Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81865CCEC37C11EFAFC501B2762E951A.roa
File: 81865CCEC37C11EFAFC501B2762E951A.roa (raw, json)
Hash identifier: 3nAba4RyPInAYxBkuwY9w+78bzoFzxVSnn/jsQhA5Qc=
Subject key identifier: 05:93:15:D3:4D:95:04:DA:FC:8C:6D:50:5F:76:65:6D:B6:29:87:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012730
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81865CCEC37C11EFAFC501B2762E951A.roa
Signing time: Thu 26 Dec 2024 11:28:19 +0000
ROA not before: Thu 26 Dec 2024 11:28:15 +0000
ROA not after: Fri 12 Dec 2025 11:28:15 +0000
asID: 984
IP address blocks: 154.94.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75568 (0x12730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:28:15 2024 GMT
Not After : Dec 12 11:28:15 2025 GMT
Subject: CN=676d3dd3-c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:31:8a:d6:61:69:2a:bb:a5:ce:64:23:40:
16:17:6e:71:47:ec:1b:be:0d:dd:55:81:8a:77:6b:
84:36:40:6f:35:e0:6b:42:eb:4f:b0:c9:2f:6f:c7:
06:14:c3:24:e3:99:dd:39:d2:6b:b2:d6:97:2d:62:
15:d1:b0:bb:cd:8b:57:b7:5d:01:54:7e:0b:3e:90:
29:0c:16:78:c0:74:b3:d3:69:60:e1:73:84:a4:cb:
dd:fd:05:04:52:c9:95:cb:1a:56:5e:d8:63:ef:ba:
de:82:72:52:be:2b:30:8d:c3:5e:71:45:eb:76:59:
93:36:6d:20:48:46:b5:e8:fd:1e:6f:29:29:83:1b:
3a:2d:cd:1e:3c:aa:84:cb:ab:4a:24:09:8f:e4:13:
c8:7e:98:cd:80:d2:4f:16:24:5c:36:8f:32:f0:5a:
3f:5d:66:a7:ae:9a:6b:a5:e7:98:a1:ea:11:1f:8d:
21:74:2e:bc:4b:7e:1c:fe:f7:e2:e2:e3:fb:28:f6:
68:c9:7c:42:ce:76:86:ed:6e:f1:7b:59:3a:eb:33:
20:3a:a4:d7:79:3d:29:8e:0f:a6:f2:3a:7e:66:c5:
21:72:cb:8f:a8:ee:15:3d:d0:3f:6d:aa:f3:d3:33:
01:f7:41:3b:0c:2e:b9:81:e8:e7:91:9e:75:06:f6:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:15:D3:4D:95:04:DA:FC:8C:6D:50:5F:76:65:6D:B6:29:87:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81865CCEC37C11EFAFC501B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.175.0/24
Signature Algorithm: sha256WithRSAEncryption
62:44:ee:d8:4d:4c:dc:1c:c5:58:1f:4f:ae:4d:9f:24:30:47:
69:25:41:d3:9c:df:9d:cd:5f:ed:46:60:59:cb:07:c4:22:cc:
24:7f:ac:55:ba:f6:75:44:35:0e:a2:2e:c8:ab:66:7f:67:61:
a5:f2:59:4d:66:9a:45:f5:29:fd:43:76:d0:f0:92:55:3f:1a:
a6:c3:4c:d7:5e:2e:4f:a2:07:cd:09:07:22:c5:c0:4b:81:f7:
3e:65:b6:ca:86:4a:f6:60:0d:9b:88:64:58:07:46:91:df:58:
61:9d:5f:28:0a:c7:3c:e1:3a:69:35:12:d0:1e:6d:67:1e:ad:
ea:5d:07:3f:e7:4b:bc:68:4b:ac:e3:11:e0:60:bd:be:0a:b6:
2d:e4:65:d9:1f:21:41:47:0d:7e:48:cb:52:fb:7b:11:83:c7:
7b:49:8a:d5:d9:b9:e7:24:3d:57:b1:e8:d6:14:fb:cd:4d:45:
87:c2:65:a8:90:e3:b2:d7:f9:25:00:d8:c9:22:51:9a:77:3d:
6d:df:53:4e:09:cb:54:be:69:b6:0f:a4:89:cc:a7:6e:0e:fc:
98:9a:67:ed:0e:99:fb:5b:67:88:44:86:18:e1:47:43:35:ef:
97:ae:5a:52:2a:a7:22:b2:4b:02:3b:de:54:d8:bf:79:07:a5:
cd:fe:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:18 2025 by rpki-client