Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B3AC22C25F11EFAA53A495762E951A.roa
File: 79B3AC22C25F11EFAA53A495762E951A.roa (raw, json)
Hash identifier: xP7vkWQpJ5FmgoSK5frPQzTxzIahTrwLu18v54qDnzI=
Subject key identifier: E4:CE:D3:A4:82:EE:15:9C:BC:44:DB:3B:D9:C8:75:E0:BE:4E:01:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B3AC22C25F11EFAA53A495762E951A.roa
Signing time: Wed 25 Dec 2024 01:27:59 +0000
ROA not before: Wed 25 Dec 2024 01:27:55 +0000
ROA not after: Wed 10 Dec 2025 01:27:55 +0000
asID: 984
IP address blocks: 154.199.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74656 (0x123a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:27:55 2024 GMT
Not After : Dec 10 01:27:55 2025 GMT
Subject: CN=676b5f9f-c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:1a:72:1b:48:6c:54:8b:2d:e8:21:bb:fd:
78:8c:c1:96:0a:57:14:51:bb:82:03:47:3c:32:b7:
5e:cf:f8:19:a7:d7:33:84:31:dc:7b:b8:7b:76:e8:
7c:7a:0c:e3:57:0a:21:a6:43:38:7a:2b:db:a2:68:
26:4f:ec:a0:e5:60:06:ed:a7:ba:80:e6:eb:59:ee:
a1:21:1a:09:7f:9f:07:f1:88:d8:68:0a:d3:28:b1:
46:77:9c:17:0d:56:dd:7b:3e:e6:05:ef:15:1b:12:
a7:d2:ee:b6:28:81:f5:96:d4:6e:1f:ce:ee:04:87:
d1:ee:21:64:1f:f9:14:70:be:c5:70:b4:db:34:42:
f6:41:38:89:6c:f4:63:5e:1c:80:20:2c:cf:6f:5e:
d9:65:ae:69:f2:61:56:d7:cc:ae:29:ad:8c:25:20:
66:34:c9:76:6a:ea:d8:95:94:1e:7f:89:28:03:1a:
b9:0f:28:f0:ab:0b:ab:74:80:c5:03:1f:0f:c5:00:
b6:6d:a2:f6:b3:5f:1c:50:b8:23:89:f7:e0:66:56:
ce:31:a3:6a:35:19:bc:1c:da:bc:da:c7:2e:d0:9e:
43:4d:fd:a0:8d:c2:cf:ea:87:6e:7b:6c:9f:0c:2a:
ff:78:43:0d:d5:b0:3d:3e:06:40:0b:49:b0:c6:52:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:D3:A4:82:EE:15:9C:BC:44:DB:3B:D9:C8:75:E0:BE:4E:01:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B3AC22C25F11EFAA53A495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.93.0/24
Signature Algorithm: sha256WithRSAEncryption
17:90:06:33:b8:16:cf:c4:d8:c2:ef:52:bc:57:83:ab:a7:54:
6b:95:e9:d5:a8:7c:da:80:cc:49:ca:fe:f7:82:ef:1c:5b:40:
a4:d5:d8:03:57:f5:a0:dd:bc:d9:93:7e:db:cf:ca:ed:b3:dd:
e5:06:07:73:d6:30:ed:dd:0d:21:fe:4a:bd:17:52:a7:44:ef:
4f:0a:9c:56:d9:81:6e:f0:4f:54:38:ed:8d:dc:77:45:6b:d3:
7e:87:cd:0a:68:a7:01:5a:f0:af:6d:31:6d:e8:2d:eb:5a:df:
fb:e4:57:5b:2b:f4:ca:3f:01:40:4b:71:aa:b9:17:56:02:26:
44:21:8f:c2:97:ce:0c:1c:e3:bc:ee:e9:c0:f7:b2:f9:89:f3:
2b:e3:8f:fb:3c:de:4f:f8:db:8c:1f:6a:2f:ed:a1:ab:a1:71:
84:6e:40:0b:68:f9:81:8f:8d:57:94:6a:da:6a:a2:5d:af:96:
e9:ff:74:01:2d:c6:8a:98:fc:04:7a:05:29:ff:65:c5:fc:5f:
0c:31:ea:76:fc:d7:af:31:43:d8:90:8d:94:68:28:4a:ce:db:
1b:22:0a:7e:07:6f:1d:b6:03:d3:a0:54:5a:91:d3:38:e9:2b:
79:cd:d5:22:f9:f0:25:82:de:66:4c:1c:02:0d:03:46:90:a1:
b1:1b:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:03 2025 by rpki-client