Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E27C4F6CC62311EF8546A985762E951A.roa
File: E27C4F6CC62311EF8546A985762E951A.roa (raw, json)
Hash identifier: JFe4cuz3UPr9LkLaSCBax+QqoMjaDrBni01YyOSvRFA=
Subject key identifier: 0D:7A:7F:42:98:00:A5:0E:99:DA:CA:13:2E:42:01:12:FB:30:81:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E27C4F6CC62311EF8546A985762E951A.roa
Signing time: Sun 29 Dec 2024 20:31:30 +0000
ROA not before: Sun 29 Dec 2024 20:31:26 +0000
ROA not after: Sun 12 Dec 2027 20:31:26 +0000
asID: 17561
IP address blocks: 154.217.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77700 (0x12f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:31:26 2024 GMT
Not After : Dec 12 20:31:26 2027 GMT
Subject: CN=6771b1a2-3abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:65:0c:99:9e:6a:22:45:a8:0d:95:be:a7:
7f:92:e4:f3:82:be:62:7a:04:b8:e1:0c:c5:66:83:
15:83:12:fe:50:d4:75:e6:74:63:2f:d9:79:0d:d7:
1a:43:88:ec:1e:d5:6a:53:3b:8d:75:66:f1:dd:dd:
b7:34:35:d8:69:05:c3:34:3e:46:5c:68:d4:f1:d4:
fc:f2:80:d6:32:db:b5:33:7b:8f:fa:78:72:56:1a:
81:51:63:9b:d8:2b:8d:30:1e:77:35:a1:51:b4:e2:
71:6e:64:e8:30:7b:7a:95:15:8d:e1:b2:26:dd:a1:
3f:47:f5:b6:a6:ef:e9:56:04:7d:6c:da:91:f5:e5:
74:9a:82:ed:7a:4a:c4:55:d8:8a:b5:e8:2d:17:79:
0e:f4:c4:aa:d9:35:2c:ee:79:7e:91:cd:21:4d:b4:
17:f1:96:cb:b8:79:ea:8e:1b:03:ba:e4:6f:a7:11:
f6:05:92:6b:74:d7:91:c3:97:26:9c:23:58:e2:af:
1e:b9:df:1c:06:d5:f9:6f:b0:38:c9:83:22:75:bb:
42:e0:96:bf:47:6b:99:58:0b:da:6c:8f:92:ec:76:
bc:fb:a3:b6:76:58:94:2c:70:64:bc:a0:58:05:2a:
b7:b3:a5:20:0a:28:b9:e2:81:7f:08:d4:10:fd:2a:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:7F:42:98:00:A5:0E:99:DA:CA:13:2E:42:01:12:FB:30:81:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E27C4F6CC62311EF8546A985762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.165.0/24
Signature Algorithm: sha256WithRSAEncryption
af:46:c1:aa:fa:e1:3b:28:dc:6d:8e:68:ca:63:15:61:56:ca:
03:8e:b4:eb:20:fe:2d:6c:36:7e:c1:e8:11:74:e3:a2:da:99:
dc:d9:85:53:71:7c:f1:70:51:a4:57:5d:c4:e0:7d:44:8a:87:
bc:f5:cf:b9:6a:02:51:f0:71:a6:43:f2:3a:3a:09:41:e2:75:
99:ed:e8:2c:21:41:25:48:31:d5:87:84:a4:a2:d7:74:da:44:
3e:3c:11:c9:ee:84:1d:c5:f4:9a:7f:80:39:ac:87:1a:cd:c8:
bf:0e:6c:12:87:84:b1:ec:92:46:84:24:e3:ed:e2:6c:c9:16:
02:e8:a3:e8:b9:0c:70:78:1f:04:03:12:1f:80:7e:e5:78:b7:
5e:d1:4e:2c:2b:86:c6:b8:b0:76:77:ab:99:7d:20:43:98:7c:
b3:fe:77:16:c7:e9:1d:a8:5f:a8:44:ff:94:b2:20:58:ec:b6:
cc:ab:a0:4b:b2:d1:02:42:fe:01:42:3b:03:6f:c3:20:d1:fe:
d3:33:95:03:fa:24:e1:cd:45:b1:cd:17:4c:d7:7b:31:28:ae:
0a:5c:81:ff:56:5d:26:db:8d:e6:46:a0:cb:f6:77:79:17:c1:
99:17:5f:a4:9b:31:f4:4e:79:7b:76:9f:c7:5e:77:87:c2:9b:
6d:05:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:44 2025 by rpki-client