYUBs5LbMDc2sIywzSj13GSwp/Lgk=
Subject key identifier: 79:87:41:B3:4C:CC:C2:C5:BD:51:08:63:2A:D4:83:9F:DE:58:A4:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6226D5EF61211EF8CF06D52762E951A.roa
Signing time: Fri 28 Feb 2025 20:30:23 +0000
ROA not before: Fri 28 Feb 2025 20:30:20 +0000
ROA not after: Sun 13 Apr 2025 20:30:20 +0000
asID: 138915
IP address blocks: 154.206.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93179 (0x16bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:30:20 2025 GMT
Not After : Apr 13 20:30:20 2025 GMT
Subject: CN=67c21cdf-8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:97:d5:c1:67:ab:19:17:17:9b:c5:af:b0:
9a:8b:fa:a6:57:22:80:9a:64:9b:3a:13:4b:86:67:
c4:b5:42:c7:3f:43:5d:a9:77:ba:ac:c1:fc:10:df:
f5:f1:13:fa:53:86:17:64:93:a1:f3:cd:78:11:ed:
86:e6:a4:b1:de:a5:f4:08:9b:68:39:cd:80:0e:3d:
a8:6f:01:c6:d6:d2:bf:0d:dc:b6:65:06:b3:d2:e2:
70:aa:89:b6:64:95:59:e7:d7:29:29:81:64:2f:72:
fa:c7:75:10:08:1c:b9:42:05:74:eb:47:b2:c8:f9:
f5:15:a6:eb:91:cf:ab:54:cd:1f:50:fa:02:6d:66:
69:45:fe:a1:e7:81:e9:24:54:c8:c1:d1:1d:ac:c3:
7f:56:b9:54:6b:0d:41:fd:9e:e7:a8:7a:a5:2e:87:
75:20:e5:22:df:62:66:35:18:20:fc:16:e6:a5:a4:
0b:a5:b6:f7:64:24:5d:f1:f7:00:7a:f7:79:c1:7a:
03:a3:02:07:6e:85:cc:2b:69:60:f6:c5:e5:e4:8c:
06:72:01:99:d9:0b:b0:7d:22:ab:f0:ec:6c:58:ef:
1f:a6:5a:d2:5f:0c:c0:9f:67:92:6e:2e:ef:9d:a7:
51:20:7c:a9:25:03:3f:ef:d0:e6:b5:62:61:b5:ad:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:41:B3:4C:CC:C2:C5:BD:51:08:63:2A:D4:83:9F:DE:58:A4:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6226D5EF61211EF8CF06D52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:11:88:48:57:d6:8f:2f:fb:a7:55:29:33:ea:1b:41:a2:44:
67:73:f8:45:db:9a:5d:1a:cb:97:5e:3d:58:3f:54:68:8f:3c:
84:5c:3b:60:75:b7:97:5c:7b:bd:f2:b7:6f:5f:e6:6d:de:3e:
a9:16:42:f8:47:8f:c7:88:b1:fd:8f:f4:70:ca:dc:b4:9b:9b:
36:76:89:43:c9:6c:4d:e8:5c:e7:de:75:c1:79:25:5f:d3:bf:
22:c3:d2:14:16:17:55:ac:bb:95:fb:ce:b8:f3:4c:98:c9:83:
ad:f8:3a:a0:fb:c2:4a:ef:7d:45:ac:11:39:87:56:fb:08:5f:
6c:3f:32:36:8b:d6:7a:9b:33:30:11:30:77:fd:13:fc:f7:cb:
62:99:99:db:91:53:65:f2:a7:ef:13:e2:c5:9b:51:c3:e9:1f:
5f:60:74:e1:36:d2:60:7f:e5:f6:a5:42:70:2f:0c:38:43:f2:
e9:a3:71:86:ab:08:62:06:10:d9:4b:ed:0f:5b:d4:f7:a5:be:
de:f6:19:85:a1:35:65:56:b2:85:4e:4e:d2:d4:af:e9:fb:2f:
c2:72:32:6b:32:0c:31:30:81:53:c1:75:47:79:58:09:9a:68:
03:9b:5e:bd:b7:d1:9d:a3:d7:65:4d:e1:34:2e:d7:79:fe:e5:
aa:e0:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:18 2025 by rpki-client