Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/867794EAC35F11EF936A0A7C762E951A.roa
File: 867794EAC35F11EF936A0A7C762E951A.roa (raw, json)
Hash identifier: ZUaSLJFvXnGda7DqcWFyzDf+GFL43RXyBmVXTKTuDwM=
Subject key identifier: D1:06:61:DA:BB:A1:02:E8:63:E7:DA:06:DA:1F:48:77:7D:FA:E6:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/867794EAC35F11EF936A0A7C762E951A.roa
Signing time: Thu 26 Dec 2024 08:00:52 +0000
ROA not before: Thu 26 Dec 2024 08:00:48 +0000
ROA not after: Tue 04 Mar 2025 08:00:48 +0000
asID: 138915
IP address blocks: 154.93.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75314 (0x12632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:00:48 2024 GMT
Not After : Mar 4 08:00:48 2025 GMT
Subject: CN=676d0d34-20e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:3e:0e:03:29:47:68:2f:e9:66:47:b6:29:
7b:f8:f9:87:5a:44:46:d7:f9:08:a8:42:7e:74:64:
d8:3f:ca:a7:20:6a:a8:e5:f2:04:95:de:90:29:09:
21:09:af:41:4f:12:f6:fb:e4:24:a5:7f:d9:a4:35:
6e:73:2d:4c:c8:35:28:79:f6:dc:45:9f:fe:57:6f:
7c:12:c6:88:21:6c:f6:c3:bb:73:d7:9f:33:c7:20:
8a:e1:c4:dc:c8:b9:f4:3a:30:11:55:44:c3:1e:93:
f4:05:99:a5:55:12:7d:f1:c1:b2:e3:30:eb:e1:27:
3c:8d:9e:0b:e6:6d:7b:2e:5d:61:b4:40:d5:e5:74:
c7:06:da:24:3b:f7:32:35:ec:9a:f6:d8:f7:c6:a2:
5b:9c:f4:3c:65:e2:05:b1:29:d5:12:b7:2e:b9:b6:
98:8a:a5:e8:d1:02:0e:7e:9d:33:59:a3:f3:5a:56:
58:d0:c2:75:bd:7f:2a:f3:75:d1:c8:45:81:65:f5:
43:ba:bd:6a:89:3e:06:2b:74:e0:56:bf:e6:3e:bb:
49:7d:8a:6b:22:66:6c:a2:cf:04:18:55:40:34:34:
b8:ee:97:8d:33:ca:ba:ef:b1:a1:38:13:6b:68:ae:
c7:84:6f:cf:96:40:4e:35:1c:57:86:33:0c:ca:b2:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:61:DA:BB:A1:02:E8:63:E7:DA:06:DA:1F:48:77:7D:FA:E6:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/867794EAC35F11EF936A0A7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ad:96:2f:13:4b:3e:56:1f:18:bf:8a:90:eb:a2:6d:1e:2e:
cd:bc:94:f6:dd:ce:10:5b:b3:8f:fe:0d:4d:aa:98:e3:31:5a:
10:f9:71:90:b6:04:d1:eb:55:2a:7e:3d:e2:27:3e:11:f6:d6:
21:fd:9d:44:76:5d:57:bd:18:89:8f:fc:86:9f:40:8d:a5:6f:
47:9e:87:04:44:98:f5:c3:88:64:b1:bd:55:d8:93:fa:a5:df:
50:02:8a:e9:6d:f9:0e:65:0f:a1:11:64:aa:16:30:48:79:1a:
35:c0:a9:5f:93:17:9a:54:a8:be:3d:05:66:10:1a:d6:47:88:
c7:a6:48:fe:35:05:c8:0e:6d:45:29:72:11:77:c9:c8:e9:44:
d2:fc:ad:5f:e3:ae:56:af:ca:5f:7f:55:68:11:32:ca:ba:9f:
a7:42:75:d6:4e:5f:e6:9f:5d:4f:0e:a7:4f:88:3e:5d:62:60:
1c:6b:29:31:a6:1f:ef:38:7b:f5:6d:86:ff:c5:75:35:67:46:
f6:68:a3:e4:38:4c:61:06:19:54:28:1d:d4:18:7c:fc:74:0d:
f6:5d:ca:84:87:ef:74:e8:f0:64:b7:73:ba:7f:d2:f8:b7:b3:
17:02:64:ea:72:cb:2d:0c:43:da:00:7d:b7:19:34:06:1d:4a:
83:f5:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:22 2025 by rpki-client