Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/760ACB86C1D411EF82F79F9C762E951A.roa
File: 760ACB86C1D411EF82F79F9C762E951A.roa (raw, json)
Hash identifier: QmbmEGKsEHEHaL8bnFXAOUUkDFnPn6MJT+nlBO6S3Y4=
Subject key identifier: E7:12:88:F9:93:1D:31:26:B1:1C:2D:D3:53:ED:FE:C8:A8:62:D5:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/760ACB86C1D411EF82F79F9C762E951A.roa
Signing time: Tue 24 Dec 2024 08:52:53 +0000
ROA not before: Tue 24 Dec 2024 08:52:49 +0000
ROA not after: Wed 10 Dec 2025 08:52:49 +0000
asID: 984
IP address blocks: 154.193.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74421 (0x122b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:52:49 2024 GMT
Not After : Dec 10 08:52:49 2025 GMT
Subject: CN=676a7665-2fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:22:bc:36:83:0b:93:34:7d:31:78:6f:fa:
20:9b:d8:5d:c2:fb:42:3d:26:af:6f:92:17:70:e2:
2a:4f:5d:e4:15:e1:b5:de:37:57:94:4c:5e:ea:f2:
67:0f:6f:d1:d7:d8:87:ed:f9:9b:29:8d:5b:60:5d:
2d:08:48:2d:ad:a4:3f:1b:2d:68:ed:7e:de:7f:ba:
b0:05:37:38:38:49:c6:d7:2b:c9:28:b1:1d:c8:f7:
5c:ea:bc:1e:a0:c6:19:6b:e6:61:67:e0:f0:41:f9:
8e:78:28:13:f7:74:af:bb:81:d6:88:21:90:a2:3b:
fe:23:67:f4:ee:3d:ef:d5:6e:a4:6b:c8:d6:18:4f:
dc:fe:4f:11:d2:ee:9d:1e:b2:67:7c:ab:82:34:1e:
d1:1c:3b:59:35:4f:cd:ec:d3:2d:a4:e5:95:39:3d:
5d:44:91:d4:c8:66:88:42:fc:62:15:65:a3:1d:c7:
a5:10:e5:5f:ae:67:dd:3a:5b:bc:94:36:34:66:dc:
75:5d:09:6c:ee:1a:3b:b3:bc:3e:ad:fd:25:b0:ab:
02:c2:a8:92:3a:32:9d:bb:34:37:b4:97:2f:38:89:
5d:cd:95:73:cf:c6:a4:f7:1f:6e:a9:2b:f3:d9:4c:
2c:76:ae:43:00:8e:a5:e2:9b:99:0d:84:d1:7d:89:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:88:F9:93:1D:31:26:B1:1C:2D:D3:53:ED:FE:C8:A8:62:D5:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/760ACB86C1D411EF82F79F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c4:5a:36:f7:af:5e:7f:ea:6f:9c:4a:42:ce:f8:df:47:53:
2d:6c:98:05:fc:bb:15:c8:6a:b5:a8:7f:35:88:7d:e0:8e:9a:
91:92:29:66:4b:6c:21:d8:b7:0a:1d:a6:5b:8f:20:3c:63:7f:
b4:97:cb:82:28:ac:b9:75:76:d2:bd:e0:06:6f:50:78:75:43:
f2:00:25:5b:79:e2:46:e0:36:73:59:d7:ad:c0:ff:a8:a0:ac:
78:9b:5c:30:39:1d:c8:f0:67:5a:4a:60:4a:ad:d2:7c:9f:f6:
14:f2:f4:1e:ad:e7:a7:3e:40:60:d5:28:cf:68:69:6e:f1:c7:
4a:08:d5:60:cf:54:44:d8:2b:c8:3d:8d:22:ef:ae:38:48:90:
8c:ab:99:a3:81:23:b9:43:af:a0:11:c1:5d:cb:e6:79:13:73:
42:a0:28:81:a2:20:07:98:d9:58:46:c2:cf:a9:16:51:b3:d2:
d3:de:ff:04:7e:25:6d:e1:4f:ce:c9:a3:cc:ea:27:f2:96:6d:
6f:83:93:3c:f4:16:f4:49:5d:15:d6:dc:32:11:69:90:57:84:
10:a4:a2:b8:ce:22:9c:a5:8f:bf:93:8f:50:a8:16:91:69:ca:
b1:9b:41:4b:a7:58:9a:1f:1a:4a:f8:5a:8b:e9:5a:07:3d:24:
a5:f7:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:48:06 2025 by rpki-client