Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F47246F6C52211EFB7C52BAD762E951A.roa
File: F47246F6C52211EFB7C52BAD762E951A.roa (raw, json)
Hash identifier: hWw/FXPYP/M5+ulw0TqfKpBcGmCTLg5o6FL1twyFGSQ=
Subject key identifier: C9:8F:18:F7:DD:BE:EF:2D:95:3D:72:2D:8F:AF:BB:6C:30:76:11:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F47246F6C52211EFB7C52BAD762E951A.roa
Signing time: Sat 28 Dec 2024 13:52:19 +0000
ROA not before: Sat 28 Dec 2024 13:52:16 +0000
ROA not after: Fri 12 Dec 2025 13:52:16 +0000
asID: 984
IP address blocks: 154.203.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76649 (0x12b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:52:16 2024 GMT
Not After : Dec 12 13:52:16 2025 GMT
Subject: CN=67700293-8461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:0c:45:41:7d:9c:0a:53:5c:9c:12:32:59:
9c:51:63:33:04:d0:e8:8c:c2:e1:5b:b7:3e:ee:ef:
23:77:49:81:da:7d:a8:81:d8:cf:eb:93:17:f7:b8:
c6:bd:1c:c7:fb:fe:ed:aa:e7:07:88:14:6d:a4:7a:
f5:cc:00:4a:bc:be:c4:db:85:5a:50:b1:d1:db:e4:
55:b8:00:e8:39:9e:14:5b:78:55:57:06:89:35:c0:
8f:d4:5a:24:ac:ca:85:9d:96:30:5c:dc:ab:0b:84:
ce:ca:4c:16:37:79:56:a5:bd:14:cb:b7:00:fe:d7:
07:a2:b8:7f:ba:09:73:c9:ba:70:d7:15:40:42:ab:
bb:fa:18:f1:26:97:63:eb:f7:30:50:11:a7:13:e4:
3d:66:4e:95:d4:66:2a:d9:b2:50:84:25:f7:57:a6:
e9:07:ef:07:38:b9:ad:4a:af:c1:c7:f4:ff:e6:e4:
47:e0:61:49:08:f9:e5:47:86:59:3a:77:31:d3:f1:
c8:f7:7f:78:97:01:60:23:7a:5a:76:e3:80:0d:c1:
48:fd:97:fb:5a:c0:36:77:09:69:66:1d:c7:1d:80:
07:d8:01:6e:fa:03:fe:dc:ec:d0:dc:c0:32:cf:0a:
a3:b1:5b:f7:09:29:30:37:93:ec:9e:8d:c9:a4:a9:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:18:F7:DD:BE:EF:2D:95:3D:72:2D:8F:AF:BB:6C:30:76:11:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F47246F6C52211EFB7C52BAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.203.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fc:27:48:56:fc:88:8a:95:b1:01:b8:6f:1b:5b:8a:54:68:
7e:29:9a:63:09:74:5b:85:84:a2:7b:ef:31:8f:49:d7:47:3d:
3a:40:c9:ce:84:39:2e:28:e0:03:00:1a:8c:93:ab:d8:fa:03:
dc:11:6b:c0:f0:35:36:1e:0f:33:03:82:05:1a:5c:d0:3c:8c:
61:eb:f2:7c:4a:54:10:7e:b2:72:44:dc:d6:b2:d7:06:6e:58:
42:70:a9:38:87:16:81:d5:ad:fc:91:b1:59:85:11:9a:c1:7d:
b3:04:25:a7:8e:b5:05:82:a2:00:a7:88:5d:c7:bc:65:b6:ee:
6d:2a:cf:bc:3a:33:46:a9:a3:a4:44:a5:90:51:7b:ef:77:d4:
8f:45:c6:23:d8:19:16:28:7b:88:73:ab:79:89:4f:ca:ab:de:
90:23:42:82:98:16:14:ed:3e:df:2a:0c:8e:fc:d8:0a:bd:bf:
2d:c6:e2:1e:ed:9c:b6:f4:01:cb:03:a1:fe:29:8e:eb:ac:44:
37:0f:fb:49:fa:4c:f2:5e:06:32:77:3d:6a:26:f3:11:73:c2:
6b:cb:c4:26:dc:c7:cd:1e:5a:3d:e8:15:13:e1:0a:1d:67:e3:
c2:ca:e4:2a:a2:26:47:be:d1:85:75:58:94:22:29:d4:d1:a1:
4e:a6:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:44 2025 by rpki-client