Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2179ACAC1A811EF99A42B8D762E951A.roa
File: D2179ACAC1A811EF99A42B8D762E951A.roa (raw, json)
Hash identifier: KvVuqY5m4riiyZdQJ4y4EYvfwNNhQIsI6khO0rnc8nY=
Subject key identifier: 91:2E:81:88:93:CE:FA:7E:DF:C7:18:15:60:F9:21:A0:4A:CE:8F:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012111
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2179ACAC1A811EF99A42B8D762E951A.roa
Signing time: Tue 24 Dec 2024 03:40:29 +0000
ROA not before: Tue 24 Dec 2024 03:40:26 +0000
ROA not after: Wed 10 Dec 2025 03:40:26 +0000
asID: 984
IP address blocks: 154.92.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74001 (0x12111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:40:26 2024 GMT
Not After : Dec 10 03:40:26 2025 GMT
Subject: CN=676a2d2d-6c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:63:d5:82:b6:b8:21:44:4e:79:8e:10:6d:
df:d0:19:7a:9f:69:13:56:51:ff:5a:29:ba:8c:e7:
37:4d:85:5f:61:5e:bb:01:6b:18:c0:5a:32:07:b4:
14:b0:2e:32:b7:58:8c:2c:fe:65:7f:4e:77:eb:87:
06:90:17:96:f3:ac:61:b8:ff:19:87:96:9d:70:e2:
eb:2b:84:23:f7:33:31:29:a5:a2:a6:3b:61:45:cd:
ca:13:76:73:28:b3:2c:38:a3:b0:bc:ac:3c:1b:13:
9f:c2:67:be:e4:dc:de:6d:ce:64:0a:b9:43:06:fe:
2a:f3:1f:b8:98:bb:02:3b:e8:8e:ae:7d:6f:6d:be:
17:9b:6e:ea:ed:1b:fa:79:a5:f8:50:33:9c:af:6d:
68:e8:be:46:1f:00:a7:2f:8a:a9:b8:f0:12:84:6a:
f9:43:b9:5f:f1:3d:72:ee:04:30:7f:97:54:eb:d1:
5a:28:e5:14:22:03:c0:fe:b6:7e:b5:cb:bb:ee:b2:
f3:97:c6:ac:e5:be:70:6f:62:75:ca:29:91:e7:be:
a0:67:fd:12:8f:68:48:fc:5e:bf:27:32:a5:20:ca:
62:b2:74:c7:9f:3b:a5:a6:8f:54:84:b9:1c:0a:f1:
b0:21:64:3b:6f:72:45:86:50:c6:88:de:74:d3:25:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:81:88:93:CE:FA:7E:DF:C7:18:15:60:F9:21:A0:4A:CE:8F:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2179ACAC1A811EF99A42B8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b7:44:e8:01:3a:e1:f4:03:97:97:33:39:e7:50:f3:23:48:
48:84:12:7b:25:9c:d3:d2:d9:ca:2e:5c:97:cb:bd:69:74:30:
b5:76:79:89:f8:9c:04:17:b8:b7:ce:ee:ac:af:7e:46:a4:a0:
68:5f:cc:e9:1f:8f:6e:95:5e:a5:a6:10:53:d6:77:dc:2c:06:
e1:3c:00:72:1f:0a:71:07:39:10:ff:b7:fd:8b:3a:ce:1c:08:
b3:3c:e1:31:3c:25:ee:b3:a9:57:8d:82:53:b0:bc:59:ae:23:
34:3b:18:0a:b3:42:bd:ce:09:a0:93:c8:76:6f:11:28:eb:81:
86:80:3d:83:40:f7:6b:1f:a9:6d:3a:19:90:19:3b:3d:4d:a1:
be:3d:81:5a:11:91:e7:b3:22:75:e7:55:bf:4a:e8:6c:c9:82:
76:b3:58:57:fb:9a:68:10:89:34:c2:2b:02:79:68:9a:7e:0c:
ba:f6:66:f1:5a:12:4a:2e:62:71:47:71:bd:ca:01:35:6d:5b:
3c:59:d1:f2:26:8f:16:89:2d:14:9a:65:7c:84:fa:a0:91:1d:
3e:8e:6a:d3:4d:35:9a:d5:a1:da:7b:73:02:79:fd:49:de:67:
11:a3:1d:cf:81:00:70:7c:ab:fb:a6:5c:0f:a6:1a:b8:6e:13:
3f:78:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:27 2025 by rpki-client