Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9B714AC53711EFB06530AC762E951A.roa
File: 1F9B714AC53711EFB06530AC762E951A.roa (raw, json)
Hash identifier: cHMYub0GQSDJrNN6WfPbe+Up0Ukz84tMXF8YXBe3K2k=
Subject key identifier: AD:F6:F8:75:17:B4:A7:86:E1:E2:6E:D2:31:DE:B4:96:A9:C0:89:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9B714AC53711EFB06530AC762E951A.roa
Signing time: Sat 28 Dec 2024 16:16:42 +0000
ROA not before: Sat 28 Dec 2024 16:16:38 +0000
ROA not after: Fri 12 Dec 2025 16:16:38 +0000
asID: 984
IP address blocks: 154.204.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76833 (0x12c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:16:38 2024 GMT
Not After : Dec 12 16:16:38 2025 GMT
Subject: CN=67702469-82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:9e:79:ed:45:10:c3:8d:69:e1:d5:2e:17:
8a:e1:34:8b:f3:f3:4c:c4:6a:c8:dc:c8:db:8d:61:
76:a4:64:af:c1:64:9c:29:35:32:4d:bd:53:b3:05:
f3:19:91:63:63:b3:9f:e6:76:a4:fb:d4:d1:a4:75:
40:50:01:0c:94:8d:67:ca:3e:fa:af:46:ec:48:bc:
9d:59:d7:e8:b7:d0:2b:7d:45:fc:f9:86:0d:42:1a:
64:18:5a:17:70:1b:57:a4:ae:55:44:c0:d5:d1:0b:
be:aa:97:91:53:2b:0c:ed:74:20:54:eb:26:24:6b:
90:6b:25:4a:fb:c2:3f:d8:14:21:f2:ed:0c:3e:28:
e6:28:8f:37:fe:69:b8:80:a3:85:24:eb:8c:ae:58:
41:df:9f:b9:6c:cc:63:a0:ae:10:c5:1d:66:30:4f:
2a:cc:b5:ce:5c:46:0d:cf:30:ad:e0:25:39:f7:54:
b6:70:70:6b:5d:e2:09:a9:a6:88:38:0f:4a:d7:7d:
c7:d5:a5:dc:cd:69:1c:fb:a6:21:e9:eb:87:63:8b:
90:67:f8:77:c9:0d:f5:52:fd:82:22:d4:b5:14:23:
7f:0e:58:0a:c5:87:57:ab:ef:c2:7c:66:05:91:02:
8b:ff:33:68:a9:ee:1a:b3:64:8d:6e:65:03:e3:60:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:F8:75:17:B4:A7:86:E1:E2:6E:D2:31:DE:B4:96:A9:C0:89:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9B714AC53711EFB06530AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.121.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:19:a1:87:7e:15:68:8b:e4:75:4a:ec:03:55:22:46:8e:2c:
55:01:a6:23:c9:a1:d6:62:1b:ea:2f:67:60:6f:c8:b0:7f:01:
d4:8f:4d:c6:b1:4f:3c:32:0e:09:a1:45:c5:c1:21:f7:d2:36:
99:c4:47:c6:c1:64:df:00:90:11:f4:10:46:d8:d3:4d:e5:6d:
5b:10:00:98:3d:fb:15:a8:d3:b3:5c:d0:4c:43:1f:c6:f3:ce:
3e:60:97:1d:98:43:56:e5:f8:53:b3:d9:fb:d1:de:40:36:a5:
95:f1:57:e2:1e:cd:88:23:17:1b:7c:7a:0e:e8:21:31:af:35:
3f:e9:93:bd:88:2a:0a:89:4f:96:09:13:ad:cd:71:46:92:7e:
c8:cd:0f:06:7f:98:be:0f:93:67:99:52:f9:48:79:08:84:69:
e4:ff:98:c5:af:be:15:a5:a6:2a:88:b4:f5:8e:b8:c4:11:27:
2b:4e:e7:1b:ab:db:5d:cb:02:0f:d6:ef:94:db:46:24:1e:1f:
36:a1:6c:5d:25:d0:86:49:17:bf:b0:d4:e2:4e:f9:70:da:7c:
3d:db:9f:98:91:0f:63:47:ee:67:06:21:13:bb:6d:59:43:84:
2f:b6:93:f2:77:3e:cf:33:17:68:1e:8f:fa:19:04:94:00:52:
d4:d1:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client