Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A743BF4C37B11EFB00CBFAB762E951A.roa
File: 8A743BF4C37B11EFB00CBFAB762E951A.roa (raw, json)
Hash identifier: m4MWfRDSCPJDOmjJ8s4ja7PwXsj9hxH+Lv7AIw8xlSE=
Subject key identifier: 81:D8:3C:AB:F4:DB:10:9C:29:A9:16:EB:7A:38:B2:AA:08:ED:F5:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012726
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A743BF4C37B11EFB00CBFAB762E951A.roa
Signing time: Thu 26 Dec 2024 11:21:24 +0000
ROA not before: Thu 26 Dec 2024 11:21:20 +0000
ROA not after: Fri 12 Dec 2025 11:21:20 +0000
asID: 984
IP address blocks: 154.94.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75558 (0x12726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:21:20 2024 GMT
Not After : Dec 12 11:21:20 2025 GMT
Subject: CN=676d3c34-da36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2d:f5:66:11:87:c3:a7:98:50:09:16:20:c5:
1c:50:bf:de:5c:d7:90:a6:63:a3:a9:6e:4c:c4:ed:
b6:e2:a5:66:cb:28:27:32:e1:1b:28:f7:8f:3c:94:
c5:bf:a3:96:e8:6a:95:f9:23:04:e1:a7:36:3b:82:
ff:ff:c0:a3:ec:d6:87:d6:56:ef:cc:d6:d0:85:ec:
77:3b:5e:19:41:1e:a5:d0:4f:93:97:b7:83:fd:67:
b7:25:e4:c9:1e:c9:d6:b0:9b:b8:83:c5:59:fc:a6:
13:5c:71:17:17:e8:e7:14:26:e2:0e:2c:2d:94:5c:
18:54:97:9f:e5:7b:0a:29:f5:8d:7e:3b:72:f6:ac:
8f:16:aa:ae:65:eb:51:15:f0:8c:bc:2f:3e:2a:66:
2c:a3:df:74:9f:27:ed:a2:31:8d:5c:f5:1a:c4:50:
a7:9a:6a:bc:d0:b3:44:c6:a0:97:8d:f2:42:71:c6:
27:05:bb:af:ec:5d:f0:d7:45:a8:39:7c:52:b9:5d:
de:92:8a:47:63:2b:d7:bb:0c:1e:30:25:4e:b3:00:
94:3d:e6:52:4e:f4:6d:eb:d2:61:e2:a0:16:d8:e4:
ce:16:3d:63:5b:c7:32:07:e5:b0:76:f0:47:ac:53:
23:91:4b:03:40:8a:5d:e4:99:6b:ad:e8:cd:5f:cd:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:3C:AB:F4:DB:10:9C:29:A9:16:EB:7A:38:B2:AA:08:ED:F5:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A743BF4C37B11EFB00CBFAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0a:86:d0:0a:24:75:f1:04:63:29:b7:dc:d3:b9:19:50:d2:
2f:38:2a:79:a8:85:4a:28:fe:51:1e:fc:a8:9c:b0:a8:10:fe:
7a:15:8e:c8:5b:55:f1:65:d1:9e:63:0f:cc:97:a9:53:70:97:
b9:28:e7:68:63:4c:5b:1b:a8:57:fe:c7:a0:3f:e5:23:b2:f6:
7d:e9:b5:1f:b4:39:ae:c3:7c:77:8f:e9:3c:46:26:ea:0d:74:
3f:eb:92:bb:a4:31:2d:df:1a:33:12:b4:86:e7:9f:86:6b:2f:
05:26:58:81:a3:2b:85:e8:73:5f:00:6e:a2:7e:b9:35:30:c9:
13:9c:1f:b3:6b:cf:b0:4e:07:d2:a5:0d:2d:14:58:29:3c:f0:
0b:8c:da:f6:20:33:b4:5d:ab:e5:41:ab:75:a1:94:10:d2:32:
30:03:16:05:1d:da:99:02:2b:3f:ad:5b:4a:73:a1:a4:d9:0f:
13:d7:be:63:1e:bb:a1:a2:01:20:10:f9:5f:0a:33:42:e5:07:
d3:f0:2b:39:77:14:75:41:59:bb:98:ed:68:81:a8:2d:d6:14:
66:aa:f5:a6:31:e1:6b:d8:e4:68:b0:18:8b:ec:80:b0:0b:87:
27:15:b7:a8:4c:d2:2c:86:d7:8c:58:02:71:22:6b:40:0c:81:
65:b7:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:22 2025 by rpki-client