Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E45D92C5E511EF80296F82762E951A.roa
File: E3E45D92C5E511EF80296F82762E951A.roa (raw, json)
Hash identifier: Lt4cZeMQAjYCJxOWzWdLdsfqw51HXQuTNJmYqCIVi1Y=
Subject key identifier: 9A:3C:44:21:14:E2:94:A1:C7:78:FC:96:CA:47:7D:86:08:16:27:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E45D92C5E511EF80296F82762E951A.roa
Signing time: Sun 29 Dec 2024 13:07:43 +0000
ROA not before: Sun 29 Dec 2024 13:07:40 +0000
ROA not after: Fri 12 Dec 2025 13:07:40 +0000
asID: 984
IP address blocks: 154.210.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77176 (0x12d78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:07:40 2024 GMT
Not After : Dec 12 13:07:40 2025 GMT
Subject: CN=6771499f-bc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:bf:4d:4a:0f:e1:15:8d:ab:a7:c1:67:ed:
fe:7c:b9:ef:9d:39:3c:4c:5d:12:d0:81:be:6c:f2:
4d:ff:70:41:29:be:8f:a8:92:58:77:41:3d:fd:05:
2f:0b:8b:59:f8:bf:14:a8:fb:82:86:d7:a5:88:f6:
af:31:25:d7:2d:b7:60:05:c6:76:8d:e5:6a:bd:55:
8f:22:5a:75:e2:c3:7e:ee:1c:6a:7b:7b:8d:88:9e:
b7:a7:17:e9:49:89:00:d0:fa:5d:99:8c:3b:28:f7:
7e:17:9e:e1:a2:79:1b:a6:54:18:e7:87:ef:76:7c:
2d:a0:6c:cc:d1:e2:67:8c:a2:2f:c2:75:ed:d3:fb:
c8:44:1c:3b:f1:d8:d8:2c:89:2c:ca:58:88:61:b6:
e6:1b:85:b4:ef:0f:71:1e:f9:8f:18:43:9b:e0:ec:
6c:48:3e:51:56:fe:2c:bd:e8:9b:62:fd:cd:88:f7:
4f:74:c1:c2:b8:08:3c:08:1f:c8:a8:33:6b:91:d5:
dd:a1:2b:99:46:85:8c:6f:89:88:52:a6:b0:df:6d:
b7:4d:35:80:0e:99:49:32:12:5a:70:fe:cc:9d:a8:
86:12:40:94:d5:24:e1:26:ac:dc:4c:a7:d2:3e:c8:
57:a1:c6:67:5a:65:5e:a6:bf:fa:a7:8b:25:46:5d:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:44:21:14:E2:94:A1:C7:78:FC:96:CA:47:7D:86:08:16:27:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E45D92C5E511EF80296F82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.126.0/24
Signature Algorithm: sha256WithRSAEncryption
68:66:ac:2c:63:6c:fa:70:eb:52:33:fa:fb:77:a7:a6:d1:97:
f0:7f:4e:76:10:09:d1:20:57:41:22:0e:0c:e3:d9:82:a6:8c:
c7:63:e0:55:e2:42:a8:71:e4:44:cb:fb:94:0d:61:be:4c:f5:
83:23:c1:1c:3c:28:b9:01:60:bf:3a:0d:78:c3:8a:51:0f:39:
52:2f:9e:60:a1:16:14:14:9f:59:73:19:ce:4a:d5:88:96:88:
67:ed:93:72:16:e7:b9:f5:86:51:ff:e7:84:57:e9:d0:d3:bf:
05:15:2b:ab:9b:0c:02:c7:18:be:af:9b:f0:07:35:cd:95:8e:
82:8a:99:35:6d:8b:35:e3:35:4d:22:ca:06:04:34:9b:56:29:
a8:5c:ca:4a:ec:84:9f:7c:4a:c2:bd:0d:82:91:3b:5b:40:a8:
90:11:c8:65:c2:ee:81:43:aa:88:5e:17:01:4e:2a:8d:3f:8b:
83:5f:c2:df:c1:c5:cf:9c:c6:7f:c2:bb:49:26:0b:f3:69:4c:
2c:97:d0:1b:19:35:a6:ed:d7:9c:47:69:da:57:73:e7:be:eb:
70:4d:0e:a7:ad:f1:26:be:cb:db:30:93:81:93:09:a0:78:61:
b1:e1:39:6a:7a:5f:52:21:af:86:08:d3:76:e6:47:b3:f0:65:
20:7b:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:57 2025 by rpki-client