Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A6088C53211EF9DFB1B8D762E951A.roa
File: 2B8A6088C53211EF9DFB1B8D762E951A.roa (raw, json)
Hash identifier: 2Pw2qS3MNhmz/QQiXvEgRIFbOmUe2MFfuMK2/mTvrSI=
Subject key identifier: 99:C4:88:E4:09:B3:6B:1B:40:E9:D9:18:B2:00:D6:49:2F:94:C9:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A6088C53211EF9DFB1B8D762E951A.roa
Signing time: Sat 28 Dec 2024 15:41:16 +0000
ROA not before: Sat 28 Dec 2024 15:40:58 +0000
ROA not after: Fri 12 Dec 2025 15:40:58 +0000
asID: 984
IP address blocks: 154.204.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76787 (0x12bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:40:58 2024 GMT
Not After : Dec 12 15:40:58 2025 GMT
Subject: CN=67701c1b-9262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:a5:8d:29:f1:db:29:cd:bb:7d:94:58:ae:
8e:83:fb:5a:74:6e:fa:b7:b6:7a:ea:94:fb:06:3e:
69:c1:95:ee:fd:ee:22:83:73:ca:15:f3:f9:78:fd:
c1:07:d1:17:89:7d:7b:cb:81:84:e1:a1:07:83:73:
10:e8:cb:fe:b4:3f:c2:0d:86:a1:00:ab:f7:4d:61:
75:b5:eb:4f:17:46:24:e7:90:a4:25:bb:da:f6:ad:
e1:9e:0c:f2:0f:c1:a9:08:0c:be:fd:4a:1f:e8:24:
31:c9:92:0f:88:7a:b7:05:b2:ea:3d:dd:49:49:5b:
a9:d4:53:cf:60:00:b4:38:9e:03:4c:3d:85:1e:6d:
fc:de:9a:26:19:1a:a7:85:d4:7f:fa:a6:df:3b:9e:
8e:1b:b1:3d:79:20:fb:91:be:c6:55:4b:31:1e:be:
9a:26:5c:f9:a7:3b:e1:fc:74:33:a6:06:e3:99:28:
d6:1c:72:c4:1a:98:c7:f7:10:96:4c:c6:40:88:b5:
b7:ab:2b:d1:9a:17:b6:d5:4a:1a:f8:0d:9a:98:35:
c1:78:c9:6b:d6:44:51:4c:0f:a5:3c:96:98:40:99:
ab:b2:40:82:e9:f7:85:13:bc:74:4e:af:ca:26:a1:
99:ea:70:ac:46:68:e1:d4:e4:69:0b:6a:fe:8e:69:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C4:88:E4:09:B3:6B:1B:40:E9:D9:18:B2:00:D6:49:2F:94:C9:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B8A6088C53211EF9DFB1B8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.98.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fc:f7:e5:19:2c:f9:5e:38:ff:33:20:db:82:15:a9:6c:30:
33:02:75:30:b4:7a:d4:a4:c3:59:99:14:9e:f2:a4:40:ed:ae:
64:70:27:5c:c1:6c:bb:f9:17:d6:a0:af:25:fb:25:31:bf:35:
f9:4a:d5:99:10:0b:6a:ab:9d:95:bb:7d:b8:b4:49:69:f1:69:
5b:c5:8b:87:3e:ae:d9:92:70:30:34:85:a8:17:c6:94:7d:6f:
e5:06:7f:de:4a:c6:69:d5:e6:18:20:ba:60:17:8a:d6:e9:80:
1e:ce:4e:1f:62:71:1b:a2:31:e2:01:ed:da:33:46:47:32:0b:
c4:64:d7:24:7b:74:cc:bc:48:62:83:c2:99:55:0c:6d:96:ff:
d9:d9:7b:ad:09:f1:fa:3f:bf:77:05:36:0c:39:59:ed:2b:36:
32:8e:dc:bd:56:38:fa:5c:67:eb:4f:75:9c:0e:b0:bd:98:be:
ef:95:b0:c2:2c:76:b6:6a:2b:85:bc:b5:ce:78:bc:8c:ae:f0:
20:c9:9f:67:21:1f:ae:b8:db:8a:79:2c:db:ef:aa:37:87:a5:
97:c0:17:6e:93:30:d8:66:3b:10:54:5a:60:c9:45:6c:6d:5e:
60:51:97:97:0c:13:e6:b3:fa:66:dd:f1:fd:08:53:d7:41:2d:
7b:94:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:39 2025 by rpki-client