Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23174A34C1D511EFB386E6A0762E951A.roa
File: 23174A34C1D511EFB386E6A0762E951A.roa (raw, json)
Hash identifier: QCWjiG1mue9+PFZ3ltltwu2hTjaFw4AORZR0VQ9Ay4I=
Subject key identifier: FB:E2:BA:8F:51:89:37:EE:92:5B:C1:44:15:62:17:05:68:F8:B9:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23174A34C1D511EFB386E6A0762E951A.roa
Signing time: Tue 24 Dec 2024 08:57:43 +0000
ROA not before: Tue 24 Dec 2024 08:57:40 +0000
ROA not after: Wed 10 Dec 2025 08:57:40 +0000
asID: 984
IP address blocks: 154.193.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74429 (0x122bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:57:40 2024 GMT
Not After : Dec 10 08:57:40 2025 GMT
Subject: CN=676a7787-97cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:02:1f:a4:30:29:4f:e8:7c:a8:88:99:e4:
2c:7f:0a:49:19:da:aa:8e:c9:79:76:3e:ae:46:f4:
94:89:9a:a4:7c:48:66:5e:0e:8a:16:78:78:9e:e8:
89:b0:98:e3:bf:de:f3:de:35:1d:3f:70:6f:7c:77:
6d:a6:f8:6c:38:63:f6:c9:8a:05:95:fc:b3:1c:a7:
0e:47:00:0d:c6:aa:5d:2e:ac:42:1d:a9:43:43:0e:
4a:1f:5c:08:4d:db:31:d7:13:b1:39:6b:0c:03:da:
87:d8:4d:b0:08:90:10:a0:ee:5a:2e:5d:e8:97:17:
33:92:15:83:22:2c:e9:a5:5c:06:13:f5:81:de:89:
7d:ed:22:8a:a0:3f:96:32:6b:12:74:a3:f4:e9:0b:
b2:32:9e:10:9c:51:8b:65:1c:03:a8:35:4b:55:04:
97:ba:48:7f:88:47:f8:04:4f:e6:d0:a0:24:0e:45:
c0:7e:81:78:0c:da:9e:31:4c:6c:5c:27:b8:15:8c:
80:c6:ca:59:c3:8f:72:ba:cd:8e:6f:29:36:54:8d:
7e:d0:64:48:71:43:35:cf:30:9c:e2:8d:13:d4:eb:
fc:85:f2:42:61:c1:72:8f:29:bb:2c:99:56:b6:6b:
03:56:30:32:8a:40:51:21:c7:d0:e7:6e:e8:14:cf:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:BA:8F:51:89:37:EE:92:5B:C1:44:15:62:17:05:68:F8:B9:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23174A34C1D511EFB386E6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.254.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1a:9b:c5:18:6d:62:33:ac:f4:19:58:8a:f1:b7:a7:b3:a4:
1d:34:74:a6:69:b2:08:09:15:23:d6:05:26:77:f2:ab:c5:e8:
a9:40:ff:5f:e4:a7:a0:be:c1:85:47:05:31:d6:9c:43:cf:c7:
92:04:4d:01:00:7f:ad:65:a7:ae:a3:71:24:b3:60:79:23:d1:
64:21:3a:da:62:59:a3:0e:b1:4d:69:09:5a:ae:88:9b:32:bb:
9d:ae:cd:82:3b:35:c3:8d:bf:e4:cf:95:93:a4:24:d0:01:14:
bd:1a:dd:ee:f8:25:02:a5:68:ec:04:4d:b7:5c:cb:ac:e1:4c:
bc:7c:6c:37:d6:89:cf:24:c6:54:7d:20:77:03:f8:74:4a:87:
86:23:4c:c4:12:3a:fe:0c:4f:2d:b4:50:83:a0:ab:71:6d:f4:
a7:69:d7:bd:70:9c:97:5c:eb:90:69:cd:71:cf:83:be:10:ac:
62:99:60:e1:27:67:92:ef:e9:60:fd:b7:82:8d:d8:53:70:9c:
ea:ac:d8:c0:e0:17:cc:b7:16:cd:37:38:a1:7d:14:74:8f:25:
38:27:e1:d9:a4:ba:65:df:eb:c8:8a:17:0e:3e:36:45:9c:8a:
fb:9e:6d:84:54:d3:3b:37:ef:3f:7d:05:f3:bc:3f:1d:ca:fc:
47:82:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:19 2025 by rpki-client