Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B8A108C54711EF95865B95762E951A.roa
File: F9B8A108C54711EF95865B95762E951A.roa (raw, json)
Hash identifier: 9qAM9WDWpLtwKhuZfKC9BvGpaMri6wVLiBpabueAJ4U=
Subject key identifier: 1F:B3:6D:01:91:CD:A9:A1:53:83:C9:E3:98:EA:28:D2:EF:84:B0:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B8A108C54711EF95865B95762E951A.roa
Signing time: Sat 28 Dec 2024 18:17:19 +0000
ROA not before: Sat 28 Dec 2024 18:17:16 +0000
ROA not after: Sun 12 Dec 2027 18:17:16 +0000
asID: 17561
IP address blocks: 154.209.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76989 (0x12cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:17:16 2024 GMT
Not After : Dec 12 18:17:16 2027 GMT
Subject: CN=677040af-3d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:7d:57:92:6e:82:95:d6:c3:90:64:52:cb:
17:2c:ff:b0:f9:ae:34:eb:a4:40:fa:eb:3b:91:96:
3e:8d:52:f7:88:e6:26:48:e4:ce:3f:14:06:32:5a:
f9:db:ec:43:36:ae:83:91:51:34:39:fe:25:32:9f:
1f:58:61:e2:62:da:46:e2:9f:09:3c:c6:32:d0:e9:
23:b9:83:f9:ea:ad:ba:e0:9e:52:e0:4f:6c:89:63:
63:1e:13:c5:d6:79:cc:15:46:7c:a8:a4:db:4a:4d:
d4:44:0e:35:38:f3:9b:07:74:19:14:8a:4f:9f:af:
51:ed:d3:4b:f1:92:8d:e4:71:41:04:dc:a1:74:4e:
27:16:15:c1:be:c0:a8:36:36:ee:72:a1:8a:78:b5:
88:89:01:08:86:83:53:52:b0:0a:52:01:8b:fa:d0:
71:96:d5:6b:23:aa:d9:fb:e5:9c:19:c6:92:3b:73:
fd:1c:ef:21:12:43:6a:10:0a:ec:d2:c4:69:e9:8c:
3a:cb:2a:e3:5d:09:f3:f4:78:f2:b0:8b:60:b5:9b:
12:32:a2:ad:ab:88:b2:3e:67:11:b3:fc:3e:a0:62:
ab:eb:47:7f:9a:9b:a6:57:33:ce:98:4d:61:de:ea:
47:28:df:7a:8c:04:35:0d:4a:cb:2a:79:bc:f5:6c:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B3:6D:01:91:CD:A9:A1:53:83:C9:E3:98:EA:28:D2:EF:84:B0:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B8A108C54711EF95865B95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e6:12:1b:e0:7b:71:ab:25:85:1e:0d:0a:3d:ba:bc:48:9a:
1e:a6:d7:a1:49:e7:15:b5:e5:5b:82:68:18:3e:5d:e3:f2:aa:
c4:1e:57:a1:46:68:1e:8f:80:ed:ef:00:11:81:12:ed:1b:db:
00:96:d9:ab:1d:3c:00:7f:4e:e5:03:c7:c6:51:f3:49:aa:dc:
aa:1b:57:03:28:fd:bf:a8:c8:b2:a8:e2:21:d8:84:15:e1:cf:
c3:11:69:0f:2d:67:af:86:fb:ed:67:74:1a:90:03:69:e1:09:
7b:11:4c:34:08:ac:70:98:03:6b:85:30:94:c1:e7:6c:68:96:
66:e7:01:e1:0c:15:53:95:cf:fb:01:4c:9e:b2:fa:72:7a:31:
76:9d:8d:25:2f:7f:7b:41:f4:b4:53:e4:a3:cf:6b:0f:27:af:
ec:d6:46:eb:0f:1a:5c:06:f0:49:cf:dd:5f:53:ea:5c:02:15:
05:81:44:bb:1a:e3:54:24:a4:17:1a:14:05:15:1d:ff:7a:49:
be:b7:6a:49:a2:41:f6:c4:6b:b3:5e:6b:04:48:ff:3d:48:53:
79:a7:53:99:8a:77:8c:e5:d0:d7:d9:13:7e:d1:89:34:39:77:
8d:7e:e6:24:d6:9f:2e:58:2e:f2:9c:3d:b7:c4:fc:5c:13:76:
70:c8:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:36 2025 by rpki-client