Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD80F0D0C38711EFAFC76E78762E951A.roa
File: BD80F0D0C38711EFAFC76E78762E951A.roa (raw, json)
Hash identifier: BUj/hwY7QWSl8DlLy8Bkmnbf34FMDZVhfq2VFBAQUx0=
Subject key identifier: C3:D3:85:E0:DA:05:62:3A:37:83:17:5B:42:92:9D:44:02:02:19:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD80F0D0C38711EFAFC76E78762E951A.roa
Signing time: Thu 26 Dec 2024 12:48:44 +0000
ROA not before: Thu 26 Dec 2024 12:48:40 +0000
ROA not after: Fri 12 Dec 2025 12:48:40 +0000
asID: 984
IP address blocks: 154.94.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75684 (0x127a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:48:40 2024 GMT
Not After : Dec 12 12:48:40 2025 GMT
Subject: CN=676d50ac-2c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:0e:b0:76:58:05:dd:29:7c:ca:5d:c8:ea:
ab:ce:01:c8:05:35:0f:39:73:7d:96:fe:f6:64:4a:
0c:b6:54:30:61:8f:2a:ce:c3:d0:c6:a1:db:71:e6:
bf:d1:60:57:df:72:a0:3f:b6:d8:47:e2:06:74:48:
f2:71:2d:d4:20:e1:5a:00:2d:8c:ee:8c:2f:3d:29:
b4:e0:15:30:da:98:1b:10:cb:fa:c2:b1:ec:2a:44:
a9:7c:96:bc:cf:f8:01:f0:77:55:85:36:ee:c2:5a:
16:5c:5e:ac:fc:bc:73:9a:bd:32:cf:be:1b:d8:ad:
50:8a:cd:9a:92:bc:c0:b7:48:40:c6:e8:b7:05:14:
f1:d9:62:63:9a:ac:3a:b6:d3:5b:d0:76:88:fa:1a:
f3:37:de:b0:7b:f3:68:19:63:c7:30:37:89:fc:64:
62:c5:02:8c:15:a2:5b:d2:11:c1:df:41:74:69:5a:
9b:60:6e:54:f7:2d:c9:61:ef:5b:0b:0e:46:09:d2:
17:c8:ab:20:14:e8:54:dd:0c:1b:e9:b2:d5:b0:64:
93:be:f2:3d:78:8a:5a:03:7c:36:32:a0:c5:a4:a3:
03:47:6e:9b:d6:78:3d:39:48:b0:58:67:26:bf:3c:
36:23:bd:40:78:ea:ac:5e:e3:cb:1a:5d:ce:53:6d:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:85:E0:DA:05:62:3A:37:83:17:5B:42:92:9D:44:02:02:19:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD80F0D0C38711EFAFC76E78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a0:99:dd:51:06:fe:92:47:a5:da:78:28:0d:86:57:0d:6d:
87:96:a1:b3:40:38:d7:c9:8a:aa:5b:be:1c:d5:18:63:8c:f3:
3e:9b:23:8e:03:19:c9:a0:8b:57:6e:22:1f:4b:97:31:5d:57:
f9:9d:09:f4:6b:02:9c:6a:c8:06:bd:e1:75:64:be:b4:c1:b9:
63:d4:18:83:88:0a:7c:57:a1:4b:7d:56:25:2e:a9:07:9a:a9:
42:91:77:02:c9:80:15:eb:86:6b:80:90:a2:d9:c6:91:f1:37:
16:40:3b:c3:7f:86:43:5c:7b:ee:3e:df:5d:20:69:33:ec:20:
83:fa:4c:05:ea:a9:89:54:18:22:e6:23:0d:fa:48:30:be:18:
e8:48:90:7d:8d:8e:08:cf:3d:a8:d4:2a:4b:7d:10:f8:02:21:
b2:b5:69:d0:4f:de:14:01:1a:c2:90:65:85:b1:f6:5e:7b:c5:
c9:da:8c:a6:5b:02:c4:fe:90:64:74:8b:f6:d9:74:07:c7:cf:
c3:b3:02:2a:c2:d7:2c:a4:aa:c5:b0:97:90:ad:25:10:aa:8f:
94:21:f0:42:e6:cc:bb:b5:d5:b4:e2:58:f0:8a:3a:4f:db:39:
f6:62:fb:99:a1:e0:6f:66:a2:07:b5:e7:f6:f0:ac:2d:bd:d5:
65:ea:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:11 2025 by rpki-client