Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4960540EC36C11EF9A2C904D762E951A.roa
File: 4960540EC36C11EF9A2C904D762E951A.roa (raw, json)
Hash identifier: +bqUu56dDnJGbDW3B/huKiwtfa7ObuINC6TJPyMnNZc=
Subject key identifier: F3:28:59:0A:38:12:F5:D2:CA:C8:A6:17:DE:BE:5A:41:35:B1:69:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4960540EC36C11EF9A2C904D762E951A.roa
Signing time: Thu 26 Dec 2024 09:32:13 +0000
ROA not before: Thu 26 Dec 2024 09:32:09 +0000
ROA not after: Fri 12 Dec 2025 09:32:09 +0000
asID: 984
IP address blocks: 154.94.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75512 (0x126f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:32:09 2024 GMT
Not After : Dec 12 09:32:09 2025 GMT
Subject: CN=676d229d-a957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:8e:c0:45:77:f8:37:b2:f7:14:56:75:1d:
9a:a5:30:7e:b6:93:41:0a:ab:d9:ee:72:1e:b0:aa:
db:fc:42:2d:1c:f3:3e:d1:79:9e:54:c6:f1:53:a5:
93:47:3f:99:c6:de:82:20:e5:b3:bc:c4:74:c5:91:
c9:a0:27:2a:3d:87:07:50:77:8f:26:d9:27:f8:83:
a9:88:e3:4e:0b:a9:d3:5f:d5:a3:af:6f:02:66:8f:
43:fd:43:f5:62:f5:43:c3:3a:c6:01:2f:15:57:1e:
4a:b2:26:07:86:f3:a6:d6:27:bd:16:7b:54:df:7b:
3e:d1:cf:05:8c:ea:2c:30:fe:7d:67:65:09:45:e4:
18:b7:0d:ee:c6:aa:e4:4b:1a:02:39:51:62:73:3c:
0b:fe:91:f6:9d:e9:58:43:17:35:72:1d:3e:01:b0:
35:06:2f:6f:e1:c2:2a:a0:b6:a4:46:e5:e0:f7:ac:
3f:9e:37:5e:0f:53:38:88:e2:89:3e:aa:74:8e:44:
78:9a:dc:4c:cc:a3:74:ee:a9:71:6a:e8:5c:ff:2f:
0d:61:da:56:c7:df:a9:44:ef:23:fa:4c:e2:85:e0:
1e:56:1b:14:e2:cf:3d:9c:be:8b:24:55:18:1a:90:
21:1a:d2:e1:83:57:b6:5f:1c:5d:c6:8e:d4:55:29:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:59:0A:38:12:F5:D2:CA:C8:A6:17:DE:BE:5A:41:35:B1:69:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4960540EC36C11EF9A2C904D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.147.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9d:5e:fb:81:02:d6:29:f3:d4:f0:76:b6:f6:ca:11:9e:cb:
a2:c2:42:91:b2:d0:85:4b:bf:3b:ba:1c:f3:97:3c:8d:22:50:
63:23:9d:65:89:a9:ec:32:6d:e9:f4:e8:98:3b:29:6e:f0:e2:
ec:80:75:26:a3:91:fe:67:d1:9a:73:87:da:c1:09:da:d5:2b:
bb:d5:4f:e7:93:fb:83:ae:fd:29:6a:29:5b:25:ee:ed:cb:4d:
ac:31:1e:a1:fb:c3:bd:3a:ba:65:f5:93:ff:78:6b:58:1a:d7:
19:63:02:b3:78:a1:63:6f:b8:1f:71:b4:9c:52:a7:1f:a7:7e:
e7:7b:f5:45:63:93:09:63:80:eb:d2:1a:f1:0f:81:24:6c:28:
9b:0d:29:81:e4:7d:26:9b:4d:d7:e9:8f:d7:bb:1b:e4:0c:f0:
b6:27:2f:ff:b7:96:48:db:21:27:6e:12:b8:68:c4:65:25:df:
0e:d3:46:51:f1:8f:5b:c2:5e:5c:88:cb:eb:7a:e6:25:ef:d3:
42:31:41:07:38:fd:88:f9:a9:f1:9e:0b:36:36:d9:ce:34:b7:
27:23:e1:85:79:55:ef:30:d6:66:01:65:0e:44:38:9d:cd:4d:
58:ae:63:b1:be:35:c2:09:9a:95:40:26:01:4e:ca:f7:65:71:
26:46:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:51 2025 by rpki-client