Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA63C06C40711EFB14B84B2762E951A.roa
File: 9BA63C06C40711EFB14B84B2762E951A.roa (raw, json)
Hash identifier: 7RYsW3+62aiC8/XqXP8X6E07VYoGHBjfygQeFz6w7yA=
Subject key identifier: E7:52:70:FF:DF:EC:BB:17:FF:95:C5:3B:C9:B4:7F:B0:74:68:22:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA63C06C40711EFB14B84B2762E951A.roa
Signing time: Fri 27 Dec 2024 04:04:03 +0000
ROA not before: Fri 27 Dec 2024 04:03:59 +0000
ROA not after: Fri 12 Dec 2025 04:03:59 +0000
asID: 984
IP address blocks: 154.194.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76017 (0x128f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:03:59 2024 GMT
Not After : Dec 12 04:03:59 2025 GMT
Subject: CN=676e2733-35b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:e6:5a:2e:de:b3:74:0d:7b:60:68:b5:72:
f3:aa:53:76:31:55:f0:b4:e4:75:2c:cf:16:b9:b4:
59:b4:1f:b0:a3:56:a5:07:31:b0:95:ad:c4:2b:e4:
32:7c:26:95:f6:ae:e6:e3:1e:81:2d:10:d0:b7:ef:
b0:93:a1:f0:cf:79:c4:2f:e1:12:cb:ce:da:55:d5:
c5:48:b7:2b:d1:b4:1a:c0:57:0d:f6:54:6b:e9:3e:
96:fe:5e:f7:9f:ca:5e:e9:ff:2c:51:51:f8:9b:54:
a7:86:76:30:9f:84:c4:93:7d:ea:ee:23:e9:f1:1c:
4e:a0:86:9f:40:8c:f3:10:cf:65:03:32:3d:64:7b:
69:54:24:5a:7b:54:e9:58:ee:a2:5b:9d:03:51:94:
58:5d:5b:ce:aa:24:cf:31:02:9c:85:71:65:98:da:
42:ac:68:cd:22:f6:dc:72:bc:94:39:d1:5d:92:b3:
9f:aa:d4:5f:5c:2e:68:2c:eb:3c:77:8c:a9:aa:91:
79:63:18:27:77:1f:6f:8d:ff:f9:53:18:9c:a5:1f:
c5:c9:a8:eb:7a:56:c3:2d:c3:8e:4e:00:27:29:69:
3c:c7:c9:a7:c6:0d:bc:3f:00:ef:19:64:1c:10:1d:
9f:58:05:3c:99:6c:a8:d7:0f:da:a8:f6:fe:3f:dc:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:70:FF:DF:EC:BB:17:FF:95:C5:3B:C9:B4:7F:B0:74:68:22:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA63C06C40711EFB14B84B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:38:45:83:98:b3:01:3d:a5:f7:20:25:90:f3:72:79:90:82:
da:8a:ab:2c:8c:40:bf:b2:dc:43:ae:95:f6:27:73:43:97:56:
8c:72:8b:8e:96:06:60:19:2c:68:4b:fe:0d:de:4b:54:7e:24:
fb:99:8f:2d:14:95:ee:ce:5b:9d:2e:44:dc:27:c6:88:26:7d:
18:79:f2:59:e7:b7:8c:ce:e6:84:33:c7:0a:49:39:ca:23:06:
e0:d1:13:6d:7c:31:1f:d6:71:55:ed:18:7c:66:e7:f6:ef:44:
a8:b8:fa:94:db:29:01:6e:4d:3d:b0:34:49:af:a5:22:44:cf:
e5:93:c8:f1:a8:53:62:48:61:7c:48:97:a0:28:44:13:69:4d:
c5:e9:3f:55:52:8a:2d:ae:ec:d9:d1:8f:2c:3d:d1:64:12:61:
c2:a8:1e:84:fa:a6:0a:e6:fe:21:87:83:79:f2:3b:ee:e1:a0:
d1:64:cb:d1:d2:95:86:c5:e6:79:45:45:5d:c6:e2:82:c1:93:
2b:f1:84:a3:f0:b1:05:60:c2:ca:5a:26:7c:45:65:e0:12:a9:
d7:85:05:db:7b:04:e3:45:29:03:4c:b1:53:a7:60:d6:58:f4:
49:39:0f:29:58:1a:f2:10:44:7b:6b:c4:a0:62:e8:f9:db:62:
57:a3:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:18 2025 by rpki-client