Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C11B302C37C11EF89D3D6AF762E951A.roa
File: 1C11B302C37C11EF89D3D6AF762E951A.roa (raw, json)
Hash identifier: L9uk2n0ecMKj9UBsNZUvDz4gl4iJ6g7KZaTtdgf6XnA=
Subject key identifier: 30:6C:AF:08:68:24:A3:74:79:28:82:46:66:13:BB:E3:07:1B:E7:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01272C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C11B302C37C11EF89D3D6AF762E951A.roa
Signing time: Thu 26 Dec 2024 11:25:29 +0000
ROA not before: Thu 26 Dec 2024 11:25:25 +0000
ROA not after: Sun 12 Dec 2027 11:25:25 +0000
asID: 17561
IP address blocks: 154.94.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75564 (0x1272c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:25:25 2024 GMT
Not After : Dec 12 11:25:25 2027 GMT
Subject: CN=676d3d29-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:96:d1:11:2b:5b:ee:a3:5c:b8:41:11:a2:
08:ae:3d:0c:ad:d7:bb:15:eb:93:7c:72:63:9d:19:
30:21:ff:de:2e:99:c5:c5:e2:ec:bc:51:d2:31:bd:
5d:21:e5:71:63:6b:a7:af:20:df:2f:8c:b2:26:75:
47:f8:b2:b0:66:e1:6f:43:8a:33:24:da:cb:54:2e:
ab:f5:b5:bf:bf:69:e2:73:99:94:48:25:79:e7:e5:
e3:09:98:37:73:aa:03:71:fb:fa:b3:28:1c:e1:24:
f9:69:ec:5f:b4:79:77:68:0a:d4:1a:9b:7a:81:b8:
83:3c:78:a0:26:23:83:dd:44:01:9f:cc:dc:74:d6:
1a:07:21:81:55:7b:ea:e8:a6:49:6f:e6:a1:e2:8e:
db:49:ec:a2:31:ae:b2:ea:7a:0e:ae:62:4b:30:67:
fd:0b:79:95:ed:ea:ea:a1:66:07:8d:57:b5:b1:79:
5a:18:55:be:e8:0a:12:5b:0c:2f:2e:e1:17:4b:ac:
e9:ee:d7:b1:bf:8f:75:1d:d7:20:41:84:84:bf:28:
7c:ff:ec:91:f5:0e:3b:97:e5:6e:cc:49:1c:14:84:
0b:15:a5:8a:70:4b:88:d3:8e:ab:34:04:ec:68:52:
00:7c:fd:95:78:4a:6d:b1:cb:8a:75:c4:62:1b:f6:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:AF:08:68:24:A3:74:79:28:82:46:66:13:BB:E3:07:1B:E7:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C11B302C37C11EF89D3D6AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:84:e1:8f:96:9f:26:63:d1:3a:d1:99:b7:29:59:46:ea:d3:
8f:98:99:e6:e4:01:68:f9:0b:e0:4e:cb:36:f3:49:43:16:af:
fb:78:97:9f:28:98:2d:94:42:c3:85:78:1a:65:a6:b7:05:a4:
d0:00:86:c7:59:b1:0c:ad:07:c3:18:95:2b:c3:74:f0:ec:3e:
94:75:67:de:09:42:ab:83:87:cb:d4:e6:19:39:bb:aa:18:5f:
ba:bb:b3:fd:d8:24:69:58:a7:fd:29:33:e6:3e:b6:1d:cc:ac:
22:ec:5a:00:4e:32:42:6a:b6:0c:09:eb:27:2e:8b:2f:92:fc:
47:12:82:6f:bf:6f:c1:3e:61:48:ef:65:c5:69:a4:1a:25:c2:
16:c8:df:53:d5:55:68:32:17:b1:02:de:0f:8d:ac:d5:af:81:
21:33:8d:f7:28:48:e2:0a:dc:89:1b:d2:4e:a8:5a:aa:36:84:
b4:6a:3f:ff:b7:6e:4c:57:05:8d:cf:7f:70:f4:a2:76:27:d4:
2a:2f:87:2d:44:87:33:f8:0f:c8:ee:b0:26:e2:bc:78:b2:e4:
51:8f:54:50:88:a0:20:91:ad:ff:4b:ac:bc:98:1d:79:8f:73:
4d:e3:1e:0c:8b:73:3c:57:24:a0:75:13:70:12:5b:e9:45:eb:
f5:29:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:35 2025 by rpki-client