Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7948BA6C53611EF84B3F9AB762E951A.roa
File: E7948BA6C53611EF84B3F9AB762E951A.roa (raw, json)
Hash identifier: +CtZR+Iufn8ii6ge21XXgLSNiLVs83FrAf8YAZ/mFaM=
Subject key identifier: 81:7B:D4:78:40:02:35:CC:72:9E:94:26:B7:32:DC:34:F9:2F:0B:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7948BA6C53611EF84B3F9AB762E951A.roa
Signing time: Sat 28 Dec 2024 16:15:08 +0000
ROA not before: Sat 28 Dec 2024 16:15:04 +0000
ROA not after: Fri 12 Dec 2025 16:15:04 +0000
asID: 984
IP address blocks: 154.204.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76831 (0x12c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:15:04 2024 GMT
Not After : Dec 12 16:15:04 2025 GMT
Subject: CN=6770240b-4bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:fc:9f:18:28:a4:c9:8e:5a:75:06:e9:02:
ed:56:c4:0a:59:0d:14:a1:89:b0:aa:b7:2c:8e:d9:
06:22:b9:df:fc:dc:24:c6:88:22:cd:fd:a0:89:84:
fd:ed:cd:20:78:07:99:7d:18:78:80:68:1a:c6:8b:
28:69:4d:53:c0:fb:aa:2a:65:e3:b1:1f:d1:1e:5e:
81:51:1a:b7:56:78:a2:0c:4a:35:69:b8:8b:0d:39:
62:6a:20:18:42:82:be:96:7c:c1:fc:ff:53:5e:6b:
fb:d1:73:3b:d3:c0:f8:28:07:e3:78:34:b8:e6:cc:
d9:89:67:15:f9:05:c2:73:41:b8:7f:21:99:a5:f6:
cd:2e:79:dc:42:7d:e8:1e:62:92:2a:3a:bb:54:a1:
7f:82:1c:d2:50:61:92:34:d7:a7:92:b8:4f:96:18:
e9:3a:dd:aa:1b:e6:e4:d6:95:2e:a4:50:f7:95:64:
1a:0e:1c:d9:22:43:14:d6:a6:46:f0:03:d5:5a:7c:
2a:9f:fd:ef:f8:d3:8b:56:03:cd:9d:91:f7:5a:c2:
73:40:0c:93:8f:79:8d:cf:4e:c1:13:0e:1e:5a:7e:
4a:73:53:66:05:d2:f9:b2:5e:54:0c:2d:88:4c:3d:
f8:ae:31:df:c6:e4:67:14:58:71:d5:c1:cf:72:d2:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:D4:78:40:02:35:CC:72:9E:94:26:B7:32:DC:34:F9:2F:0B:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7948BA6C53611EF84B3F9AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9c:a0:e2:f1:e1:85:55:ac:48:14:4b:c0:1d:24:53:a2:b6:
e7:24:98:7f:65:9c:d9:2a:25:00:14:1f:ff:4a:98:36:8b:50:
42:12:96:16:7e:db:80:97:69:38:43:16:25:63:2f:d6:03:af:
57:cb:02:de:70:62:9a:b3:16:bd:48:b3:6d:90:dc:8d:c2:12:
58:bb:ee:63:29:65:c4:e2:c3:d2:c9:61:3c:29:10:02:6b:56:
6a:81:e5:29:48:de:ef:8b:a6:d9:5d:49:0d:e5:7f:88:7c:91:
c8:5d:33:8c:86:75:e4:3c:9c:fa:5c:a5:27:1e:32:d9:a3:5f:
d2:2f:94:60:8a:a0:f2:93:69:b2:e7:90:20:0f:86:3d:58:d6:
d3:5d:1e:2c:97:b9:33:a9:3b:f9:67:23:9e:b7:b3:88:5b:dd:
26:0f:e9:59:25:d8:c2:5e:6d:4b:3c:02:7a:f9:bf:5c:aa:76:
96:ba:d3:5c:8b:18:80:a4:b0:6c:61:51:5e:61:92:ef:ad:07:
ce:5d:59:8c:33:9c:80:6b:f6:e2:51:c7:83:38:33:7d:03:4f:
96:4d:63:ac:01:dc:b0:02:07:c3:be:d6:8a:fc:e6:82:4b:fa:
25:02:42:10:bf:9a:3a:e6:98:82:df:e7:c1:a5:37:f3:a6:25:
04:f8:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:08:23 2025 by rpki-client