Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE5F88EC36911EFA1648EBA762E951A.roa
File: 7EE5F88EC36911EFA1648EBA762E951A.roa (raw, json)
Hash identifier: HZToneMp9oKLBjqMzs/8ZPFv8+Zo205j2ZiVVHCqWrU=
Subject key identifier: 0B:C9:D1:FB:A4:EC:73:C9:C5:1D:57:62:E6:F6:2D:99:71:82:DF:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE5F88EC36911EFA1648EBA762E951A.roa
Signing time: Thu 26 Dec 2024 09:12:14 +0000
ROA not before: Thu 26 Dec 2024 09:12:10 +0000
ROA not after: Fri 12 Dec 2025 09:12:10 +0000
asID: 984
IP address blocks: 154.94.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75482 (0x126da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:12:10 2024 GMT
Not After : Dec 12 09:12:10 2025 GMT
Subject: CN=676d1dee-31bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:dd:ae:b8:51:c9:b2:c0:e1:1d:96:a2:73:
e8:6a:2e:dd:e0:b6:35:da:c4:1d:50:41:a2:d5:34:
ee:e5:b2:c5:00:22:05:91:33:a0:42:0d:de:98:9d:
ec:64:7b:9d:b2:ef:99:27:8a:e7:ee:ee:0d:b1:c5:
a9:12:ee:b6:28:70:be:03:eb:7b:76:3b:24:de:1a:
82:ce:21:40:5b:59:d6:09:40:c7:21:12:02:00:73:
f1:aa:05:36:9f:7a:63:7b:e3:a6:a6:71:31:2f:ff:
b3:cf:56:85:2d:52:50:cb:2f:15:75:0b:f8:0b:6b:
b7:db:60:62:e0:f6:53:bb:74:8a:26:0f:c3:ae:88:
b4:93:98:90:0d:42:58:96:83:97:63:15:16:bc:6b:
a8:ef:59:78:a8:59:2c:56:e8:53:91:b0:9a:cc:8c:
55:eb:2f:b0:43:e9:cf:27:ad:4e:0f:21:d1:4c:0f:
25:f5:0c:a9:3d:6f:d8:0f:ec:09:46:51:64:23:97:
f7:15:d7:98:fa:9d:b7:1d:b6:4e:9a:46:3b:c1:c4:
08:f0:81:83:68:f7:0a:d1:02:53:94:a4:94:e2:b4:
49:0e:63:a0:31:e8:d9:1d:4f:89:d4:b3:a4:29:17:
2c:8b:02:ea:9f:88:1e:43:55:34:15:5c:0e:e1:3c:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:D1:FB:A4:EC:73:C9:C5:1D:57:62:E6:F6:2D:99:71:82:DF:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE5F88EC36911EFA1648EBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1b:14:22:e8:f9:0e:32:8f:a5:11:eb:1c:02:35:41:33:5d:
22:03:f1:f6:fe:69:bd:18:45:ad:e9:2e:d2:20:c7:04:f4:ea:
68:f2:4e:ca:84:4e:8d:3b:3d:a4:c4:38:51:89:b0:57:fc:e5:
39:fd:8f:1d:54:0b:77:0c:ab:7f:35:c9:f0:98:31:4c:6f:8b:
af:2c:1e:88:fb:79:aa:74:00:48:7d:c3:af:c6:c3:8f:53:42:
dd:ae:4c:92:6e:57:7e:01:79:a2:e7:1e:42:70:42:b3:ac:b7:
a3:4f:f2:33:82:37:f0:9e:21:01:9a:bc:ab:48:28:26:62:bf:
ba:9b:76:41:86:54:0f:7d:34:1a:dd:a5:7d:c7:7a:15:ac:24:
8a:fc:2a:07:cb:c8:2f:00:a3:87:e3:01:38:b3:e6:b7:af:0e:
ed:ea:1a:08:c9:2d:d9:5c:16:9d:4c:90:15:bd:d4:26:0b:87:
8d:69:b8:2f:fd:7d:c2:8c:01:01:1d:e2:ee:4e:ec:b1:ab:eb:
a8:11:2a:4d:ae:d0:69:17:ce:28:cd:9e:72:77:f1:85:f1:32:
5c:91:39:3e:f9:34:39:27:9e:fd:29:9e:ab:2c:d0:c8:cf:29:
16:e6:93:47:3e:97:32:cf:4c:92:3d:74:14:c9:34:25:94:3f:
83:7e:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:39 2025 by rpki-client