Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7E79ECF81711EF9E018593762E951A.roa
File: 9C7E79ECF81711EF9E018593762E951A.roa (raw, json)
Hash identifier: v37mWLsiuYqPssB/pf+xU56GLn5hMWoqjTcnhVvtyJs=
Subject key identifier: 79:70:37:B1:40:70:DC:69:E8:E2:3F:62:9C:74:6D:3F:02:AC:7F:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7E79ECF81711EF9E018593762E951A.roa
Signing time: Mon 03 Mar 2025 10:09:36 +0000
ROA not before: Mon 03 Mar 2025 10:09:32 +0000
ROA not after: Wed 30 Apr 2025 10:09:32 +0000
asID: 63139
IP address blocks: 154.94.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94198 (0x16ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:09:32 2025 GMT
Not After : Apr 30 10:09:32 2025 GMT
Subject: CN=67c57fe0-0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:06:00:b6:12:8a:ab:6f:32:8c:e4:31:32:
6d:43:82:ae:8b:c0:6f:b1:2e:ae:ec:69:3b:4c:92:
44:01:67:3d:5f:7f:2b:2e:a0:7a:b6:fd:b4:f7:45:
20:1f:cb:dc:e8:69:ce:85:e0:dc:94:b2:61:bc:33:
e5:d3:19:c4:e1:5d:5c:53:6c:fa:3f:f0:d7:d0:5e:
9d:80:a0:b0:5f:89:c3:7a:d5:3c:98:63:c9:51:e8:
b4:06:a1:6a:4e:a8:cc:60:f5:98:8f:0e:be:18:74:
45:d1:78:6e:95:47:d9:e6:c3:7f:08:8b:08:2e:f4:
10:1e:07:ad:4b:61:05:29:b6:7b:e9:2f:de:c6:9b:
b3:c8:00:06:a8:87:3b:ba:b0:54:41:e4:4b:65:c7:
e0:ed:a3:c9:ab:19:1c:ee:03:cf:56:48:4c:64:ac:
fe:29:34:43:d1:c0:ff:86:13:65:66:81:8e:6f:43:
11:87:83:18:72:c0:21:97:10:cd:3c:ad:8f:7e:a9:
ee:2c:21:dd:c3:49:f3:28:b1:e8:60:83:77:08:2e:
e6:02:a9:c9:62:76:df:b5:86:6f:06:89:76:53:da:
dd:ac:40:88:3c:47:d1:d3:b3:c7:61:ad:3d:54:74:
34:71:d0:1c:f5:52:77:35:12:99:3a:d7:42:21:62:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:37:B1:40:70:DC:69:E8:E2:3F:62:9C:74:6D:3F:02:AC:7F:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7E79ECF81711EF9E018593762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2c:0a:e5:b5:27:2a:62:73:fa:b4:fd:aa:6c:aa:7f:7e:b5:
00:e8:aa:d9:e5:ed:7a:e3:db:57:d0:5f:a4:f0:39:c6:7e:32:
c9:77:6e:ef:01:1c:3d:3a:02:e7:13:dc:54:39:bc:9f:f7:51:
cd:82:92:3f:b4:a1:b0:d8:c8:63:fa:19:6f:8e:94:63:f6:29:
df:35:38:c3:4e:7e:76:2f:e7:e2:5a:39:9a:35:ed:6c:72:41:
ca:5c:f4:a6:0c:87:30:34:fc:d1:5b:82:d1:58:e9:8c:50:51:
b8:9f:58:3f:7f:ad:a2:97:7f:d2:7a:d5:9a:91:73:ed:7a:84:
e0:43:9e:8a:ad:75:c0:47:bc:69:cc:6e:78:1c:d2:74:b6:45:
67:6d:a2:d0:24:9f:59:24:f0:28:1a:ca:3c:81:78:47:42:72:
59:a6:79:16:03:03:9b:a3:1d:c8:70:e7:f4:19:08:07:3b:ac:
1f:e2:ce:1f:58:d1:aa:6e:d9:af:a0:24:99:94:85:d6:ad:ef:
5f:fc:16:31:57:59:2d:e3:08:f1:4b:81:94:f3:bc:fa:63:a0:
44:bd:03:9a:36:60:00:85:24:ba:dd:2c:2c:7b:a1:b9:59:ed:
b0:75:a8:92:a7:dc:50:8c:3c:a6:72:f7:14:d4:dc:49:14:f2:
cd:a8:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:18 2025 by rpki-client