Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246BE3C6BFA111EF85DADEB8762E951A.roa
File: 246BE3C6BFA111EF85DADEB8762E951A.roa (raw, json)
Hash identifier: dsgwdNgEfl36IBi4RURYmpslrEOe9IMjmL+bKRrttoo=
Subject key identifier: A1:56:E4:15:CC:C1:5E:3E:63:8B:EB:07:E4:38:FA:DB:E0:5D:E9:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246BE3C6BFA111EF85DADEB8762E951A.roa
Signing time: Sat 21 Dec 2024 13:40:29 +0000
ROA not before: Sat 21 Dec 2024 13:40:26 +0000
ROA not after: Thu 27 Mar 2025 13:40:26 +0000
asID: 29802
IP address blocks: 154.91.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73093 (0x11d85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 13:40:26 2024 GMT
Not After : Mar 27 13:40:26 2025 GMT
Subject: CN=6766c54d-b242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:8e:4a:b0:23:91:36:35:8a:48:2d:83:a7:
df:12:bb:6f:08:37:27:74:cb:7a:bb:cd:86:85:35:
32:b9:ce:73:e2:22:2f:79:9d:d9:a3:92:9a:b8:fc:
18:f0:fd:14:65:9d:6d:2d:c2:b0:26:1e:36:04:34:
83:5a:b0:51:96:06:73:81:cb:3f:ee:47:68:05:84:
80:54:43:61:ae:59:0d:6e:3c:a3:38:ab:3c:f3:3b:
a3:41:40:ce:8c:3c:a6:34:21:db:8e:3e:17:26:0b:
82:87:2a:f2:57:f7:4e:eb:d1:7a:08:40:39:55:f5:
49:c6:29:32:73:33:d3:d9:2b:7d:3d:18:f1:58:e8:
02:f8:27:f0:82:53:e3:4c:4a:79:b5:7a:9d:03:6a:
33:f0:20:31:bf:7e:e7:44:50:47:2f:10:c7:c9:4b:
03:93:55:d0:a3:a4:c5:bb:4a:47:f3:e3:5c:00:1f:
7a:f3:67:02:c6:3a:1d:44:80:9b:8b:0d:21:15:07:
41:6c:19:ca:d7:d2:a1:09:97:af:3d:1f:69:d9:a5:
3b:e2:ba:19:fb:bc:18:5d:5a:1a:c5:c4:31:f7:b5:
7e:75:81:c5:c0:66:c0:f5:72:46:f6:f1:5a:79:83:
dc:7b:8c:c2:a1:ca:b1:00:0e:0e:33:67:c8:c9:4f:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:56:E4:15:CC:C1:5E:3E:63:8B:EB:07:E4:38:FA:DB:E0:5D:E9:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246BE3C6BFA111EF85DADEB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:76:f9:92:e6:81:e1:fb:20:49:c7:44:b8:1b:1e:88:4e:b7:
21:8e:c5:fe:d1:54:01:42:a5:92:b0:25:d6:40:e9:84:ea:45:
2f:9c:69:20:a4:32:f5:aa:83:40:e6:40:2d:3a:b3:fa:56:9d:
b3:85:aa:89:26:53:64:24:3d:bd:52:32:7a:b3:bc:ba:af:db:
75:f2:87:68:b8:dd:23:91:af:2b:b1:1e:02:dc:2d:d2:1e:33:
40:15:0d:ae:3c:68:1e:cd:ad:62:60:26:35:a3:30:55:8d:88:
2f:3a:93:b0:21:fb:a8:c0:eb:fa:0d:45:db:ef:04:01:50:91:
91:7f:e4:f8:fa:30:62:cb:45:c7:77:13:2c:f2:73:42:2d:a5:
a5:66:06:81:4b:f5:ff:95:4d:18:da:60:ab:0f:0d:29:22:d8:
9e:e3:03:2f:9d:3b:7f:11:3a:1f:6d:22:49:50:b0:f6:23:f7:
5b:52:18:38:8e:81:85:af:95:b3:e9:c1:ab:c0:be:51:33:e0:
3d:2a:ed:09:d3:3b:d5:14:e8:1d:1e:8e:e3:82:44:7e:47:0f:
a5:67:59:bb:ea:61:b3:6e:d6:63:c2:14:60:00:3b:23:b4:84:
88:c6:3a:99:01:8e:56:9f:45:7a:05:7e:ef:6f:81:10:c4:49:
0a:52:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:06 2025 by rpki-client