Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A006FFCC1D111EF9DF8518B762E951A.roa
File: 5A006FFCC1D111EF9DF8518B762E951A.roa (raw, json)
Hash identifier: yIkHFEsQzkh/eg1shcxyh5U7OHcWqf8NWNg8ct+vUyI=
Subject key identifier: E4:CE:14:48:CF:D6:62:B1:75:74:86:E4:F4:63:51:F2:36:1E:DF:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A006FFCC1D111EF9DF8518B762E951A.roa
Signing time: Tue 24 Dec 2024 08:30:37 +0000
ROA not before: Tue 24 Dec 2024 08:30:34 +0000
ROA not after: Wed 10 Dec 2025 08:30:34 +0000
asID: 984
IP address blocks: 154.193.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74405 (0x122a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:30:34 2024 GMT
Not After : Dec 10 08:30:34 2025 GMT
Subject: CN=676a712d-413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:1c:51:95:f5:b8:02:ce:12:4b:6b:ea:c6:
13:a0:a2:37:66:a8:54:b0:b2:08:bc:4c:69:87:27:
c1:9e:f5:1f:42:c0:34:e8:c1:84:8a:7c:7f:cf:29:
5c:cc:32:b8:fe:b8:df:8b:11:85:d7:b8:95:cb:7f:
57:38:c4:65:5b:f1:1f:66:a3:6b:b6:4e:18:bb:ec:
4d:d5:b7:6d:ea:8e:dc:92:9a:37:5e:8c:50:5c:74:
d9:36:fe:13:97:c0:5c:ac:4c:81:96:29:ff:d3:d0:
d9:b3:a0:df:1a:d2:40:db:74:1e:d4:14:f9:b5:38:
cf:a5:0a:e5:b8:1d:06:d1:f0:c7:e9:a6:22:33:84:
54:f1:63:99:be:e7:d2:6f:b0:27:6e:bb:42:67:bb:
95:4b:52:94:e0:cc:ba:b8:27:49:de:da:12:59:77:
5a:ad:a5:ee:1e:4b:01:39:ce:09:d2:e8:38:98:ba:
2b:e1:43:a3:c4:c0:30:31:73:ac:88:b8:ae:4c:4c:
23:03:c2:37:eb:b5:a6:7a:52:57:00:22:fc:07:78:
43:c3:f4:b2:65:73:0f:b1:72:6b:8f:b7:88:62:0c:
e6:04:36:d7:93:7c:cc:95:65:44:78:14:78:8b:19:
63:4c:b6:78:89:4f:7e:1f:1c:b0:92:aa:97:a7:58:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:14:48:CF:D6:62:B1:75:74:86:E4:F4:63:51:F2:36:1E:DF:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A006FFCC1D111EF9DF8518B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:7d:d6:79:8e:fe:5c:78:3f:2e:41:92:3e:86:41:1d:0d:c6:
10:fe:e7:25:34:40:85:45:25:ae:14:d5:70:ad:f0:49:82:5f:
09:9e:f0:39:d1:77:df:4d:85:a1:6d:28:3b:a6:b8:51:17:08:
14:26:c4:f6:87:ec:ed:02:9b:4b:cb:65:41:71:57:b7:c1:78:
47:8b:61:d0:93:69:15:94:e4:83:21:98:be:11:1e:c1:f5:95:
7e:fe:e4:8b:6c:28:fb:01:18:cc:38:4a:c8:f8:68:ce:1f:50:
e0:a1:a2:0e:14:b2:69:93:91:13:0f:3a:40:2f:ff:0f:67:0f:
e3:ea:25:cf:16:ca:20:8e:94:da:ed:8f:8e:f8:a0:5e:f8:df:
12:e3:3d:4d:76:ac:10:c9:50:24:78:8b:5e:fe:75:33:3a:67:
2b:2d:41:bf:2d:a7:52:82:84:e9:ad:8e:26:77:7d:9e:0b:ca:
0b:ec:c3:22:7a:01:67:07:c3:55:97:2c:d2:3e:43:c1:24:95:
60:04:52:1f:0f:41:50:39:01:14:19:da:66:b1:dc:98:f0:54:
9f:11:12:87:24:82:9a:b1:ed:dd:35:9e:2a:98:bb:ee:2b:04:
30:4c:c0:9c:47:9e:91:72:60:ab:84:10:54:fe:d3:91:94:6c:
c6:7b:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:29 2025 by rpki-client