Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91566B0DB1411EFAAC23089762E951A.roa
File: D91566B0DB1411EFAAC23089762E951A.roa (raw, json)
Hash identifier: ArdmhSNM3O2+D8Mh+yzPiWFeZIK9y1o+t9AtwaQprqk=
Subject key identifier: AC:7F:14:69:F4:E7:E3:61:AD:40:7E:41:64:7D:4B:50:21:28:65:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01492C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91566B0DB1411EFAAC23089762E951A.roa
Signing time: Sat 25 Jan 2025 12:06:46 +0000
ROA not before: Sat 25 Jan 2025 12:06:41 +0000
ROA not after: Sun 30 Mar 2025 12:06:41 +0000
asID: 63139
IP address blocks: 154.94.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84268 (0x1492c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:06:41 2025 GMT
Not After : Mar 30 12:06:41 2025 GMT
Subject: CN=6794d3d6-b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:03:80:07:1d:f7:4a:d0:89:96:6c:d5:03:
82:35:1a:26:0b:71:70:6a:e6:25:9b:6f:6e:bf:38:
44:8e:cc:e9:bd:c3:27:48:5a:fc:39:8e:70:ad:de:
fa:c5:29:8a:64:29:94:63:81:d3:ae:5c:35:9c:f2:
3d:57:29:c3:42:44:c0:42:db:9d:cb:65:97:2e:d9:
06:4f:61:9c:2a:5d:8a:a6:02:de:0c:48:bb:2e:28:
ce:9b:0c:a5:23:24:74:5f:25:cf:ce:1c:b8:01:11:
c2:7a:04:c8:8b:9a:6c:fd:88:65:39:39:f9:78:ba:
62:bd:92:4f:ff:43:07:40:54:b8:12:d0:b5:62:66:
14:36:aa:3f:f0:3d:00:e9:94:0e:f4:1b:47:ed:4b:
19:21:b7:48:93:3e:10:70:0b:12:99:f4:a9:21:90:
d7:28:59:4d:db:b2:af:73:5d:30:89:47:8c:eb:e4:
2b:b0:41:23:07:fb:7a:ef:f3:73:90:24:43:75:67:
bc:59:69:f5:70:14:90:e3:d0:ea:d1:18:c4:93:a1:
53:9d:db:fe:b9:9b:30:3e:00:4a:46:e9:96:5e:4a:
34:d5:4c:08:3f:0b:fb:ea:9d:27:4c:9a:35:5a:f9:
c6:91:41:a3:92:a8:6b:b1:bb:39:74:67:a9:d5:2f:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:14:69:F4:E7:E3:61:AD:40:7E:41:64:7D:4B:50:21:28:65:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91566B0DB1411EFAAC23089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ed:3d:b8:f4:60:60:13:c6:ee:fc:da:76:7d:b9:98:42:fe:
a1:b3:31:67:3c:86:c4:ce:f6:44:f4:f2:ed:94:de:b1:de:15:
cd:bf:0e:c8:06:54:c2:17:00:0f:84:53:7a:0d:b6:c0:09:29:
fe:0a:b8:76:bb:77:94:69:d6:cf:10:fd:5b:26:bd:10:a7:61:
c0:4a:6d:1e:47:88:82:f4:96:37:d6:a0:10:94:a2:7d:e9:36:
a7:b4:a8:2c:6a:09:a8:88:76:2d:61:5c:a9:77:06:81:65:16:
38:18:06:27:1d:f0:7c:0c:de:80:cd:b2:02:04:da:f8:9d:50:
c8:73:e7:77:65:ee:cc:c5:4d:70:59:80:c0:82:b1:b2:33:fe:
cf:9a:b8:3e:96:e2:67:64:ab:85:5a:3b:31:60:43:66:6e:a6:
9b:6d:b8:34:30:7b:44:d5:8b:e9:ba:79:06:e4:a3:03:57:b3:
54:af:88:d4:2c:5d:d6:c6:2a:ff:c0:28:66:17:9a:15:2d:f8:
75:91:8d:e7:84:2e:64:46:ea:2d:c6:58:99:4f:bc:ea:79:b5:
13:28:29:a6:1b:9b:01:c3:0a:f8:e3:c7:7f:e7:22:8a:81:05:
9f:57:62:50:00:64:14:65:c5:68:3d:44:f7:43:75:ed:e4:53:
4e:ae:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:45 2025 by rpki-client