Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A58506C25B11EF8011DF7A762E951A.roa
File: E7A58506C25B11EF8011DF7A762E951A.roa (raw, json)
Hash identifier: zNB/EChg/2/n3Epm9seR0R3PjXUiGFe2Hj9wlnVyLYE=
Subject key identifier: 3F:D2:E2:75:52:A1:08:51:BD:EF:D7:A2:94:63:13:2E:F0:4C:5A:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A58506C25B11EF8011DF7A762E951A.roa
Signing time: Wed 25 Dec 2024 01:02:26 +0000
ROA not before: Wed 25 Dec 2024 01:02:22 +0000
ROA not after: Wed 10 Dec 2025 01:02:22 +0000
asID: 984
IP address blocks: 154.199.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74614 (0x12376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:02:22 2024 GMT
Not After : Dec 10 01:02:22 2025 GMT
Subject: CN=676b59a2-9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:2c:62:5b:9d:b6:9d:81:60:d6:1d:26:a9:
7e:ad:71:01:0a:66:b3:cd:c7:ef:18:d1:28:27:0c:
81:df:e3:1c:75:09:84:50:88:76:9a:b1:bf:08:3d:
ec:9e:48:15:e0:4b:2e:01:6b:48:5f:c1:da:01:5e:
ba:ae:ab:c3:22:c6:3b:f1:5f:ba:ed:30:e0:d5:4c:
96:59:9f:35:3d:fe:d0:3b:f2:73:80:10:cb:f6:ef:
f9:ce:1a:c0:ab:7c:1d:da:30:2a:fd:4c:23:5c:aa:
23:0a:ff:a8:70:ab:c9:65:d9:ac:c0:88:77:87:73:
cc:15:5a:0f:9c:bf:07:61:de:a2:83:fa:d9:7c:10:
61:79:53:14:07:56:45:6e:2e:27:57:db:7e:0a:f9:
bc:91:4d:43:9d:6a:05:35:4a:01:eb:c5:b0:48:a5:
33:6c:e1:f7:97:86:fe:ad:b6:d3:93:18:03:8b:d4:
85:61:84:07:67:35:b8:c7:6c:67:35:e3:36:50:1f:
27:85:ed:fc:de:23:ea:e8:f3:ed:70:17:21:69:e7:
3e:f3:fe:a0:e5:f4:ca:f2:4c:40:8a:ee:07:51:db:
be:80:25:5a:a7:f2:c8:27:d6:eb:2e:6c:81:4f:7c:
f6:39:a5:02:aa:97:f7:c9:35:80:73:7d:17:c1:fc:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:E2:75:52:A1:08:51:BD:EF:D7:A2:94:63:13:2E:F0:4C:5A:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7A58506C25B11EF8011DF7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.72.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1d:ea:9c:9f:cf:dc:9c:1c:68:1f:d1:09:b8:81:8f:c3:c1:
7d:b0:26:f1:4a:8e:9a:5a:75:b4:00:45:71:8c:79:ed:a4:68:
0b:93:62:02:09:c5:05:c9:0c:cf:19:a9:20:ac:a0:a4:a3:e8:
cc:d0:12:0e:2c:55:5d:97:43:b2:f1:c5:26:27:fd:3f:77:aa:
de:8d:7c:db:c9:68:46:9f:30:09:d1:14:79:19:6e:c1:90:69:
d8:b6:35:18:d7:dd:09:5b:8c:e3:8e:14:af:75:98:7e:23:94:
5f:aa:b9:7c:7a:82:80:bb:78:ac:7a:29:20:8e:0e:61:84:0e:
e1:ae:23:3d:9c:76:f8:5d:45:1d:cd:f9:95:07:13:87:12:4f:
92:63:d1:3f:c8:0f:d2:3f:44:99:4d:97:ec:d7:ce:d5:61:3e:
87:08:a5:68:7a:a4:89:a3:7f:f8:c9:de:17:ee:4b:ef:32:54:
af:a9:d1:8f:0c:c3:d0:50:3c:47:06:d3:97:f8:3d:1d:34:6a:
4f:c8:37:c5:c5:87:97:4c:e3:bb:9d:13:35:97:08:25:e2:e4:
e7:1e:3a:c5:0a:47:fc:5d:84:fd:8f:83:66:61:f1:27:51:3a:
59:4f:87:5c:22:5a:93:95:82:66:27:a6:5f:fa:f4:c2:cf:25:
2c:5c:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:46 2025 by rpki-client