Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5312A6ACC1A811EFBFCF3689762E951A.roa
File: 5312A6ACC1A811EFBFCF3689762E951A.roa (raw, json)
Hash identifier: a543ZTueL8/Sc0by9fk6alDiHfakpcs3/9vPVoG4HaQ=
Subject key identifier: 8D:6F:14:80:32:0E:1A:02:63:7D:B1:9C:64:98:37:FA:C2:48:EF:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01210B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5312A6ACC1A811EFBFCF3689762E951A.roa
Signing time: Tue 24 Dec 2024 03:36:56 +0000
ROA not before: Tue 24 Dec 2024 03:36:53 +0000
ROA not after: Wed 10 Dec 2025 03:36:53 +0000
asID: 984
IP address blocks: 154.92.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73995 (0x1210b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:36:53 2024 GMT
Not After : Dec 10 03:36:53 2025 GMT
Subject: CN=676a2c58-761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:2a:cb:99:f3:12:36:fa:68:47:b8:74:a9:
e4:c3:34:84:61:cd:a5:33:6c:2e:95:d4:b4:55:ce:
c1:e6:4a:1f:62:82:81:5e:18:9e:dc:6e:b5:9b:64:
e1:38:78:76:c4:31:0f:e8:c9:a9:38:e3:cf:48:1a:
ec:58:44:33:da:58:79:60:52:4f:1b:d1:8e:cc:35:
4e:1f:6e:90:df:a2:f9:44:f5:5e:6e:ad:48:1f:84:
ab:02:b5:be:28:2b:34:67:29:cd:2b:70:60:27:5d:
73:b8:79:cb:64:9e:d4:a0:cf:a5:bd:68:bc:2d:c6:
a2:0d:b2:59:30:2f:64:f8:31:32:a6:cb:ed:0e:45:
f8:1c:56:fc:f4:0d:41:ee:6b:88:18:fb:6c:9d:63:
7b:6b:63:27:b0:56:bd:70:95:cd:ab:2e:f3:b5:84:
da:dd:68:cd:5d:2c:37:73:74:1b:de:c6:9a:3f:14:
9f:9d:3f:47:de:41:34:99:16:59:d3:10:86:f9:da:
16:ce:ec:e7:dc:49:e3:64:c9:0f:63:9a:dd:21:af:
33:74:f3:21:b7:e1:8e:04:a9:5b:ac:79:e9:78:d5:
42:b1:b7:a8:8a:ff:05:d6:da:14:b7:43:53:de:9e:
0f:05:ab:5e:d8:f4:c2:52:cd:3a:72:82:5c:44:ff:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:14:80:32:0E:1A:02:63:7D:B1:9C:64:98:37:FA:C2:48:EF:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5312A6ACC1A811EFBFCF3689762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e0:a9:45:e0:cd:5f:5d:8d:e0:5b:00:64:08:69:23:cb:37:
39:d7:a0:39:19:94:41:51:0b:1a:fb:df:e5:27:93:8c:fb:df:
23:fc:6b:79:d8:d0:25:e5:45:76:1b:4a:7f:a4:fb:15:45:34:
fa:5f:01:0c:fc:58:64:ca:a5:3a:55:38:18:53:19:9f:71:60:
31:3d:34:22:fb:51:05:d8:88:06:7c:29:e2:bf:62:94:41:07:
99:30:e0:df:a7:b6:7c:57:93:f0:b5:81:10:63:8b:b4:6a:d1:
91:ad:df:bc:2f:94:00:b7:c4:15:5f:61:2d:7f:28:87:ed:46:
79:7a:b2:db:80:77:e7:fe:2e:db:7d:8e:c2:8d:b7:dc:d6:ce:
6e:e4:53:56:e5:ef:6e:71:81:06:ce:da:b2:42:79:1d:3d:f2:
06:91:82:d2:3b:e0:fa:8a:92:99:64:15:d4:34:45:e3:bc:08:
47:9c:43:5b:f6:2c:84:61:57:7f:86:4b:7c:b6:cb:d3:5f:8d:
7b:3a:63:c7:44:86:60:8b:9e:15:01:2b:f0:3a:20:53:e0:fd:
7f:f8:58:eb:6e:e2:26:e2:f6:5c:08:c8:56:80:21:0b:22:46:
2e:05:a2:6c:0b:e4:6b:f5:fb:a0:5f:eb:f7:d7:bc:ea:8a:63:
d0:49:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:40 2025 by rpki-client