Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F55EEB92CDC311EFA52EDA92762E951A.roa
File: F55EEB92CDC311EFA52EDA92762E951A.roa (raw, json)
Hash identifier: PXmfx/FPC9fA1bX9po5ywxOzIwYRw12Yzs4yJfsSS04=
Subject key identifier: 81:51:04:E0:E9:60:33:64:6D:1A:30:57:71:E3:4F:A6:71:D2:EF:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01372A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F55EEB92CDC311EFA52EDA92762E951A.roa
Signing time: Wed 08 Jan 2025 13:24:59 +0000
ROA not before: Wed 08 Jan 2025 13:24:55 +0000
ROA not after: Tue 16 Dec 2025 13:24:55 +0000
asID: 984
IP address blocks: 154.200.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79658 (0x1372a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:24:55 2025 GMT
Not After : Dec 16 13:24:55 2025 GMT
Subject: CN=677e7cab-61a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:9d:78:cd:34:38:b0:2c:a8:7f:fb:d6:fe:
7e:0d:f2:12:73:56:c9:25:8f:56:fb:c2:58:c3:b0:
20:03:2f:7d:69:59:39:74:ff:49:a9:57:72:ee:a6:
70:ef:c5:0c:e5:b4:d4:70:6f:a4:39:37:c5:88:0f:
40:ab:45:0f:87:c8:b3:35:22:fa:fe:79:ea:3c:77:
17:20:71:4b:97:2e:dc:0f:12:22:81:8a:48:d1:62:
14:78:e3:fd:cb:c7:1b:93:75:80:12:6c:e4:d7:56:
41:35:19:c4:76:ad:67:cf:a1:10:e3:27:8d:d4:9a:
98:aa:a3:be:72:54:c8:c2:a0:41:d5:83:a1:a0:d3:
d1:f3:98:fc:2a:e6:46:24:d4:96:53:2d:79:e4:22:
e7:6b:6b:7e:78:b4:fe:5b:15:c2:bd:77:01:e5:bc:
75:6c:d5:b2:d6:f8:2e:0a:73:c8:7e:83:c4:06:55:
72:ef:63:21:b4:7c:51:50:8a:d8:50:91:26:0c:f6:
41:fe:92:6a:b9:85:fd:e9:74:da:02:4b:f3:01:a6:
6d:84:4f:94:3b:66:8f:8e:a6:c9:29:cf:cf:6e:82:
e9:da:f0:3f:15:9d:bf:ba:7a:c2:93:f9:63:f1:2c:
65:34:19:3f:6b:fe:43:1e:f9:58:5d:cb:d9:ac:29:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:51:04:E0:E9:60:33:64:6D:1A:30:57:71:E3:4F:A6:71:D2:EF:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F55EEB92CDC311EFA52EDA92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:db:d1:9e:51:e4:bd:75:70:f9:08:ef:03:7f:55:56:a8:90:
43:aa:e5:9d:0a:36:fb:97:1d:62:f3:57:c5:05:2e:df:00:4b:
80:c7:d8:aa:95:35:68:03:68:c9:00:af:c2:6f:9f:7e:86:e3:
5c:62:b5:63:db:62:b2:77:3c:a5:64:db:6b:33:3d:92:24:f2:
a7:30:42:32:2f:ef:c5:59:ad:e6:2f:b8:04:93:2a:28:0d:8b:
c7:d4:a7:42:99:45:9b:e7:8d:25:53:4d:c7:9d:22:22:a7:90:
ac:d3:01:c5:52:ab:34:29:a7:59:ac:2e:44:d6:02:ef:a6:f9:
c5:b6:b2:67:00:a2:cc:b4:2b:6c:96:9b:a6:18:be:e7:6c:f0:
5a:b8:ea:c7:09:f6:f9:2e:b9:48:29:e9:da:ee:6d:43:77:0a:
93:5a:03:91:c5:2c:64:60:13:65:8a:18:f0:ad:f5:92:fd:75:
38:b9:e1:cd:34:8a:89:2a:1f:03:1c:2f:52:cd:40:c6:58:ed:
21:0d:54:06:a2:6a:20:c1:44:ff:cb:67:32:3d:d6:56:10:44:
ad:3f:06:37:0a:c7:11:c8:ff:e0:41:9f:25:9d:ee:df:d8:08:
cd:5e:11:a9:8a:a8:41:fd:d2:99:49:47:9e:62:b1:7d:50:76:
0f:22:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:59 2025 by rpki-client