Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4CD3F2C1A811EF94BF0A8B762E951A.roa
File: 7D4CD3F2C1A811EF94BF0A8B762E951A.roa (raw, json)
Hash identifier: tjV7JGcHko9/ocFlDrxueNswQd1tgor3l65m0a7VjYc=
Subject key identifier: 10:99:61:E1:E6:35:BD:F2:4E:BC:0B:8F:52:6A:53:9B:82:BD:96:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01210D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4CD3F2C1A811EF94BF0A8B762E951A.roa
Signing time: Tue 24 Dec 2024 03:38:07 +0000
ROA not before: Tue 24 Dec 2024 03:38:04 +0000
ROA not after: Wed 10 Dec 2025 03:38:04 +0000
asID: 984
IP address blocks: 154.92.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73997 (0x1210d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:38:04 2024 GMT
Not After : Dec 10 03:38:04 2025 GMT
Subject: CN=676a2c9f-934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:24:02:1f:94:1f:de:c1:d2:c5:41:b3:b9:
03:61:36:87:40:67:21:c8:54:0a:b7:0a:89:28:1a:
b2:76:28:0c:57:01:1a:1c:cf:37:12:f3:a0:62:77:
18:9c:0b:0b:89:70:6d:60:d2:d0:e4:b7:fd:16:c7:
7d:41:4c:84:7d:7f:9c:8d:6d:56:40:14:0c:62:ca:
7e:37:86:0d:bb:ba:24:5c:57:1f:cf:ad:28:78:05:
b1:33:4a:9c:c7:fc:b2:35:42:22:7c:b1:f8:bf:b7:
41:78:87:69:ef:f8:7e:7d:e7:99:da:63:f6:a3:e5:
02:16:90:6b:95:72:fc:63:23:db:31:81:6e:0b:eb:
44:88:a7:84:49:5e:65:92:30:95:ec:2b:b8:23:92:
c5:68:ae:fe:90:f8:66:3e:62:32:00:e9:f8:da:03:
92:9a:94:a3:2e:b1:7c:1b:23:0d:26:cb:6f:02:14:
53:5a:cf:64:6d:cb:6c:51:66:00:c2:6a:c0:c7:e5:
ac:a4:af:dd:c3:bb:f3:cc:12:77:78:ab:6d:e7:23:
20:bb:54:d1:d7:c3:2b:3b:71:af:ae:19:e9:db:0a:
48:71:53:34:40:40:52:98:a8:24:7c:92:2d:2f:00:
18:8e:db:d0:11:a4:b3:d7:89:77:23:e4:4f:e6:58:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:61:E1:E6:35:BD:F2:4E:BC:0B:8F:52:6A:53:9B:82:BD:96:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D4CD3F2C1A811EF94BF0A8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.206.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:34:3c:fc:d7:63:1b:4d:c5:18:e2:d8:83:f3:ae:5d:62:2c:
b2:58:93:77:39:87:92:d3:10:55:c7:1a:48:ae:1f:42:90:ec:
31:2e:c1:df:f1:0c:85:6a:2d:f6:ef:53:d8:f9:27:e9:e2:06:
82:c7:f3:7b:42:d0:09:75:93:61:fd:74:ba:5b:92:b1:2f:0d:
45:da:66:7e:6d:1c:80:a4:f9:76:e9:0b:75:6b:2f:70:14:62:
b4:6b:33:cf:8a:a5:32:14:61:de:bc:b7:7b:88:0c:38:a8:d4:
70:b9:3d:a1:f8:eb:a1:c1:ab:15:ae:4f:13:02:5d:36:02:b2:
de:5a:03:79:d6:2b:9b:7b:9b:c8:7a:1d:c8:a5:0d:b4:c4:db:
bf:4a:07:cf:4e:9d:fe:ca:45:8e:51:92:8a:61:48:05:17:d8:
1a:41:a6:74:27:c1:2a:ee:bc:1f:2b:d0:25:f9:20:9a:17:b1:
83:f9:1a:00:1d:af:ec:4f:60:2e:6e:28:52:f5:ba:63:71:f1:
7c:b8:c5:c6:57:1e:85:d7:bf:02:6c:d1:44:d7:b8:0c:1b:2f:
71:ee:a9:53:12:fa:f2:b0:94:56:4b:33:e7:04:d9:f9:46:93:
11:c0:64:47:3d:15:f5:8f:44:a0:37:7a:e5:93:83:18:d3:ba:
18:cc:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client