Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECCC9ECEC36011EF9C450585762E951A.roa
File: ECCC9ECEC36011EF9C450585762E951A.roa (raw, json)
Hash identifier: jx+7zoAkCXlGtM7a1gpzUN6qTAlJbL+pY2MnnOP49GE=
Subject key identifier: AA:C2:D2:28:4D:B5:E1:81:89:98:96:64:FD:D6:4D:6A:28:22:F9:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012650
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECCC9ECEC36011EF9C450585762E951A.roa
Signing time: Thu 26 Dec 2024 08:10:53 +0000
ROA not before: Thu 26 Dec 2024 08:10:49 +0000
ROA not after: Fri 12 Dec 2025 08:10:49 +0000
asID: 984
IP address blocks: 154.91.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75344 (0x12650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:10:49 2024 GMT
Not After : Dec 12 08:10:49 2025 GMT
Subject: CN=676d0f8d-a438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:b9:65:60:b5:89:93:0f:94:9e:1c:ba:e2:
99:e6:c2:8e:bf:ee:01:6d:e9:2c:31:59:f0:7f:c5:
c1:ed:40:5b:db:b1:8d:ef:ff:50:2e:6b:af:11:d1:
b3:30:fe:e1:46:01:6d:0f:f5:be:78:1b:4c:38:a3:
5f:37:e2:e8:70:7a:c0:d5:3f:4a:13:5c:c0:9f:b1:
07:12:0c:15:95:6e:42:73:ff:87:89:f6:2d:ad:f3:
db:cb:b2:74:ed:4a:f6:3b:6f:97:61:21:78:08:5b:
27:83:1b:43:26:0a:d3:18:7a:73:a5:00:10:d1:02:
6b:f0:92:b0:b1:db:54:18:e3:b7:98:c1:f3:04:17:
82:2a:1d:d9:a9:12:60:51:8f:bc:99:fc:05:34:d2:
ab:76:14:22:85:09:c5:05:a1:c1:05:88:7f:17:67:
94:7f:e8:c6:ff:11:96:8b:29:69:62:f4:ea:77:c1:
27:58:20:f4:2c:51:a7:ae:d6:32:7d:c9:86:49:e0:
11:86:0e:aa:f7:81:2d:7c:0d:01:83:fb:70:9c:b0:
0c:26:9f:a9:89:16:e1:69:46:e9:f0:48:85:87:c1:
1a:a8:eb:b2:54:e1:fb:66:8e:14:60:25:c5:7a:c5:
b8:7a:6d:09:fa:0e:ba:8b:40:be:af:bc:ba:7d:5b:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:D2:28:4D:B5:E1:81:89:98:96:64:FD:D6:4D:6A:28:22:F9:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECCC9ECEC36011EF9C450585762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e4:34:34:57:50:f2:d6:df:3d:f0:f3:4a:ee:25:d4:7c:7b:
d4:ce:aa:f0:0b:d4:2e:3f:4b:12:84:04:2e:de:4a:e7:41:65:
62:15:eb:14:71:49:62:8d:4e:23:a2:39:02:67:49:6a:d8:8c:
7a:a6:3e:1a:49:c4:21:7c:e7:cf:a0:84:43:5f:b0:31:20:0c:
a0:e8:ed:48:b7:8a:f1:2f:8a:3f:3d:c4:7e:f7:6b:7a:1a:51:
fb:26:e2:e2:e0:0d:7a:c2:db:e2:7a:dc:68:88:e1:ea:af:5e:
e2:6f:03:b3:c3:ec:66:56:8e:9f:d2:ce:34:79:ce:d7:26:88:
75:16:ae:e8:65:8e:33:77:55:c2:9e:3a:0f:76:65:5c:fb:ae:
eb:7f:3f:f2:07:84:e7:5e:2f:de:c7:09:b1:d2:e8:86:a9:7f:
17:ba:7b:d3:cd:ec:12:90:63:3e:ea:a5:f8:91:8a:0a:28:1b:
b1:61:79:b3:ca:fa:21:e8:74:4d:65:dd:7b:04:65:5e:83:a3:
89:27:61:c8:00:cf:f7:36:c8:2f:07:62:d1:4c:1c:8a:07:90:
e0:61:62:bb:b2:a4:44:e1:a0:d9:76:03:ea:78:4d:0d:72:01:
64:ce:1e:78:a5:40:43:7d:51:17:93:53:4d:ae:82:1f:d0:0f:
08:9f:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:44 2025 by rpki-client