Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA7C788C36811EFB0D2E3B3762E951A.roa
File: 5EA7C788C36811EFB0D2E3B3762E951A.roa (raw, json)
Hash identifier: Laxa6kY4MZKahS98avy/27McjRoaSlcgNePMGEcMgXI=
Subject key identifier: 2F:AE:F3:E8:7B:36:D4:73:18:E4:A7:50:A7:12:22:FD:71:71:ED:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA7C788C36811EFB0D2E3B3762E951A.roa
Signing time: Thu 26 Dec 2024 09:04:10 +0000
ROA not before: Thu 26 Dec 2024 09:04:07 +0000
ROA not after: Fri 12 Dec 2025 09:04:07 +0000
asID: 984
IP address blocks: 154.94.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75470 (0x126ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:04:07 2024 GMT
Not After : Dec 12 09:04:07 2025 GMT
Subject: CN=676d1c0a-5dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:03:49:28:e5:eb:70:d3:bc:2c:a2:ec:f4:
00:88:0c:90:0f:4c:f7:8c:e3:d2:93:7c:8b:73:c7:
ae:ca:8e:02:41:57:5c:b6:cb:f9:63:58:cc:38:aa:
7c:f4:c7:90:d2:a8:15:8e:f7:d0:fd:4b:dc:32:cf:
68:0f:1c:92:16:a6:78:cb:ee:89:91:d9:61:f3:f2:
f6:79:f4:de:f3:f1:bc:96:5e:c0:60:c2:b1:15:45:
1d:e1:31:68:8a:71:12:31:5b:49:e4:e3:5c:49:25:
bf:93:fe:8f:aa:c2:90:22:cd:ec:49:84:c3:b1:07:
40:f2:f4:41:67:5a:bd:6d:5a:d0:3f:ad:ed:bc:1c:
ee:b2:12:cb:a4:59:95:1b:5e:3d:6c:ab:99:3e:e7:
95:3f:9a:59:ac:1e:74:47:6b:11:22:8d:16:71:39:
1d:cd:bc:99:5e:00:ff:d3:a8:b4:a1:f6:4c:7d:f0:
a7:54:af:2d:57:01:47:ec:b0:dc:39:99:a8:1a:1f:
62:4c:3c:01:a1:44:6c:19:bf:10:00:d5:87:85:51:
fd:cc:a5:3d:e8:7e:e6:c2:dc:d5:18:f1:a1:04:1e:
f3:2f:2f:7f:e3:12:25:ac:d8:92:bf:df:36:02:4e:
ee:71:f7:ae:57:75:cb:f3:1f:86:23:2a:fe:a0:f2:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:F3:E8:7B:36:D4:73:18:E4:A7:50:A7:12:22:FD:71:71:ED:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EA7C788C36811EFB0D2E3B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fd:cd:5f:94:01:51:12:02:17:6a:8c:a5:04:d1:8b:ee:ab:
81:ef:37:ce:61:05:ef:7a:75:71:3d:25:dc:65:e5:8d:5d:fe:
ab:0e:4b:63:48:06:23:0a:b5:61:67:72:04:c5:7d:b8:ac:d8:
a2:c3:4c:e2:ad:cd:fc:1d:4d:fe:d3:7f:3d:f2:1e:95:34:00:
30:8f:a5:54:2a:a9:13:91:90:6d:d8:72:1b:bf:31:98:d3:1a:
f3:a1:19:70:81:ae:0a:8d:b5:e6:0d:da:47:3f:1e:d5:1c:b8:
12:be:9e:24:6a:d5:95:b7:6a:66:8e:d8:35:7f:30:14:6f:72:
9c:81:5a:09:77:9c:a0:00:ba:0d:23:8c:06:f7:14:c9:9b:df:
eb:ee:d7:6a:56:85:b5:e1:4c:93:a0:6f:cc:c8:4b:15:30:77:
35:15:dc:76:0c:a3:25:8a:aa:ab:a8:19:0a:19:35:8c:90:ee:
28:14:33:73:79:71:bc:a0:13:d1:51:e0:29:3b:a2:20:f8:be:
c5:25:e8:f5:01:b2:d2:d0:79:ba:35:33:24:7e:7c:fa:85:a6:
7d:dd:64:e1:3e:07:92:73:4f:2b:45:a5:ef:e6:98:ba:1b:48:
84:93:7e:d0:07:66:03:1e:93:84:67:54:f8:c1:d1:5e:e0:64:
c9:de:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client