Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC45E27CC51611EF8E785F61762E951A.roa
File: AC45E27CC51611EF8E785F61762E951A.roa (raw, json)
Hash identifier: 8hNWaTwnoEorlAKXahnnMO5vng2gG1hU3lFR+udGsXc=
Subject key identifier: C5:66:BC:61:26:87:2F:14:0D:D6:36:98:FB:C9:BF:98:FE:B1:99:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC45E27CC51611EF8E785F61762E951A.roa
Signing time: Sat 28 Dec 2024 12:24:24 +0000
ROA not before: Sat 28 Dec 2024 12:24:21 +0000
ROA not after: Sun 02 Feb 2025 12:24:21 +0000
asID: 395793
IP address blocks: 154.200.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76571 (0x12b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 12:24:21 2024 GMT
Not After : Feb 2 12:24:21 2025 GMT
Subject: CN=676fedf8-0a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:e8:85:a1:a9:e2:31:df:48:f5:5b:2a:df:
78:37:35:c0:8f:d0:e9:8f:1d:f5:51:78:93:51:ab:
51:6c:10:a4:03:b8:1e:44:a9:a2:2c:60:49:f7:6b:
9d:37:9f:8e:aa:b3:af:b2:e6:9e:da:4f:59:59:54:
55:bd:5b:b1:65:a4:4b:1d:bd:32:31:6b:68:21:5f:
ba:b5:ec:76:11:57:89:c1:dc:55:62:aa:c5:57:8b:
2d:c5:c2:b2:cf:57:78:4f:f8:2c:64:df:c3:c1:6f:
18:5e:5e:e1:28:01:01:e4:bf:2d:8c:f5:02:51:ee:
31:05:aa:34:0a:4f:44:79:2e:e0:03:e9:b8:bc:9d:
62:09:09:1d:c4:63:c6:4b:a4:1a:d7:ce:08:53:c6:
6d:37:81:7a:01:ec:24:21:53:24:1a:53:62:66:4c:
22:92:d4:90:ca:1e:d6:fe:b1:13:fa:d2:2c:97:89:
10:80:d4:6b:e7:d0:04:bd:49:5e:9e:94:c5:70:ea:
57:c6:24:fc:c6:e6:f7:3e:41:65:16:6e:5c:47:14:
f8:30:47:92:58:3c:3a:38:b8:22:34:33:c2:9b:ef:
e5:78:36:ad:3a:5c:58:92:6f:7f:16:ff:44:6e:4e:
6e:eb:12:47:15:3b:e5:d3:2d:22:7c:63:2d:c8:23:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:BC:61:26:87:2F:14:0D:D6:36:98:FB:C9:BF:98:FE:B1:99:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC45E27CC51611EF8E785F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6c:7c:c1:32:0a:52:50:8b:22:92:0f:49:1e:a6:a5:68:76:
ba:7e:6a:c1:1e:a8:bc:97:e1:67:24:2c:3f:e2:e3:e9:2f:3d:
d6:07:4c:f0:dd:db:88:52:f2:50:c1:e9:37:cf:d1:21:ea:22:
1a:fe:f4:78:8c:49:67:93:38:32:71:16:c7:b0:dc:7f:d1:9a:
7b:51:96:8b:73:85:24:8e:01:a1:3d:70:43:0e:b0:e0:09:d7:
94:aa:f2:62:8f:5b:32:32:56:cf:0e:ea:c8:78:84:51:36:b6:
43:14:62:b9:56:65:68:86:ab:55:89:e0:c6:c3:8a:c5:12:c3:
72:19:75:a3:e4:c6:a2:74:a6:e1:e2:39:d3:dc:db:93:fe:87:
9d:d8:0f:a5:7e:8d:6f:d4:e6:8f:69:ae:cb:84:5a:90:2b:fc:
37:10:8b:d3:f9:ed:07:33:31:47:7f:29:66:e2:2a:63:01:08:
f5:10:9b:4b:41:5f:1e:bd:9c:40:e6:c0:c8:1c:6a:54:c7:45:
28:93:9c:65:8c:36:50:10:bd:f8:26:32:57:8d:14:ec:a8:f3:
79:ac:0a:56:79:c8:11:26:41:0c:ac:e0:68:dd:5f:70:2f:7a:
48:0b:f2:6e:31:b7:07:02:99:8c:10:e3:14:2c:c4:57:00:87:
03:d9:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:44 2025 by rpki-client