Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9B496C38011EF95B09C4B762E951A.roa
File: 73D9B496C38011EF95B09C4B762E951A.roa (raw, json)
Hash identifier: 8jQbl9wYnaUx+hytajo1j8rtBDdIBE807mnY/nnk4Q8=
Subject key identifier: F8:CF:65:81:4B:D5:B3:5A:83:80:F1:48:A9:22:6F:C8:0D:24:25:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012758
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9B496C38011EF95B09C4B762E951A.roa
Signing time: Thu 26 Dec 2024 11:56:34 +0000
ROA not before: Thu 26 Dec 2024 11:56:30 +0000
ROA not after: Sun 12 Dec 2027 11:56:30 +0000
asID: 17561
IP address blocks: 154.94.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75608 (0x12758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:56:30 2024 GMT
Not After : Dec 12 11:56:30 2027 GMT
Subject: CN=676d4472-ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:8f:08:49:d9:ff:90:56:56:8b:0b:f2:b9:
88:e6:47:d9:f1:4f:9d:ea:69:2b:97:86:de:68:db:
5f:a5:58:59:9d:84:a5:c6:34:59:a9:1b:ff:fb:e8:
3f:cc:7f:d2:02:7f:dd:e4:6b:17:e7:b4:cc:13:02:
8e:b7:58:27:88:d8:6e:fe:cc:7c:74:93:26:9d:b7:
e8:91:a7:ba:fd:10:da:a9:48:d5:b4:4e:42:bc:00:
92:ad:38:bf:9a:9b:60:8f:a3:96:83:65:80:74:c2:
a3:65:0c:43:3f:a8:6b:dd:5f:73:c2:9a:56:f2:17:
f1:d2:59:d6:8b:63:77:64:a1:80:1e:de:7e:d0:99:
75:2d:32:49:67:d4:b6:14:51:23:2a:b2:f9:21:75:
ed:0a:7b:f2:9f:38:b9:61:90:0e:69:92:6c:fc:f4:
f3:4f:73:a2:2f:34:ff:77:73:ba:2c:c4:33:94:f4:
8d:6b:3e:ec:72:49:fa:06:5b:3f:fc:31:8e:ad:aa:
d6:a1:b7:98:f2:56:00:a8:e3:f0:1e:5b:c3:4b:40:
89:1f:71:ca:50:73:79:6b:90:2d:5f:4f:f4:61:02:
62:60:b5:74:54:7b:e7:21:fb:82:e5:fb:24:d0:da:
a4:df:c0:c7:ad:71:72:78:14:c8:64:5e:b5:09:59:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:65:81:4B:D5:B3:5A:83:80:F1:48:A9:22:6F:C8:0D:24:25:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73D9B496C38011EF95B09C4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:b6:9c:bb:cf:da:8f:c2:6c:18:41:a5:21:cb:50:34:86:
ca:a7:ca:b4:cb:ac:6e:40:88:69:f9:ec:53:7f:71:13:91:76:
99:f3:b9:48:6b:4a:ef:a7:56:89:9b:05:bd:26:d8:06:8b:5f:
25:91:9e:fc:c5:07:e2:93:ad:db:fa:a0:a4:0c:07:03:b5:7e:
bd:60:96:30:39:58:9d:78:2c:41:11:a8:9b:a0:42:e6:15:43:
07:c5:9a:d8:a8:74:2f:04:09:ce:ab:cb:23:92:c8:22:fd:34:
3c:1b:ed:36:c1:2e:39:11:03:52:89:33:35:99:34:fc:d4:04:
b5:c7:4f:a5:a9:94:d5:94:41:e6:1f:35:53:7f:f1:2e:ea:2f:
b5:b3:02:c1:66:f7:97:6e:60:91:19:cb:8f:f5:ee:d1:67:08:
e9:e6:6d:1a:b7:b6:a4:d4:bc:9e:7d:69:18:c2:d2:9f:5e:c2:
eb:e5:ba:ce:5b:bc:b2:29:3e:6b:e7:10:e4:e7:3f:bd:b9:c6:
a5:9c:bb:da:2c:bf:ab:36:63:b2:de:8b:d8:b4:a6:52:19:a8:
50:6e:71:a1:03:10:52:f0:10:56:74:41:ba:71:09:7e:91:1c:
6b:1d:f4:de:76:ae:05:39:09:17:07:03:77:ff:bd:51:a2:a3:
83:84:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client