Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D15C4C38111EFAD8B1650762E951A.roa
File: 349D15C4C38111EFAD8B1650762E951A.roa (raw, json)
Hash identifier: yVDGj1SYbDYrgVzNRIIDrEAm7CrJsFSKziYPh0HB4Zk=
Subject key identifier: 29:6C:CE:6D:14:F3:7C:7E:0A:E4:3D:20:26:16:CE:B6:2E:5D:1E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012760
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D15C4C38111EFAD8B1650762E951A.roa
Signing time: Thu 26 Dec 2024 12:01:57 +0000
ROA not before: Thu 26 Dec 2024 12:01:54 +0000
ROA not after: Fri 12 Dec 2025 12:01:54 +0000
asID: 984
IP address blocks: 154.94.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75616 (0x12760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:01:54 2024 GMT
Not After : Dec 12 12:01:54 2025 GMT
Subject: CN=676d45b5-b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:d8:9f:8f:3c:b6:1c:b1:3b:08:1b:60:2e:
10:d2:34:90:da:51:24:08:50:d9:a9:5f:40:3f:aa:
a3:7d:d4:26:97:ea:97:b8:54:80:33:23:52:4c:64:
13:55:7f:a8:41:d0:2e:14:42:73:9e:4d:1b:ee:73:
72:89:23:ce:b7:40:18:78:9d:a6:01:60:e0:9e:87:
8f:30:3f:b4:2d:86:a6:04:5a:fa:7d:ca:41:94:89:
99:d4:0e:b9:0b:d7:cb:06:3c:2a:6c:6b:18:c6:a2:
fe:17:5f:7b:9d:73:a0:06:d7:54:f7:2a:e4:ea:82:
0d:a9:14:57:66:ef:e6:ce:6d:3b:dc:45:ba:02:1b:
13:92:a7:6b:00:2b:da:f1:4a:1d:76:36:f7:27:f9:
67:5b:50:0d:ba:3e:3c:85:d2:10:69:08:6a:b6:be:
65:33:82:d2:18:d6:50:49:a4:5b:11:10:fe:3d:4f:
e5:d1:9e:a8:8c:8c:2a:34:be:9b:e2:6f:9d:ca:54:
bf:30:e1:dc:26:95:d7:74:58:02:17:ce:dd:6a:91:
d8:b1:53:a5:72:47:fd:a4:a6:12:49:59:87:ef:84:
01:39:28:1d:31:67:c2:b4:76:eb:98:a6:f5:dc:48:
10:95:6d:40:a7:8e:db:49:20:31:85:a1:49:02:3a:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:CE:6D:14:F3:7C:7E:0A:E4:3D:20:26:16:CE:B6:2E:5D:1E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D15C4C38111EFAD8B1650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.199.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2f:70:dc:41:c4:63:21:f7:9d:91:8a:28:99:ae:fe:97:78:
9c:48:45:9b:db:5d:bf:5d:f0:cf:79:87:ef:d6:ab:6d:bf:e5:
a5:9d:9f:7e:80:19:3d:15:c1:f7:12:d9:44:e8:e9:c1:4e:7e:
09:61:9b:bf:ec:1c:7e:e2:c7:ad:0e:1d:4a:0f:1c:2f:4a:c2:
25:4a:e0:e1:a4:30:88:9c:ed:f4:bd:e4:4a:4f:fd:9c:14:43:
12:ef:0f:0e:d4:e2:11:b9:6a:7c:82:0a:b5:d7:22:40:7e:a8:
76:55:90:18:41:97:5b:71:1b:97:e2:c5:d5:e3:f3:db:16:55:
79:e1:c6:f8:73:e3:bf:27:32:2a:03:06:df:75:8e:ea:74:b5:
53:e2:23:7c:e7:56:fa:bc:01:62:e4:e2:ae:62:2e:d6:30:ef:
a6:69:55:f2:1b:a0:d6:ba:bf:d7:aa:5a:68:4a:af:84:db:4a:
bd:08:e9:d4:99:ad:24:96:0d:bb:51:d8:07:9a:75:3d:56:f3:
84:0d:76:30:f2:a1:d0:67:bc:b6:19:dc:39:08:53:9f:e5:03:
71:6b:0a:e3:a4:8c:e7:87:ad:f4:6e:a0:0a:a4:42:bf:41:23:
5a:07:50:07:9d:71:76:47:cd:01:11:82:a3:81:59:21:1f:6f:
db:69:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:44 2025 by rpki-client