Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF28356BFA111EFB56413B9762E951A.roa
File: 4AF28356BFA111EFB56413B9762E951A.roa (raw, json)
Hash identifier: +zUnBEXEuDESWfEnoGgVX51LgTu9Lh3ULI+nwrcQbxg=
Subject key identifier: C5:4E:E6:6B:CE:C9:24:2E:15:13:EE:68:81:EA:A4:D3:20:F8:AC:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF28356BFA111EFB56413B9762E951A.roa
Signing time: Sat 21 Dec 2024 13:41:34 +0000
ROA not before: Sat 21 Dec 2024 13:41:30 +0000
ROA not after: Thu 27 Mar 2025 13:41:30 +0000
asID: 29802
IP address blocks: 154.86.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73095 (0x11d87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 13:41:30 2024 GMT
Not After : Mar 27 13:41:30 2025 GMT
Subject: CN=6766c58e-cb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:80:ac:0f:9b:16:be:f8:bb:ae:5a:4e:84:
97:68:b6:32:d0:2a:52:ca:f9:6c:04:ac:bf:79:2f:
42:d7:49:a7:42:bd:81:de:b2:f2:4b:e7:c5:4f:e9:
eb:2a:91:a5:28:29:33:a9:9e:32:0c:f3:2a:70:bb:
4d:4d:69:99:49:0e:4b:d6:07:dd:3e:d8:a2:d6:50:
02:36:4e:76:5e:e7:e5:c9:9f:8f:c9:1c:f2:b9:89:
ef:c2:6c:8f:79:96:11:66:e7:49:65:d9:4d:e6:c4:
3a:23:8b:63:12:d0:12:c8:1a:d3:5c:ce:1f:32:ae:
55:51:cf:e6:ac:e5:8e:eb:13:b8:9c:de:93:e4:80:
01:be:09:ca:81:d8:46:16:5b:2a:4e:2b:c6:65:6a:
b9:58:af:5d:10:e3:15:19:5c:55:08:67:45:41:9a:
59:b0:e0:09:b0:f0:a2:09:61:04:e9:47:93:58:99:
c3:0d:f3:3a:bb:8b:fc:78:93:53:a3:d6:30:43:f2:
94:e4:23:96:15:1a:2d:10:83:b1:51:6c:35:a8:e2:
10:40:77:b9:94:56:40:2f:87:04:ad:5d:8b:23:fd:
12:9f:db:b8:a1:97:6a:b7:5a:fe:01:bf:93:9f:7d:
32:13:e8:9c:80:71:59:e9:6f:0f:1c:f1:69:13:9b:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:E6:6B:CE:C9:24:2E:15:13:EE:68:81:EA:A4:D3:20:F8:AC:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF28356BFA111EFB56413B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.118.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:59:94:57:b6:d4:d9:e2:7d:95:b6:b4:9d:d7:74:fd:a0:
b8:65:aa:9c:d6:a1:9d:da:9b:f3:b8:e3:24:7b:46:44:28:b3:
d8:d0:91:d7:e3:eb:4f:9a:99:ca:24:9b:4e:5c:5e:06:cf:9a:
8b:e1:f9:27:bf:50:9e:c6:d7:8e:33:c4:95:8e:0e:ca:13:cd:
08:e3:36:05:92:9c:69:27:cc:99:57:7d:4c:18:8c:6d:32:47:
63:55:d3:ec:27:d5:3f:1e:68:5d:dc:18:66:7c:24:32:3f:9c:
e3:74:2e:20:20:c4:6c:1d:db:8f:26:57:41:05:c9:f5:da:6d:
d7:33:a8:7b:f9:6b:6d:53:f6:5d:dc:e8:6e:a1:a8:47:9f:7e:
be:fa:f8:a8:3e:34:40:a0:c1:d8:ab:3d:ab:74:a2:b8:d4:8c:
d8:e1:92:8f:66:bc:d8:31:8f:dc:4d:23:a2:9d:c2:8c:01:fb:
ea:87:44:e0:ff:fd:7a:f8:9b:7c:60:7c:b4:09:75:75:92:4d:
38:2f:53:06:8a:de:82:a8:a6:dd:5f:c7:03:f8:c3:66:5c:78:
20:b5:91:9f:6e:ba:80:ec:e9:4a:33:4f:9e:85:e2:7e:95:5b:
84:eb:d5:87:0b:60:05:b2:74:89:ab:04:4f:26:7c:bc:c1:62:
ac:80:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:25 2025 by rpki-client