Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D12598BA2511EFB3597642762E951A.roa
File: F4D12598BA2511EFB3597642762E951A.roa (raw, json)
Hash identifier: aTbMkZNgyh+Q7uG845LDuyuzRA/bYsgIe4dTdcPT1gA=
Subject key identifier: B6:6B:27:F9:4B:2D:0F:19:09:4E:03:9C:AA:38:52:16:4F:35:C8:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D12598BA2511EFB3597642762E951A.roa
Signing time: Sat 14 Dec 2024 14:16:06 +0000
ROA not before: Sat 14 Dec 2024 14:16:02 +0000
ROA not after: Thu 18 Dec 2025 14:16:02 +0000
asID: 40065
IP address blocks: 154.197.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72524 (0x11b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 14 14:16:02 2024 GMT
Not After : Dec 18 14:16:02 2025 GMT
Subject: CN=675d9326-8f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:1a:bb:97:ef:0f:03:75:cb:aa:60:35:99:
d7:86:73:c6:1b:30:c8:53:18:87:e2:cc:ce:40:62:
1c:6d:76:19:a3:fd:e7:40:21:55:42:8a:ce:c2:ec:
1e:18:86:66:d9:5f:d8:bb:be:9a:3d:be:8d:f9:9f:
bb:d8:75:de:6f:94:ab:06:0a:f0:7d:cd:8a:1b:c7:
6f:a6:a2:fd:74:1a:fb:74:3a:26:ba:61:c3:3d:dc:
be:08:99:4d:b9:8f:82:16:6e:e5:92:6c:70:d2:7e:
f7:97:1b:fe:a8:75:16:35:5c:19:19:d3:49:93:67:
9b:f6:b7:1f:09:f0:ac:64:31:41:4f:7d:08:d4:3f:
e5:a3:a7:03:0f:0f:e8:46:ff:ad:28:44:5c:0b:c9:
81:65:9f:19:8e:c8:89:46:c0:1a:14:57:dc:bd:6e:
fa:9c:5d:b3:7c:41:9a:ed:e4:9e:5b:0e:e1:a9:4a:
9d:b9:90:54:4a:84:d7:25:66:fe:6c:d9:ad:7c:bb:
b9:37:71:00:73:bc:fd:29:13:80:ac:82:cc:0d:cc:
1e:01:35:38:ec:ed:da:84:e3:25:e9:b5:39:3c:cb:
42:1e:fb:be:23:ff:93:39:29:72:0f:51:b9:62:bc:
0b:bc:17:96:8e:65:1f:9e:2d:90:28:3c:55:98:f4:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:27:F9:4B:2D:0F:19:09:4E:03:9C:AA:38:52:16:4F:35:C8:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D12598BA2511EFB3597642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:41:af:82:b4:58:cc:12:37:3f:92:5d:76:9b:e2:1e:1d:d9:
45:32:54:21:dd:7c:eb:8c:2f:03:2c:12:d7:9c:07:7e:34:ce:
eb:9c:eb:5a:9a:d4:bc:b7:60:a6:30:bc:84:49:43:93:55:bd:
13:7a:42:fd:06:20:e9:5d:dd:d1:07:5e:82:4b:91:36:3f:b2:
0b:8f:df:c6:51:c4:ac:e5:28:a0:43:18:9c:7d:fa:2f:1c:4a:
89:d6:84:7b:df:e4:bb:6e:87:a8:b9:90:7e:29:2e:9b:b2:ec:
eb:e8:bd:1d:69:c9:bd:5a:13:39:a7:f6:0c:cb:65:8c:ba:26:
4c:a2:3d:dc:b4:f0:57:12:5d:ba:b3:99:29:65:b5:be:1b:5a:
df:ec:6a:7c:0f:40:2e:6f:53:9c:11:bd:aa:e0:5d:70:a8:b7:
f8:b9:83:c3:10:4e:35:b7:24:8e:33:af:1d:bc:50:6e:78:b3:
7e:00:09:8b:81:93:8b:a1:dc:60:dd:0c:ec:39:cb:81:72:6f:
c2:5d:3c:d2:19:58:d3:b5:1a:57:ce:bd:08:fe:76:d0:b1:8a:
a0:c8:90:f9:17:97:a0:57:e8:1e:2b:ad:0f:df:ff:bd:fd:b7:
ac:09:b6:19:a7:12:4d:9f:e7:f2:26:ee:28:f6:70:ff:86:e8:
75:3d:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:48 2025 by rpki-client