Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02614CF0C26511EF85C99BBD762E951A.roa
File: 02614CF0C26511EF85C99BBD762E951A.roa (raw, json)
Hash identifier: S/FtRh0gkOxeeiBCMAbBQiv2icQJdSmAEzNiFWLi6Ho=
Subject key identifier: AE:E8:22:FF:74:FC:30:0F:52:6A:18:A8:70:6A:50:82:F3:C7:73:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02614CF0C26511EF85C99BBD762E951A.roa
Signing time: Wed 25 Dec 2024 02:07:36 +0000
ROA not before: Wed 25 Dec 2024 02:07:32 +0000
ROA not after: Wed 10 Dec 2025 02:07:32 +0000
asID: 984
IP address blocks: 154.199.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74718 (0x123de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:07:32 2024 GMT
Not After : Dec 10 02:07:32 2025 GMT
Subject: CN=676b68e8-0e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:92:74:56:9c:5b:b3:70:b4:5e:70:8a:8c:
93:2d:2e:3d:8a:1e:d3:0c:12:35:44:a8:6a:46:ef:
88:a3:ed:9f:24:15:da:c6:31:e0:58:1b:bf:cd:59:
eb:2a:04:fa:98:f9:02:f0:2f:8b:77:5a:a4:46:ed:
77:5d:12:ec:9d:23:7c:a9:2c:9a:74:a1:b8:e8:b2:
ac:7b:6a:4a:d8:2e:82:0a:4a:5d:f2:d1:86:de:99:
65:1b:99:1f:46:a2:3a:41:b4:ed:74:b0:83:96:66:
00:78:db:d4:50:14:64:f7:81:b1:97:2b:27:4a:b6:
c2:32:9d:6c:c4:0a:97:fa:aa:b1:e1:1e:fc:24:2c:
6e:37:ec:d9:3b:db:f9:b7:e4:c8:fb:d0:e1:d2:11:
28:8a:76:ab:06:f6:7b:ee:09:05:ac:aa:0b:fe:e7:
8d:ac:f6:9e:95:b0:ae:81:20:06:df:0a:26:e2:a6:
19:0e:d1:cf:e4:1b:47:eb:0a:65:3f:6a:97:5e:38:
57:8a:4a:ac:c5:3d:6b:1c:3c:8c:b2:12:6d:21:de:
e6:26:02:b3:f6:6a:32:8e:4a:d8:91:02:ae:e8:8f:
0e:27:53:7e:97:14:b6:4b:1c:e0:eb:c2:77:10:12:
e1:ca:b3:66:67:b4:61:0a:04:ac:c9:18:2a:21:86:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:22:FF:74:FC:30:0F:52:6A:18:A8:70:6A:50:82:F3:C7:73:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02614CF0C26511EF85C99BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.124.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f3:75:74:b4:6e:a1:d1:54:6f:63:8f:2c:07:68:e2:6f:e6:
92:db:36:b5:a2:f0:85:2e:44:e8:fc:dd:06:d1:05:81:25:fb:
d7:5d:50:a4:eb:6b:c1:17:4c:5b:54:32:1c:24:27:59:e9:c1:
9d:8f:cf:5d:71:20:e6:ab:85:a7:9d:c2:67:b2:78:a5:95:1b:
72:ec:ff:14:21:b5:1e:e8:4b:1a:82:f9:9e:d6:60:69:ef:0e:
c3:9d:99:0d:3d:e8:e9:e3:e7:e2:d3:fe:06:78:5d:2f:3d:78:
84:35:51:71:c0:02:00:f7:19:86:de:9f:b0:67:1a:37:d1:a3:
e9:f6:f4:0f:c0:9e:86:93:25:b3:9c:39:9e:37:fb:8f:c0:41:
ad:fb:f6:49:f2:f8:79:0e:b1:d8:a1:03:ef:58:3c:a0:db:67:
e4:ac:30:88:68:e0:84:fb:87:d0:bb:7d:06:e6:60:dc:07:b1:
fd:55:f0:38:2e:0e:13:ef:09:08:4d:c7:34:51:8c:ba:65:b4:
4b:7d:15:dd:84:58:4b:ce:34:17:7c:5a:cb:4d:bd:50:c9:8d:
f3:5f:2e:02:d1:9c:e8:50:82:33:8d:ac:b4:0a:9c:5e:27:ce:
b1:e7:cb:7f:9b:cd:01:62:00:8d:42:5f:c6:09:ca:14:74:8f:
5e:c8:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:51 2025 by rpki-client