Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE224192C1B711EF9A58426C762E951A.roa
File: FE224192C1B711EF9A58426C762E951A.roa (raw, json)
Hash identifier: Y1Jhem6Ve8ZxIFYs9plU54cKqaG2oPMq4U/n7ZsONPM=
Subject key identifier: BD:6D:AD:E1:17:72:20:6F:56:11:CB:0B:B3:E0:23:E8:39:90:48:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE224192C1B711EF9A58426C762E951A.roa
Signing time: Tue 24 Dec 2024 05:29:06 +0000
ROA not before: Tue 24 Dec 2024 05:29:02 +0000
ROA not after: Wed 10 Dec 2025 05:29:02 +0000
asID: 984
IP address blocks: 154.193.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74183 (0x121c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:29:02 2024 GMT
Not After : Dec 10 05:29:02 2025 GMT
Subject: CN=676a46a2-faef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:c7:8c:8e:79:15:25:75:17:6d:57:fa:6b:
f3:d4:81:a5:ff:bf:60:b2:46:94:0f:4e:93:3f:99:
0e:1c:03:8c:0d:cf:07:5b:81:5b:ca:b3:cb:15:93:
16:6e:af:cb:5d:39:a1:d8:21:99:6a:67:b0:f1:08:
68:60:a9:82:18:55:0f:be:93:3b:c3:8b:64:6c:de:
cc:e0:6a:30:3c:2a:3c:da:95:06:84:ad:eb:92:3e:
85:e9:2f:d8:50:78:d2:39:d9:7f:e1:c1:a1:2e:4c:
00:7c:bd:3d:0d:12:75:c4:8d:5b:13:0e:d6:80:0d:
7e:4d:74:94:c3:b1:45:6e:90:14:06:aa:2e:4c:5c:
bf:3e:d7:25:ad:ed:a0:89:f3:c6:62:1b:e3:4c:74:
a1:c7:bd:68:fc:cc:97:5c:a1:10:1c:72:e5:e5:8e:
78:6c:71:aa:37:19:b2:26:15:38:e8:67:7b:da:23:
56:cd:1c:d6:14:7f:4d:bb:41:74:80:ed:47:60:a9:
78:43:ac:24:c6:2b:09:9e:9c:49:e7:cd:6e:25:50:
35:32:a9:33:85:c3:40:3e:86:d7:e1:31:c0:b8:aa:
b8:bb:4d:6f:d7:25:3f:e1:1a:7d:19:16:11:2f:f0:
a4:ec:81:51:ea:38:31:da:d9:83:5a:c2:6d:7a:24:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:AD:E1:17:72:20:6F:56:11:CB:0B:B3:E0:23:E8:39:90:48:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE224192C1B711EF9A58426C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:af:3f:75:3e:34:4a:7d:ff:d7:52:b4:af:b3:e3:3b:8d:
cb:07:9b:b0:fb:32:7e:dc:ce:df:c2:69:b0:bd:0e:1c:82:20:
6e:fd:72:77:50:e6:ce:35:10:db:cc:b9:c6:8e:5c:4f:a2:58:
8f:81:1a:ed:ba:4f:e8:cd:a7:9e:17:4b:59:f2:f1:e8:83:5f:
72:e4:3d:ab:86:9f:01:9f:05:f5:c9:26:6a:ce:e7:e3:81:22:
97:13:ea:13:75:62:16:85:b1:14:2a:18:17:82:02:e6:8a:80:
ee:86:12:f3:5a:ed:66:fa:35:86:21:3e:a4:c7:bc:aa:fe:f8:
ca:cf:fe:fa:fb:39:5f:6b:67:44:ca:e0:5a:5c:a5:1d:8f:6a:
a2:1f:df:ce:d7:2d:ff:57:07:e5:e1:ed:9c:4b:5c:1d:a2:5f:
0d:4d:d8:65:8a:18:01:9a:34:a2:5f:60:46:8e:73:d9:c0:d5:
ae:28:1c:5a:35:5b:a4:28:18:ee:44:d6:13:ec:16:8f:19:88:
09:fe:a0:d6:a4:db:bf:f0:b4:4b:f2:2e:03:48:32:0a:28:2c:
4d:87:e2:b9:8a:03:3e:9e:50:7a:a8:cf:2a:6b:90:ca:4c:42:
c9:2f:38:35:8c:c2:a7:4f:f9:28:d8:ed:c5:bc:90:f9:c1:5a:
4e:da:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:00 2025 by rpki-client