Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC576206C0D811EF95315D68762E951A.roa
File: EC576206C0D811EF95315D68762E951A.roa (raw, json)
Hash identifier: FvzomZDlkFcGeqGU1Jgsv3jl0COgiLYdwioF50pWFF8=
Subject key identifier: 98:E4:ED:8D:49:AC:D5:1A:02:9F:59:91:45:8E:34:6A:2B:31:4C:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC576206C0D811EF95315D68762E951A.roa
Signing time: Mon 23 Dec 2024 02:52:18 +0000
ROA not before: Mon 23 Dec 2024 02:52:15 +0000
ROA not after: Wed 10 Dec 2025 02:52:15 +0000
asID: 984
IP address blocks: 154.89.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73346 (0x11e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:52:15 2024 GMT
Not After : Dec 10 02:52:15 2025 GMT
Subject: CN=6768d062-dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6a:43:b8:9f:86:e5:5c:b8:54:da:cb:5d:0d:
91:0e:12:2f:de:f5:6a:32:f8:a0:61:2f:6b:71:db:
c1:54:44:d9:a3:9f:e6:f7:e4:99:5f:be:08:cf:55:
d2:ef:23:2e:a7:12:6a:9c:f6:8d:9c:9a:38:eb:8e:
39:5d:e5:b2:17:dd:10:bd:19:9e:e1:d6:90:8b:f6:
80:e7:cb:46:08:02:f7:9a:6a:aa:c7:79:81:2a:30:
2a:c3:ad:6b:d4:c3:4e:39:53:33:86:53:41:92:ff:
60:a6:ce:fd:e3:65:bf:b3:0a:c1:8c:a3:78:1e:13:
09:2a:10:e3:1a:7b:f9:e8:8e:31:db:e2:db:11:ad:
6c:75:8a:af:76:7a:76:91:91:37:88:50:e8:d6:b5:
4e:de:3b:fe:1a:b7:8e:c6:34:2d:8b:33:bf:f9:33:
f9:54:ca:05:4f:d9:cd:e6:78:9a:6f:38:75:51:7c:
b5:e3:d6:88:d6:2b:ac:c8:e0:83:c7:f4:46:b2:16:
b3:e9:5a:d2:22:63:30:c8:38:a8:e3:f1:f5:ca:3a:
c5:d3:0c:3a:6f:c0:ef:86:ca:2f:94:64:53:f2:35:
94:81:a1:67:b2:9b:62:d9:7b:01:f6:51:46:f5:8a:
e6:f1:0c:a4:66:91:47:55:bd:c3:8c:34:da:b2:bf:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:ED:8D:49:AC:D5:1A:02:9F:59:91:45:8E:34:6A:2B:31:4C:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC576206C0D811EF95315D68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:21:6a:ac:ee:bb:9c:2f:c7:f4:ba:43:4c:5a:50:74:d8:
2a:65:74:15:ce:f2:47:9e:a5:1f:82:e9:f6:40:75:0d:4d:15:
0b:85:bb:4f:b7:b8:f7:51:ab:c9:ee:3d:39:09:79:c3:b7:67:
c5:f9:ab:f8:e9:4e:64:e5:d8:d1:26:f9:a5:eb:d1:f9:db:31:
03:a5:69:c3:41:5f:ef:fb:a2:f3:60:c0:5c:5a:75:36:7a:95:
fd:5f:a9:a4:20:f8:2d:61:6e:0b:90:bc:72:ac:2b:e6:6a:a1:
39:ee:fa:f7:ee:8c:b5:ca:99:c9:15:d7:9c:5f:10:ca:6b:96:
0d:e4:36:cb:e4:cb:68:ff:af:62:fb:a7:9d:13:51:b0:69:4b:
cd:2f:4a:b8:39:d3:49:31:51:b8:ce:90:b6:4c:92:47:39:a8:
4f:4b:b2:4e:6a:fb:6a:66:ca:b0:06:d1:5d:f4:71:c5:61:fc:
2b:2f:fd:9b:df:07:6a:3e:57:39:19:97:db:61:1b:85:32:5f:
45:c3:b7:90:88:52:d9:28:7b:4a:c9:bc:31:bf:c6:35:2c:a4:
0f:8a:92:8e:1d:d9:04:55:bd:dd:0c:8e:10:66:f4:6f:a3:6f:
a4:60:26:4e:f5:b9:b5:8d:c6:0b:b7:14:58:2d:c7:b7:54:40:
f9:df:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:43:53 2025 by rpki-client