Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFAD140C42211EF86CFCA5F762E951A.roa
File: FCFAD140C42211EF86CFCA5F762E951A.roa (raw, json)
Hash identifier: 6Gqx0iJtQ+9GbNWFdGSje4AS3R8Cz4wmAgVt65SDNrg=
Subject key identifier: C4:06:09:2B:9A:4B:55:05:BA:3F:33:80:AD:8F:DB:7B:2C:D6:30:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFAD140C42211EF86CFCA5F762E951A.roa
Signing time: Fri 27 Dec 2024 07:20:02 +0000
ROA not before: Fri 27 Dec 2024 07:19:59 +0000
ROA not after: Sun 12 Dec 2027 07:19:59 +0000
asID: 17561
IP address blocks: 154.202.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76249 (0x129d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:19:59 2024 GMT
Not After : Dec 12 07:19:59 2027 GMT
Subject: CN=676e5522-e492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:21:f5:b2:c2:13:d8:3e:4f:f3:92:89:62:
e7:bb:ce:f0:6a:5b:2e:1d:7c:a5:dc:6c:57:da:b4:
74:10:34:c1:de:52:36:58:2e:ee:68:e1:6b:86:4f:
cd:87:c2:c5:b1:77:20:1d:fc:44:bd:c1:60:f0:f8:
50:4c:5d:d6:f8:e1:5a:27:09:92:b9:b4:02:54:44:
19:ee:f1:63:c0:1f:d8:6a:3d:cd:de:a1:58:59:9e:
4f:66:21:cc:62:cf:e6:aa:fc:20:c9:51:c6:5d:5a:
6e:7c:1e:08:1e:fd:68:a4:54:8d:6d:5f:54:34:4a:
5c:1b:8b:0c:2e:1a:af:32:2a:b3:93:f2:d8:d0:18:
b1:32:7f:8e:cc:87:83:7a:ed:a8:e4:ec:a5:b5:4c:
fc:e0:73:a0:ee:e8:53:15:4a:6b:36:8a:57:be:6c:
bf:c7:3f:81:dc:d7:54:e3:79:56:64:b0:43:87:e1:
48:b6:53:7a:4c:4d:9b:19:2c:a2:37:43:64:d0:0b:
77:99:91:bf:36:95:fd:1b:14:a4:58:83:9e:90:d9:
8d:1c:30:f3:3a:7c:bb:81:9d:55:c6:d1:1e:c6:90:
d4:53:fc:14:a5:db:0a:ff:a4:db:3d:72:db:44:90:
0f:7a:d3:53:77:be:aa:dc:13:61:bd:83:66:21:ed:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:09:2B:9A:4B:55:05:BA:3F:33:80:AD:8F:DB:7B:2C:D6:30:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFAD140C42211EF86CFCA5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.5.0/24
Signature Algorithm: sha256WithRSAEncryption
68:52:86:b5:82:f3:e7:36:f7:8e:3b:7c:0a:88:2b:21:0c:81:
d3:8f:26:6d:37:44:17:6c:f7:f5:10:3d:6b:83:0b:41:c8:3f:
d8:be:d5:9b:e7:45:63:99:10:ea:a2:f9:44:16:a0:f9:c4:ba:
1d:48:a6:e3:98:4c:d3:01:2f:be:e8:51:e1:91:0c:aa:99:68:
01:26:f1:da:cb:df:7a:c0:0f:e6:23:ed:8c:3e:4b:b3:94:90:
d5:59:25:72:fc:cc:14:39:12:b6:84:eb:29:55:ab:6a:ab:27:
d2:ad:49:d7:29:e9:a1:01:8a:c7:74:cb:1b:09:72:d7:65:a9:
69:38:27:af:e0:6d:31:a3:4f:cb:ed:8e:ee:e9:96:12:5e:9f:
b3:88:e9:36:86:ef:18:16:37:c7:89:7e:95:84:81:d6:12:58:
49:83:88:bf:65:7f:64:14:a9:8d:85:d5:00:0d:c3:03:fb:8f:
64:8b:7f:d5:2c:6f:f7:a7:47:f1:dc:5d:0d:ef:96:65:ea:e1:
7c:47:b5:b5:08:8e:f8:2b:e0:67:f9:92:e0:d2:d9:2f:fe:1c:
92:ab:a5:f4:6e:21:5b:24:8c:de:73:30:8b:04:05:35:d1:d7:
36:fb:89:c3:d5:4b:55:17:7f:17:cc:61:f0:f8:28:af:7f:94:
4f:cb:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:51 2025 by rpki-client