Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE7DA2C62C11EFB11352BE762E951A.roa
File: F8EE7DA2C62C11EFB11352BE762E951A.roa (raw, json)
Hash identifier: vpcCyEAWwTKH3JjYqA12ytYXz34mdFbdp9WLOUhU5QQ=
Subject key identifier: 33:B7:DF:C9:B9:E8:A0:FD:5D:0A:90:90:00:BA:83:09:A1:1B:85:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE7DA2C62C11EFB11352BE762E951A.roa
Signing time: Sun 29 Dec 2024 21:36:33 +0000
ROA not before: Sun 29 Dec 2024 21:36:29 +0000
ROA not after: Sun 12 Dec 2027 21:36:29 +0000
asID: 17561
IP address blocks: 154.217.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77776 (0x12fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:36:29 2024 GMT
Not After : Dec 12 21:36:29 2027 GMT
Subject: CN=6771c0e1-58c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:af:c8:dd:a4:bf:33:19:10:92:46:71:04:
46:e6:a1:f1:66:af:ff:03:d7:49:20:8b:30:2f:1a:
14:30:8b:a4:a8:fc:58:8d:8b:2c:73:11:93:48:ad:
ab:21:5d:e3:e9:60:c8:b0:32:d4:6f:16:ff:3d:71:
a5:22:4a:60:fb:cc:d3:0b:7e:1e:39:1b:a4:2d:8e:
06:b0:26:b6:6c:e9:d6:b7:88:70:3e:10:d9:60:ef:
5c:c0:bc:e3:96:ce:43:ac:7f:6a:3c:35:25:f8:6d:
f4:1d:52:2d:dc:f6:13:d5:2e:51:97:d9:b1:df:05:
c1:55:32:2d:84:60:5a:fc:3a:15:dc:08:79:ab:16:
d2:0d:44:c0:76:75:f2:05:54:f3:f4:cb:00:fc:c8:
15:e7:ea:eb:c5:fc:f0:3c:01:4b:f0:10:6f:67:bd:
3f:b3:f9:e4:78:02:3d:a6:29:50:65:b5:bb:23:b4:
23:87:e7:63:8d:30:f5:b3:1c:f7:a2:d1:20:be:62:
bf:8e:74:5e:90:6a:92:5d:37:ce:39:8f:60:69:f0:
10:73:8c:fe:31:d0:25:78:69:11:30:97:47:5c:43:
17:a8:0e:d2:cd:8c:20:09:6b:ee:4d:41:80:f6:86:
46:3a:b4:6f:23:1e:95:04:ea:99:3c:d6:b2:d6:17:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:DF:C9:B9:E8:A0:FD:5D:0A:90:90:00:BA:83:09:A1:1B:85:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE7DA2C62C11EFB11352BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7c:4a:10:37:c1:a1:a4:6a:ac:8f:af:fe:fd:3e:12:9b:50:
10:bf:d7:5d:9c:f8:07:e4:43:87:b0:a5:6e:79:e1:43:2f:33:
28:f4:17:4c:ac:33:1d:67:3d:94:8e:54:ec:0c:e9:b0:b5:cf:
6a:03:97:c7:12:8d:75:6b:e2:41:70:57:d4:26:32:8f:99:74:
c7:7a:94:c3:a8:a5:30:c3:2d:ea:c1:c6:79:ad:db:9c:9f:14:
83:52:15:5f:b9:85:3b:1d:4c:30:1f:57:48:6b:59:16:e7:96:
ba:00:26:58:a2:52:23:a1:40:ee:9b:62:c0:78:66:29:cf:3b:
ee:d0:26:1a:0c:d2:96:2a:c4:fb:5e:39:12:53:1f:32:3b:6d:
70:96:ec:d0:12:b3:f3:0a:dd:af:4c:6b:f0:27:7e:ae:83:39:
bc:26:e8:b5:42:72:6f:68:74:ac:fe:d9:ac:29:39:40:55:5c:
45:76:4a:65:67:3d:b7:70:c1:6f:3a:05:89:c5:5d:2a:7f:cf:
23:bb:ed:1a:21:d7:b9:77:02:6b:cd:86:92:01:99:c8:3a:88:
1c:33:6a:22:21:e4:1c:80:33:05:14:31:71:ea:15:60:2c:a2:
1f:8a:aa:55:79:3c:f7:0a:1b:e3:4a:2f:32:10:df:41:69:2a:
25:a2:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:10 2025 by rpki-client