Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93446FAC36E11EFAD53A05E762E951A.roa
File: E93446FAC36E11EFAD53A05E762E951A.roa (raw, json)
Hash identifier: /e7eWV25CatTgLi6ebyFriRwyR3g+mdzk5ldhiZ1oOA=
Subject key identifier: 74:04:83:E7:EA:3A:8F:72:8A:D3:B7:44:A9:12:6A:42:86:EE:06:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012714
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93446FAC36E11EFAD53A05E762E951A.roa
Signing time: Thu 26 Dec 2024 09:51:00 +0000
ROA not before: Thu 26 Dec 2024 09:50:56 +0000
ROA not after: Fri 12 Dec 2025 09:50:56 +0000
asID: 984
IP address blocks: 154.94.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75540 (0x12714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:50:56 2024 GMT
Not After : Dec 12 09:50:56 2025 GMT
Subject: CN=676d2704-19c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:07:82:16:7e:80:24:44:94:f5:48:f9:ed:
a8:05:a1:92:c8:b9:e5:20:a7:27:e0:11:7a:91:42:
81:9d:e6:a6:c8:0e:de:63:6c:e1:4e:8f:f0:89:6b:
50:2c:8e:f5:ae:21:fc:4b:34:42:fa:84:cb:5a:c9:
f4:1b:f0:3e:8b:e3:4d:c0:69:a1:18:65:6f:dc:ed:
85:56:1c:87:93:b3:f8:35:4c:bc:16:d3:c2:ca:1f:
cc:20:04:52:15:e6:ee:04:c5:6c:4a:db:7d:bb:ab:
62:dc:5e:2e:24:b3:7a:91:0f:8c:54:a1:2e:f2:a3:
93:c8:ad:73:f9:01:b5:34:77:19:5a:13:14:dc:de:
6f:e9:e8:17:5a:78:1c:94:77:f1:ce:27:27:b8:61:
81:c7:cc:79:e2:62:fd:69:6c:5a:3f:df:62:33:90:
be:22:cd:80:7c:a0:16:ad:25:c7:21:76:9b:05:8f:
93:cf:7e:32:47:b5:7e:8d:d5:b0:9f:4c:3f:6f:15:
1d:e9:c7:10:e7:c1:cb:5a:e8:b2:c3:e6:b0:64:7b:
0b:14:c0:97:cb:e1:5a:5c:46:52:59:54:79:c3:0d:
d1:60:c7:16:46:ed:96:75:05:74:80:f6:4c:60:a2:
9b:9d:1d:ce:b6:f3:02:ed:9c:bc:0d:54:28:2a:61:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:83:E7:EA:3A:8F:72:8A:D3:B7:44:A9:12:6A:42:86:EE:06:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93446FAC36E11EFAD53A05E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.161.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5f:dd:0b:8c:1b:84:aa:06:f1:1d:76:08:94:56:ec:46:4c:
08:cf:0b:8f:8e:c5:9b:26:e0:a2:d6:48:e8:7a:0f:24:2c:51:
84:9f:ee:a5:26:5a:99:5f:21:d5:e8:1c:0b:27:d5:4f:a1:fc:
78:ab:fb:6e:4d:5b:a2:26:8e:5e:5c:c6:3b:55:86:4f:c7:f5:
54:1e:41:59:9f:f6:d0:1b:99:53:9a:bb:fa:9c:0e:31:f2:e2:
2f:8c:dc:ca:7d:cb:2c:eb:d1:4e:a5:54:9f:b3:bf:2b:b1:c7:
68:31:0a:7f:31:39:32:bf:0d:35:2c:d6:c7:0d:93:2b:d8:fa:
3d:21:e7:93:9e:83:09:4f:6c:aa:62:06:b9:10:41:fc:dc:e6:
77:f3:8f:cb:c8:94:46:63:77:79:4a:53:94:c9:0b:73:3d:5a:
24:cc:f9:37:ae:19:ac:ef:45:a6:d8:49:0a:67:11:67:06:04:
b7:a6:43:ab:90:6d:d5:ee:9a:30:51:96:98:28:87:55:e7:40:
61:01:3d:18:69:8c:81:6e:ce:0d:b9:e5:aa:f8:d3:70:97:84:
b5:3a:b4:72:6b:f7:c7:01:0f:27:78:73:90:9d:12:ab:39:ce:
1d:b9:59:6c:c0:51:a1:d9:fd:6e:82:2e:cf:44:81:e4:bc:f7:
9e:72:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:53 2025 by rpki-client