Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F393642C36711EF8F3B13AD762E951A.roa
File: 0F393642C36711EF8F3B13AD762E951A.roa (raw, json)
Hash identifier: wSJnKtM0vAAPXbny1wuEcLwKw/0fJdHSmJgsDpKo3o4=
Subject key identifier: A6:9A:EE:9E:08:46:9A:63:A5:D9:93:88:99:88:B2:2F:F9:97:68:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F393642C36711EF8F3B13AD762E951A.roa
Signing time: Thu 26 Dec 2024 08:54:48 +0000
ROA not before: Thu 26 Dec 2024 08:54:44 +0000
ROA not after: Fri 12 Dec 2025 08:54:44 +0000
asID: 984
IP address blocks: 154.94.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75456 (0x126c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:54:44 2024 GMT
Not After : Dec 12 08:54:44 2025 GMT
Subject: CN=676d19d7-69cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:da:f1:a1:85:0d:bb:c1:73:99:aa:f3:96:
d4:6b:4a:2f:ee:ca:38:72:21:f9:58:89:0d:16:ed:
ec:fd:3b:a0:71:e8:7b:98:5b:f4:7b:45:4f:31:f0:
2f:66:f6:9a:07:a5:7e:c3:85:99:1d:4d:ec:63:b9:
ab:73:5c:07:36:70:53:ec:03:51:9c:e9:d5:7b:3d:
c5:59:e5:18:ac:95:5f:f2:d1:34:f3:35:66:58:1e:
fa:e3:e4:57:43:08:85:1e:65:f3:a8:76:80:38:c8:
45:35:35:50:7f:1c:6a:e9:4a:9b:fc:4d:53:d8:15:
ef:75:7b:af:df:82:93:25:94:e1:68:40:f0:f1:c5:
1f:a4:9d:93:1e:de:f5:2c:51:12:93:53:5f:da:8f:
24:a8:e1:68:3d:1b:d3:79:07:b2:c8:8a:0b:c6:c9:
a9:c2:ff:18:60:94:67:81:1d:63:9d:1f:fc:9a:31:
99:84:d7:84:18:1f:f5:b7:20:06:ef:18:a0:7a:4f:
bd:c3:ca:30:8b:81:c6:5c:d5:76:71:dc:c8:50:f8:
92:fb:a5:22:92:30:19:1d:8b:4b:a7:74:1d:af:83:
79:b6:70:7c:8f:1a:10:5c:6d:8b:3b:5f:90:82:61:
cb:6f:7f:1e:6c:0a:92:fd:07:98:e2:81:61:9c:f6:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:EE:9E:08:46:9A:63:A5:D9:93:88:99:88:B2:2F:F9:97:68:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F393642C36711EF8F3B13AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bd:5e:28:79:fc:61:56:35:47:a9:87:0d:65:32:ce:c6:c9:
0a:04:24:6a:d2:06:6f:7c:69:ae:3b:40:96:e6:7e:5d:ca:e9:
b1:29:52:08:49:ae:29:99:af:e3:4a:4a:11:6c:0a:20:60:31:
e4:99:8d:c5:f4:a5:f4:64:5c:52:59:40:85:16:e7:b2:58:3a:
78:40:42:6e:93:3e:14:f8:af:dd:59:f4:57:f4:ea:2f:3e:91:
88:91:66:2b:00:5c:64:04:f1:53:cb:e5:0d:ae:e9:d4:47:7c:
db:9e:2f:53:ec:e9:70:49:3f:0c:fd:69:f1:8c:4c:2c:10:09:
ee:bc:e0:d9:f5:30:e6:1c:28:0b:a6:85:f5:ae:66:df:08:34:
cd:90:c7:d4:8d:ab:81:05:75:05:a2:72:ef:67:0c:7e:d5:5d:
ab:72:09:9b:6d:76:ab:0f:19:60:f9:a2:29:93:df:a3:53:2e:
f1:a2:ca:5e:e9:59:3f:c4:13:ad:28:f2:f5:a5:ed:8e:09:95:
2e:48:b1:38:8a:4a:fa:cd:c6:21:41:5e:b2:3d:19:63:2b:77:
7f:97:69:b7:34:04:68:b2:94:7a:a5:d1:b7:da:07:eb:47:92:
fa:20:d7:c9:0b:6e:25:5e:06:08:23:24:15:c6:f6:c4:06:93:
bf:e0:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client