Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84B39978C53111EFA562DD88762E951A.roa
File: 84B39978C53111EFA562DD88762E951A.roa (raw, json)
Hash identifier: PCcKaagcKanCTw44guozEZANbe8fkH8r4CUaIgBBM5M=
Subject key identifier: D9:6A:50:DD:19:2E:EF:39:A3:D6:04:15:FB:B8:7F:25:2E:94:8B:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84B39978C53111EFA562DD88762E951A.roa
Signing time: Sat 28 Dec 2024 15:36:35 +0000
ROA not before: Sat 28 Dec 2024 15:36:11 +0000
ROA not after: Fri 12 Dec 2025 15:36:11 +0000
asID: 984
IP address blocks: 154.204.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76783 (0x12bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:36:11 2024 GMT
Not After : Dec 12 15:36:11 2025 GMT
Subject: CN=67701b03-4259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:24:ec:83:9d:b4:29:55:64:c2:12:47:bb:
e4:f0:71:49:c8:53:f2:c0:ce:a7:f3:98:24:6a:62:
09:fb:a6:68:6b:8c:2f:f4:04:aa:1e:e5:23:c4:12:
68:07:0a:e6:d0:c4:04:db:ca:fa:23:ef:2d:0a:a8:
55:d3:4c:58:72:36:52:58:ab:f1:69:3d:a8:28:2a:
72:99:0c:15:ac:2b:2b:a8:22:b7:59:5d:02:e5:ed:
9e:6e:9f:fc:bf:3d:ab:ef:ec:b9:03:f5:f1:0e:66:
ac:6f:01:5f:dd:e7:29:3c:8e:72:9f:c0:79:6d:a6:
4a:5b:91:e7:0c:4e:8f:9c:62:43:a8:34:9d:da:cb:
76:a2:3a:07:7e:54:9a:22:74:cc:00:98:9c:11:ce:
33:45:23:92:a8:9f:06:f3:f4:e9:63:88:bc:8c:08:
f9:c3:e9:c2:d3:b8:87:cc:e9:c3:48:78:fa:c7:f7:
23:79:21:c0:78:7f:44:97:c3:44:9c:f8:01:3f:f3:
9b:0a:d6:37:0f:c5:6b:86:a1:05:d4:3d:4c:e8:28:
90:92:1c:4e:5e:87:f4:f2:02:fd:fb:8a:90:f3:72:
ef:ee:00:a6:47:4f:0e:6b:1b:c1:eb:51:e0:7c:8f:
43:59:f1:6a:f0:3f:75:02:6d:0c:dc:ff:b2:9e:42:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:50:DD:19:2E:EF:39:A3:D6:04:15:FB:B8:7F:25:2E:94:8B:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84B39978C53111EFA562DD88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cd:56:dd:25:91:66:ff:b8:70:83:d4:9a:8a:cb:21:a5:1b:
90:33:be:09:33:a0:81:fc:4c:69:1e:8b:8f:4d:60:08:48:f7:
9e:8b:c6:42:b4:61:c8:e4:7c:25:04:5c:63:2e:bd:b6:f7:f0:
66:f3:9e:0d:b3:e8:82:de:4b:1e:17:f4:15:0c:b5:0a:93:91:
76:24:8c:b1:45:6b:f3:8b:70:09:19:8d:13:4d:e1:17:8d:29:
b0:69:8b:92:26:c5:a3:b0:80:60:5b:47:54:28:e3:9b:77:a4:
f9:b1:45:e4:bf:11:bf:3b:5a:50:16:e0:6b:93:fa:4f:f0:69:
ea:eb:96:9f:35:d5:e1:23:ec:c1:69:22:e3:56:97:67:ee:33:
1d:ce:89:5c:1c:8e:80:2e:ae:d1:aa:cc:6d:82:a7:b8:3d:f2:
a5:ca:ae:84:ca:63:fc:0d:ba:08:12:7a:88:7d:88:65:b0:82:
20:b5:8f:97:d1:17:1f:26:40:23:1c:08:f6:49:a4:54:8e:9d:
d7:63:04:3e:2a:a3:0b:0c:03:5f:2e:99:15:33:f8:ca:9d:0c:
6f:1e:e2:5e:a7:2f:35:33:12:f0:dd:87:a4:4c:8a:03:ca:fd:
38:ca:e7:bd:ce:b6:60:d7:f4:ad:98:fa:24:83:93:2d:88:26:
ff:ae:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:41 2025 by rpki-client