Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE758858C38311EF85CE0A61762E951A.roa
File: EE758858C38311EF85CE0A61762E951A.roa (raw, json)
Hash identifier: 5j/22LR1WkLnigBlEH6+Li/AtYlZmEknZC0s/qnQhE8=
Subject key identifier: B7:53:3C:01:FA:6A:BE:04:78:40:32:02:26:19:F3:F4:74:2D:65:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01277C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE758858C38311EF85CE0A61762E951A.roa
Signing time: Thu 26 Dec 2024 12:21:28 +0000
ROA not before: Thu 26 Dec 2024 12:21:24 +0000
ROA not after: Fri 12 Dec 2025 12:21:24 +0000
asID: 984
IP address blocks: 154.94.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75644 (0x1277c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:21:24 2024 GMT
Not After : Dec 12 12:21:24 2025 GMT
Subject: CN=676d4a48-9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:a1:78:cc:0a:46:56:59:03:ad:3e:64:4f:
0a:9c:be:e7:2b:5a:49:0c:af:b3:65:9a:c5:98:a8:
f3:fd:da:64:9e:d5:c7:42:e7:98:ad:11:5c:fc:d1:
d5:c8:f5:ec:50:7a:8b:f3:93:be:91:7b:20:8d:93:
9d:5c:5f:4e:d7:21:60:43:72:f9:6c:0e:5c:6b:71:
48:da:4c:63:41:33:5e:43:55:8e:e4:61:ee:25:41:
8f:0d:94:ff:dc:75:ff:b0:05:b3:ab:a3:fa:e5:8b:
d4:ae:b7:02:75:15:79:73:72:da:48:03:92:7c:23:
3e:4c:ed:a4:dc:b3:44:c9:3f:47:ad:4a:b4:11:c6:
d4:f5:1e:93:cb:3f:f5:d4:a9:f4:2b:1a:d6:8a:5f:
4b:63:03:5f:3b:a5:26:40:b4:c5:64:d8:60:23:7c:
77:7c:b5:15:e1:b8:ce:f6:59:ef:90:35:42:eb:ba:
5f:bb:2f:67:eb:69:c5:fd:62:3d:5c:e8:f5:55:71:
08:52:e2:d0:23:46:51:97:03:bb:56:d3:5c:b1:d7:
e6:c9:63:bb:1a:36:7f:84:f5:8c:95:2f:9d:c9:3e:
0c:d9:de:db:f1:c5:98:27:9f:0b:5f:a1:ac:e0:67:
54:6c:ae:0e:0a:02:57:7a:7d:5b:43:bf:a7:aa:01:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:3C:01:FA:6A:BE:04:78:40:32:02:26:19:F3:F4:74:2D:65:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE758858C38311EF85CE0A61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:73:4f:0e:cf:61:bf:2e:57:01:01:25:68:e5:cf:e2:09:35:
f2:92:f2:ff:d1:2d:55:30:c8:0f:4d:d3:0a:60:9a:f7:0e:0f:
2b:4b:06:5a:ed:f2:6a:ed:3a:65:a2:14:97:dd:9c:c9:19:ef:
b8:5f:80:81:1c:65:26:f9:6f:55:15:f5:33:c3:c0:91:0b:c7:
d8:ef:3d:15:3e:30:58:63:05:bf:ad:05:e6:67:61:3c:95:ff:
61:64:72:2c:57:11:7f:ae:83:63:f8:c9:3e:41:e0:93:0a:6c:
1b:64:67:62:d0:7d:a9:78:6c:b7:3e:3b:71:10:b4:d1:b8:32:
67:0a:dd:88:ec:26:da:22:c6:d6:8b:d5:40:8f:25:45:a3:0f:
e8:37:e7:df:8c:56:22:0b:b5:a5:94:73:62:d1:ed:89:55:70:
ea:10:d8:f5:84:bf:9f:ce:01:9c:86:10:27:b3:ee:d3:95:fa:
53:e7:95:12:df:d4:0d:e9:01:6c:d8:20:a3:b3:2a:21:1d:50:
e1:9b:53:91:87:05:3a:78:cb:1b:d5:24:f2:e4:e4:b5:da:dc:
bf:c8:a3:5e:43:e2:97:4a:26:79:f1:17:a4:e1:72:34:5e:cc:
94:08:d2:37:5e:bb:b2:f0:e0:3a:b3:73:ad:78:aa:9f:ba:a2:
1e:b5:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:20 2025 by rpki-client