Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7616DE6AC1A911EFACC55791762E951A.roa
File: 7616DE6AC1A911EFACC55791762E951A.roa (raw, json)
Hash identifier: KsY/9/AYv5TRw8A8IGV743H6Cjf4sJMH/iXn2lEYqzQ=
Subject key identifier: 8F:FB:A4:F1:3C:DE:F9:03:B2:13:C2:9A:6C:4B:0B:4C:C4:52:C5:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7616DE6AC1A911EFACC55791762E951A.roa
Signing time: Tue 24 Dec 2024 03:45:05 +0000
ROA not before: Tue 24 Dec 2024 03:45:01 +0000
ROA not after: Wed 10 Dec 2025 03:45:01 +0000
asID: 984
IP address blocks: 154.92.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74009 (0x12119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:45:01 2024 GMT
Not After : Dec 10 03:45:01 2025 GMT
Subject: CN=676a2e41-5b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:75:fa:f7:1a:42:44:8d:57:16:2e:fd:10:
99:74:15:cf:77:9d:db:d1:79:59:1e:50:25:24:a5:
05:d4:66:85:93:a8:5d:d0:be:14:1d:68:91:fe:1e:
a7:a0:60:9e:7c:88:8e:e5:5f:47:39:89:a3:86:8c:
c0:3b:ea:f1:08:f3:c4:e5:32:5c:64:95:1d:fc:f1:
c4:e0:24:44:69:cb:7f:60:95:6c:c9:a5:06:c4:c9:
73:f3:b7:60:f9:e2:8a:71:59:05:f5:e9:84:f2:6b:
0e:d1:9b:b8:7f:1c:07:db:d0:07:67:7d:2d:79:21:
6d:86:3d:99:55:c6:20:e2:57:c4:57:11:40:bd:d6:
fd:6a:42:6e:9b:f5:22:84:3a:3e:23:e9:eb:f8:11:
a1:50:5e:cf:87:31:1e:f3:21:a4:e0:bc:87:c4:c9:
ae:11:3d:38:e3:bb:11:80:c6:6e:28:81:63:6b:01:
8f:9a:40:66:63:29:6e:73:c2:9e:e1:d4:cd:04:70:
8c:f3:d5:fc:5b:ef:a4:a6:65:19:aa:75:cb:8e:4f:
7a:a7:2a:20:75:da:bb:2f:77:aa:e9:3f:b7:c5:53:
5c:71:51:07:bf:cd:84:3f:86:ea:8b:f6:1e:e1:b2:
aa:9c:c9:f0:a6:e1:eb:0a:1d:57:78:80:0a:d1:76:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:A4:F1:3C:DE:F9:03:B2:13:C2:9A:6C:4B:0B:4C:C4:52:C5:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7616DE6AC1A911EFACC55791762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:06:79:04:f6:62:fb:d3:7f:ee:da:c3:56:e9:64:83:b0:f5:
6d:82:98:30:5b:0c:40:09:46:3c:4e:22:a6:eb:75:5b:16:4d:
04:ff:44:32:03:25:01:ee:a2:85:75:10:61:89:a5:28:87:d1:
c6:5a:04:af:65:49:98:14:40:a7:3b:3e:cc:e2:e7:48:9b:2a:
0a:d1:8e:a3:e1:ef:0d:0e:f8:2d:a2:9f:57:17:1e:d7:ac:e1:
e6:d4:9d:c0:f7:dc:91:5f:a8:a6:8b:a8:8a:ca:12:ee:c5:4f:
60:9f:89:f4:21:38:7f:cb:52:d4:a0:0b:54:40:86:16:0a:66:
6c:6a:66:d7:15:56:5b:e6:00:eb:b6:56:b9:b1:b1:c0:d2:cc:
1c:2b:db:76:73:e3:51:8e:07:f3:7d:47:80:69:27:06:ad:4c:
97:43:26:c2:4a:7f:e9:21:37:4e:db:6b:8e:43:87:13:ed:d0:
4a:29:9f:57:29:05:2e:15:7c:64:e8:28:c4:d2:4d:f8:0c:da:
ae:c3:0b:05:a4:e2:0b:db:2a:28:a3:61:74:9a:e7:c0:a9:71:
43:9c:d8:01:b8:72:9d:18:67:00:bd:b2:55:88:bc:1a:1d:31:
00:5a:96:8a:1f:38:35:b4:17:a4:17:1b:54:3e:c2:53:fe:30:
96:d5:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:24:03 2025 by rpki-client