Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1419F6B8C38711EF8C073074762E951A.roa
File: 1419F6B8C38711EF8C073074762E951A.roa (raw, json)
Hash identifier: o8Fyh72UDS+h+iGiVBmi/rbFPimHOAxsZGab/g0V8aM=
Subject key identifier: C1:65:CA:19:5F:8E:B1:AC:A3:83:9D:43:18:AE:C6:9A:CF:0E:E0:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01279C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1419F6B8C38711EF8C073074762E951A.roa
Signing time: Thu 26 Dec 2024 12:44:00 +0000
ROA not before: Thu 26 Dec 2024 12:43:56 +0000
ROA not after: Fri 12 Dec 2025 12:43:56 +0000
asID: 984
IP address blocks: 154.94.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75676 (0x1279c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:43:56 2024 GMT
Not After : Dec 12 12:43:56 2025 GMT
Subject: CN=676d4f90-bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:c7:81:49:c2:0d:b9:fd:5f:0f:18:28:32:
f4:41:d3:20:85:e6:30:4d:b6:84:b3:e9:93:96:33:
3c:d3:5f:a0:b9:3c:4d:22:c1:8e:6c:ba:17:f3:68:
88:e7:f6:38:1f:47:b6:d5:a4:bb:93:39:7d:1b:22:
a2:3b:2e:77:8f:74:33:40:86:83:60:a9:79:f3:e2:
0f:63:ff:88:4e:cd:16:b8:61:5b:70:18:1a:f2:03:
ab:57:71:6e:e6:48:14:2a:58:cd:54:57:14:80:ec:
4f:09:3e:d5:b3:0f:af:aa:c7:f8:4d:77:54:1f:92:
d0:ab:1a:28:00:66:f5:96:60:d0:e8:f9:72:04:97:
b0:57:ee:3d:d0:2f:6d:31:9b:f6:cc:88:ba:03:f5:
61:0c:54:d8:fd:7b:fc:02:17:10:d0:ed:46:79:96:
51:a9:47:37:4f:9b:45:8c:59:20:75:50:a6:7f:2b:
e0:83:eb:5e:15:58:d7:f0:33:f4:d9:bb:d8:f4:a2:
e3:02:ac:c2:5e:b2:0f:72:c8:d5:ad:cd:5d:14:76:
ae:ca:9e:bc:9e:5a:9a:81:8e:07:cd:1c:ac:5c:d1:
21:17:b9:31:36:e8:5b:b7:08:35:db:5c:92:f5:58:
52:5d:69:89:83:a3:fc:a5:1c:7d:cc:e7:96:88:98:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:CA:19:5F:8E:B1:AC:A3:83:9D:43:18:AE:C6:9A:CF:0E:E0:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1419F6B8C38711EF8C073074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:15:f9:c8:41:bf:53:f1:e5:c0:a9:08:00:90:1a:98:4b:2e:
6c:b5:e5:85:58:d4:00:88:0d:0d:44:61:ba:58:f9:a3:5c:a8:
88:67:38:24:a5:58:28:a9:9b:cb:6f:0f:f0:ef:71:ca:b8:24:
7a:7d:d4:5d:87:fa:dd:1c:b3:30:d1:f5:06:ed:75:bf:1e:a6:
9e:2f:96:78:47:b3:97:de:0d:67:b5:3e:7f:10:6b:36:5f:07:
90:85:75:ef:1d:44:7d:39:8d:5e:ff:06:4a:53:51:0e:3c:46:
be:c7:36:5f:43:65:56:9c:fb:8e:c6:28:b4:44:22:0e:e3:18:
0f:19:ed:57:a4:3e:fe:a9:0d:c9:59:c5:26:85:bf:d7:fc:5e:
e3:96:6b:ce:4b:20:21:bb:a3:b0:d8:54:fb:fd:8f:3c:e7:2f:
3a:20:33:2e:51:98:26:7f:ab:60:0d:0f:32:52:3b:b7:68:eb:
91:fc:99:8f:18:c7:da:9a:12:61:54:13:01:b1:a4:3a:d7:3d:
cb:43:9e:e2:bb:d7:bf:dc:5b:49:4d:7d:da:45:96:f8:55:31:
04:9e:b8:21:e2:12:57:a3:6e:ce:91:a2:4e:4d:b8:14:80:06:
d6:e7:0e:4d:a4:07:06:73:3a:80:6e:2c:85:9b:04:50:1f:41:
be:fe:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:25 2025 by rpki-client