Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78167A6CC19611EFA2458087762E951A.roa
File: 78167A6CC19611EFA2458087762E951A.roa (raw, json)
Hash identifier: jEhuZtaUClV7uLoneKlqFezfVS9q232nqWVre7UWMnY=
Subject key identifier: 47:7A:61:F9:FB:92:1D:61:7C:CC:35:8E:BD:49:CB:6A:0A:03:8C:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78167A6CC19611EFA2458087762E951A.roa
Signing time: Tue 24 Dec 2024 01:29:08 +0000
ROA not before: Tue 24 Dec 2024 01:29:04 +0000
ROA not after: Wed 10 Dec 2025 01:29:04 +0000
asID: 984
IP address blocks: 154.90.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73777 (0x12031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:29:04 2024 GMT
Not After : Dec 10 01:29:04 2025 GMT
Subject: CN=676a0e63-fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:b5:da:a7:ee:e6:83:39:f5:18:73:81:c3:
30:97:74:f5:3b:0e:3c:0e:32:4d:1b:7c:99:c9:a5:
01:b3:57:1c:95:a9:70:32:24:63:13:63:12:35:2d:
82:2f:c8:7d:2b:c2:bd:4e:f5:f3:5f:da:b7:25:b9:
c9:fb:95:72:7b:55:83:9b:c9:78:ef:a8:16:b3:7a:
57:67:51:60:c8:e6:f6:9d:43:7d:11:22:c1:f1:0b:
84:ec:7a:9d:e8:b1:ba:43:c3:2b:a4:39:61:5d:f5:
3e:d5:45:88:0e:04:20:42:09:11:56:76:9c:4a:d6:
67:9c:5b:68:4e:e6:b7:7c:5c:0e:29:a3:bc:7c:89:
34:87:1b:a3:cc:1b:7f:d3:61:ce:2a:8e:e8:cf:be:
14:b4:30:d3:a2:1e:14:e6:ea:3c:ab:4e:9d:c8:f0:
74:e4:a1:cd:70:95:aa:44:89:d0:dd:df:a6:64:95:
26:fa:94:1a:59:83:e2:9d:33:07:ea:42:29:d8:0d:
c7:7b:b1:60:f8:05:69:11:1d:d6:6f:b7:96:6e:d4:
30:d5:9c:1d:51:bc:b2:8f:a3:ae:ad:ed:d2:16:bf:
f3:f6:a1:19:a4:97:7a:e0:7e:a9:6a:95:7b:e3:12:
94:c3:7f:f7:b2:14:46:3b:3c:f3:9a:1d:d4:6f:43:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:61:F9:FB:92:1D:61:7C:CC:35:8E:BD:49:CB:6A:0A:03:8C:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78167A6CC19611EFA2458087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.176.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:4c:f4:49:2e:67:34:ce:ab:2b:51:0d:96:80:a3:95:c4:3a:
97:29:b1:a0:e4:f1:53:6d:f6:ad:75:12:c3:c7:3f:bf:38:33:
5b:d9:19:59:89:f2:e1:ec:05:ad:9a:f9:6a:3a:2c:a5:18:40:
69:22:0a:bd:c9:b0:75:8d:e2:f1:a7:61:8d:2b:0f:24:19:d6:
71:c6:3c:ad:7c:29:03:3f:70:90:52:f8:32:7c:dd:4b:ca:5f:
f3:61:15:ea:65:3d:67:06:a8:6b:ee:47:7c:95:91:38:6f:71:
11:94:c9:13:f3:24:a4:af:e6:dc:9b:60:b9:d6:19:91:09:b4:
0f:7d:c0:05:a9:3b:7f:70:7b:7d:4f:d5:9c:50:92:c0:2d:7f:
3f:98:14:e4:f9:a3:ea:9b:12:26:29:a4:c2:b9:b7:2f:cc:22:
23:04:97:86:20:aa:05:67:86:0b:dd:c2:5a:7d:e2:6b:5e:15:
63:fd:6a:25:d1:f8:d8:c2:5a:b8:7e:2e:28:a7:19:d1:e2:05:
42:3c:a6:74:a7:bd:08:d8:c8:ad:5b:5b:d6:2d:2f:d7:43:c1:
fa:38:be:66:20:a7:d9:52:53:32:0f:40:37:b2:74:ff:99:34:
51:d8:38:27:e4:6c:b6:be:39:38:92:46:e2:76:bd:a1:57:8d:
0f:a4:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:38 2025 by rpki-client