Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2ECFC4C36C11EF89C7B851762E951A.roa
File: DA2ECFC4C36C11EF89C7B851762E951A.roa (raw, json)
Hash identifier: ULEsCgdA3+yHQBKCJNdGhUxiZVOTZEBBExtZCqy9mTE=
Subject key identifier: D0:B0:73:7C:DE:FF:96:6F:01:37:9B:C0:5F:E9:29:2C:F7:51:7D:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2ECFC4C36C11EF89C7B851762E951A.roa
Signing time: Thu 26 Dec 2024 09:36:16 +0000
ROA not before: Thu 26 Dec 2024 09:36:12 +0000
ROA not after: Sun 12 Dec 2027 09:36:12 +0000
asID: 17561
IP address blocks: 154.94.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75518 (0x126fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:36:12 2024 GMT
Not After : Dec 12 09:36:12 2027 GMT
Subject: CN=676d238f-bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:f2:20:ae:64:17:2e:3f:8f:eb:6e:0c:f5:
3d:99:fb:23:30:de:a4:77:b8:9a:09:83:a2:16:97:
8b:f6:84:07:dc:9e:b5:25:d0:26:f3:02:df:85:f7:
e9:67:f8:d1:5a:f9:48:d9:6e:20:79:3b:c1:dc:96:
6a:fb:42:76:bf:8f:3d:0d:d9:b6:7b:92:d5:b2:9e:
23:47:5c:29:40:c7:9c:93:cc:bc:0f:52:aa:30:1e:
4b:85:0f:ba:0e:2b:91:af:25:94:fd:b4:b1:c5:b8:
fe:42:f6:c6:4c:3d:a0:54:6a:15:6d:93:ba:20:8a:
42:09:29:a1:7b:1c:4b:a2:9b:a3:86:89:55:6d:92:
9c:19:4a:85:fa:ef:c3:0b:76:14:4f:8f:d9:af:e4:
c4:a0:c4:54:0b:da:fd:0e:62:c5:4f:73:00:81:9b:
40:3d:fc:02:22:f6:e1:43:13:45:7b:a2:00:f2:47:
69:71:0e:a0:29:24:e3:21:9c:4b:05:f6:b6:c3:76:
d0:44:6c:e2:8c:90:cd:31:4f:ab:b6:6d:a4:e5:b2:
2a:40:09:81:c2:78:54:f9:0f:40:d2:dd:d8:af:c5:
aa:5d:07:5e:b9:4f:fb:50:79:6f:2e:af:50:88:32:
a3:46:65:bc:80:40:ea:d7:c0:f7:2e:8b:4e:53:9d:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:73:7C:DE:FF:96:6F:01:37:9B:C0:5F:E9:29:2C:F7:51:7D:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA2ECFC4C36C11EF89C7B851762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b5:4d:15:77:88:20:e7:31:38:c4:76:42:3c:87:1e:49:11:
2e:67:3b:cd:2a:fb:f2:65:97:58:e9:fe:ff:1d:7a:bd:25:c8:
73:ed:fc:4b:5e:d9:5b:91:40:8d:80:46:41:ae:b8:2b:0b:2c:
ef:cd:e7:78:d1:96:01:d9:c7:0a:9c:ea:3e:85:6e:4e:f7:73:
18:e2:7d:7f:fd:47:d4:76:3d:56:2c:1b:9b:66:86:55:eb:e7:
1a:6e:97:b3:08:6e:64:ff:27:b0:34:d0:4c:67:3f:49:c4:3d:
14:a0:c1:8a:32:74:7f:6d:91:97:a7:4c:ba:95:54:87:1e:53:
ac:02:d2:97:98:01:d9:55:3c:2f:0e:69:01:69:ad:b5:ec:f6:
d8:60:0c:11:ea:a4:f0:23:17:b6:bc:fa:48:7f:88:92:ca:af:
e3:3d:6f:72:07:b4:f2:09:e5:e1:5c:05:eb:80:6c:ad:7c:06:
00:03:be:23:57:f2:f5:6f:4c:02:17:23:0e:ec:85:f4:f0:38:
ed:7c:a6:40:29:db:01:2b:2e:30:22:cf:c6:2c:80:5a:47:c9:
c8:b3:2f:da:40:b8:1c:93:3d:8e:36:a9:27:37:73:0b:4e:72:
94:aa:ae:4a:39:ce:86:78:7d:68:bf:1f:56:c7:36:63:32:0f:
2e:06:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:43 2025 by rpki-client