Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D1FAFEC0E311EFB8C865B0762E951A.roa
File: 94D1FAFEC0E311EFB8C865B0762E951A.roa (raw, json)
Hash identifier: F2SR70Sz67aAi/cCrN/YG3W2iJbhQLTgtG+4NLY00hI=
Subject key identifier: 81:BE:FD:71:C8:F0:75:4E:53:5B:FE:2B:3C:B5:1E:CB:61:F9:61:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D1FAFEC0E311EFB8C865B0762E951A.roa
Signing time: Mon 23 Dec 2024 04:08:36 +0000
ROA not before: Mon 23 Dec 2024 04:08:32 +0000
ROA not after: Wed 10 Dec 2025 04:08:32 +0000
asID: 984
IP address blocks: 154.89.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73484 (0x11f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:08:32 2024 GMT
Not After : Dec 10 04:08:32 2025 GMT
Subject: CN=6768e244-64b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:39:b1:cc:21:7b:c7:46:de:9f:9a:45:bb:
58:99:ad:25:64:12:f7:13:ae:cf:e5:21:db:00:61:
04:be:46:65:7a:9f:66:aa:79:c7:0c:26:26:f3:20:
93:3c:d5:7c:4b:e0:b5:a5:c7:83:86:59:0d:97:35:
a9:39:7a:b7:66:18:63:75:42:56:29:43:04:e0:65:
77:b0:65:32:f3:20:8c:32:98:b1:96:3d:64:e6:0d:
e0:a0:ae:c3:2e:65:f2:33:99:d7:09:66:0e:84:70:
ff:13:19:11:d9:61:eb:f4:fb:87:33:43:32:c8:12:
2a:23:f4:bf:97:ba:ff:52:06:2b:ef:4c:05:1e:bc:
0c:b5:d2:84:65:af:e0:77:8e:0a:b5:03:c4:2c:36:
d9:ca:0c:3b:b7:dd:0e:36:08:8f:55:ba:b5:74:d9:
cc:00:17:ea:10:c7:67:7f:fb:7a:4a:90:ca:19:0f:
61:79:50:9f:11:3b:aa:eb:78:62:02:4a:cf:ea:67:
40:0b:89:ee:7a:6e:5a:72:ef:9d:f9:8d:19:cd:b3:
15:56:7b:4e:8c:ea:9e:f0:39:59:be:aa:89:b4:57:
e5:88:75:4a:d3:c6:81:20:6f:7e:60:65:c6:a7:86:
57:b2:58:f1:32:d6:54:34:fa:34:b6:de:9c:99:9a:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:FD:71:C8:F0:75:4E:53:5B:FE:2B:3C:B5:1E:CB:61:F9:61:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94D1FAFEC0E311EFB8C865B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.245.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d7:01:70:39:4e:c9:30:d5:91:91:3a:ef:d2:ba:a5:2f:17:
88:0d:c0:2e:7f:de:f8:06:f2:9a:01:fd:56:3c:32:81:af:4f:
d6:c4:97:4a:75:39:6e:58:60:64:67:f5:8b:ba:52:8a:fd:dc:
85:70:d5:5c:14:b2:86:67:90:28:55:e1:2a:d5:ab:ca:82:41:
03:df:78:f8:ca:a0:2b:99:58:85:69:85:29:2e:e2:2f:ca:ce:
e4:02:bb:d5:94:37:5f:7e:70:fd:e4:b5:05:c1:b7:8e:0f:31:
9f:65:18:76:d0:2d:1c:0f:9e:65:cf:e3:dc:df:4d:2e:1f:9a:
8b:dd:13:00:77:09:29:48:69:86:3e:eb:bf:c2:a4:76:6e:9e:
6d:02:01:48:6b:b4:b5:15:fe:2d:b7:25:e0:45:98:ce:3e:1d:
e7:a2:c4:19:70:c4:95:f1:d5:ac:09:6b:ef:e7:ea:8e:48:3b:
0f:70:e0:61:d0:10:59:9c:55:d2:65:06:82:5d:e6:fa:7b:e5:
1f:15:fc:67:53:06:a1:7d:8f:e9:76:c6:f5:1c:5d:ce:22:20:
c7:bf:dc:2c:00:62:39:eb:6d:42:47:d4:51:d6:81:4a:30:e4:
7c:d1:44:b4:02:24:93:b5:ae:d8:ab:2d:c0:f8:34:9e:8a:ad:
b7:8d:fa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:40 2025 by rpki-client