Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F584BF52C54411EFA857B683762E951A.roa
File: F584BF52C54411EFA857B683762E951A.roa (raw, json)
Hash identifier: y31jU4TNGbajjDPBT2GJ/zc3DktLEjJ2s6AC4hh4dOI=
Subject key identifier: 25:57:E2:1E:D9:02:9F:5F:74:47:53:03:7C:5C:E0:24:0A:95:C3:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F584BF52C54411EFA857B683762E951A.roa
Signing time: Sat 28 Dec 2024 17:55:44 +0000
ROA not before: Sat 28 Dec 2024 17:55:40 +0000
ROA not after: Sun 12 Dec 2027 17:55:40 +0000
asID: 17561
IP address blocks: 154.208.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76961 (0x12ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:55:40 2024 GMT
Not After : Dec 12 17:55:40 2027 GMT
Subject: CN=67703ba0-f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:ca:ce:5d:f0:b3:dd:ba:a1:86:1c:8a:a3:
4d:73:b6:5a:85:e4:48:91:5d:d7:90:d1:30:01:3d:
76:90:00:e1:7f:22:aa:72:2a:33:36:57:90:fc:ca:
e5:92:f0:d7:dc:8d:85:33:6c:10:8a:d6:44:f4:26:
11:02:85:ac:f3:1f:df:a7:6e:1f:31:b3:69:fc:d8:
f6:d8:76:06:3a:71:17:dd:64:c1:92:86:42:a8:2e:
83:ae:c8:28:37:34:70:97:54:d0:d4:c7:69:6a:4a:
f0:36:de:2f:f8:f1:cd:51:4f:60:64:2c:c1:80:62:
bf:26:b9:0f:e9:98:b2:dc:a7:91:fb:b3:f6:ba:73:
6e:27:3c:cc:0a:27:f2:74:59:37:94:c4:f2:7c:48:
3e:00:23:d3:80:1f:e2:2a:2a:78:39:55:62:db:8d:
66:a3:00:e1:3b:4e:79:58:59:11:2f:b7:3c:01:2d:
0a:46:b4:2e:b5:81:c9:cf:41:ca:43:20:ae:74:51:
e1:f1:71:ca:46:d9:f0:d6:25:c3:74:ef:1c:f5:9c:
9a:71:20:8c:42:a5:eb:5b:f5:6b:82:f1:9b:9f:2c:
dd:5e:11:2a:08:c8:a9:fc:3f:15:a3:c2:a8:2d:a9:
3a:8a:4c:7e:0b:2d:ec:a3:77:ba:34:eb:14:66:3a:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:E2:1E:D9:02:9F:5F:74:47:53:03:7C:5C:E0:24:0A:95:C3:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F584BF52C54411EFA857B683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2c:85:79:38:30:d2:c8:d8:6f:51:87:6c:f3:d3:cd:95:24:
79:78:e3:5e:a6:60:a4:e9:9a:fd:a7:78:14:33:7b:4c:5f:ce:
e9:e5:67:f4:9a:01:72:b6:60:26:c2:bd:55:9e:75:db:36:6a:
21:14:4f:38:84:57:d1:f5:7c:2b:40:41:e9:df:e3:eb:78:7f:
e8:13:72:07:8e:97:16:b3:48:19:e3:4e:f0:87:6e:59:b8:35:
51:0e:13:e5:70:66:c4:8a:cb:41:34:1e:5e:1b:28:bc:13:ba:
18:ad:89:fe:35:a0:7c:a2:97:47:02:94:ea:c9:c1:0a:21:05:
e6:e3:cb:63:6c:53:35:31:1f:bc:7f:4f:10:9f:ef:1a:52:de:
c2:70:dd:5e:2f:07:2a:78:89:a9:ef:4d:eb:2d:e0:a7:cd:89:
b5:be:7a:ad:1d:98:f0:17:06:3e:d5:0b:85:d4:76:43:97:b2:
41:8a:eb:90:1e:ef:06:ad:7e:92:8d:b1:0d:f9:0f:1e:d4:7c:
12:77:4e:5f:c5:81:65:58:1c:e2:eb:e6:4d:1d:2d:39:50:09:
a0:e6:15:c2:5e:6c:15:bc:47:67:f6:73:65:36:fe:bd:56:94:
9b:e5:91:aa:ed:21:a1:0f:8f:83:e4:d4:bc:31:9e:fa:0d:13:
e2:3e:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:41 2025 by rpki-client