Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8881DDECDD7011EFA011B274762E951A.roa
File: 8881DDECDD7011EFA011B274762E951A.roa (raw, json)
Hash identifier: 9v0edbQDLHcq+GBBcDneCkGTgk+k0SnDq8/HauJ7UNU=
Subject key identifier: 8D:50:5F:5B:DC:7C:62:7B:01:EC:68:C1:23:3A:AA:A8:88:A6:53:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8881DDECDD7011EFA011B274762E951A.roa
Signing time: Tue 28 Jan 2025 12:08:07 +0000
ROA not before: Tue 28 Jan 2025 12:08:03 +0000
ROA not after: Wed 12 Feb 2025 12:08:03 +0000
asID: 5065
IP address blocks: 154.94.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85248 (0x14d00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:08:03 2025 GMT
Not After : Feb 12 12:08:03 2025 GMT
Subject: CN=6798c8a7-3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:14:ff:42:d1:27:e1:26:84:c2:0d:78:df:
d7:e7:cf:a4:0d:92:e8:c2:60:71:db:43:b8:69:51:
3a:00:f4:8e:98:80:f3:7b:76:6c:0e:1a:f6:a6:50:
8a:4b:0b:ff:e3:d1:ca:6c:8c:ed:bf:43:2d:91:46:
3a:f6:42:21:08:06:0b:8f:75:07:4d:55:24:d8:a7:
a5:c6:1e:f7:4a:9c:d2:83:0d:ec:c5:e1:c8:8a:2b:
cf:6e:97:6a:8c:04:48:b6:76:69:4e:c7:92:02:bb:
a7:17:5f:e4:ef:e0:89:1b:85:58:eb:c1:13:1c:f2:
9e:e4:50:9c:3f:23:79:a2:b4:9e:17:9c:26:2a:89:
f8:c1:3b:0e:68:d7:e8:d2:80:f1:de:6e:9d:f2:ae:
13:5f:c6:95:03:ce:01:10:c4:4b:9b:98:8b:27:03:
3d:2f:de:63:ee:af:6e:22:af:a6:2c:1e:90:cc:67:
64:14:eb:30:79:c5:7e:cd:62:34:31:f4:12:7a:e4:
cc:21:08:ee:61:a9:70:d0:65:0e:d2:bb:45:37:8e:
ec:8c:da:c1:0e:1c:29:d4:a4:60:6f:d9:72:1a:55:
9d:86:33:a8:7f:ec:2b:46:25:88:f9:e5:16:82:f4:
72:e5:da:22:83:22:e8:d4:2c:65:d6:b1:19:f2:7e:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:5F:5B:DC:7C:62:7B:01:EC:68:C1:23:3A:AA:A8:88:A6:53:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8881DDECDD7011EFA011B274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d1:62:0a:cd:d8:c8:22:54:5f:c7:93:0e:64:0d:7c:54:7b:
03:45:c8:31:79:70:da:b6:96:5f:77:fd:d4:a8:8f:18:55:aa:
61:35:1b:c8:31:79:e1:52:3e:13:a1:7e:f5:47:ce:9f:60:4b:
d1:77:01:72:c7:ff:8b:f5:08:e3:97:52:76:e3:fe:da:26:bc:
cd:80:3b:3b:68:bf:2a:8f:d6:65:d2:f9:a8:85:19:7d:a2:26:
45:62:8d:43:a0:42:ad:be:9c:4e:78:b0:d3:eb:49:93:8a:6e:
ce:f5:2d:89:61:de:69:14:bf:11:68:58:04:d1:63:df:48:61:
c3:d7:26:2e:6c:5e:b1:c0:91:a7:39:08:ed:45:04:c6:af:24:
b2:91:ec:0a:bb:3f:f2:a1:56:fd:b7:74:38:f4:0e:1d:1b:9f:
af:20:bf:b5:be:d1:27:7d:b1:43:54:e4:44:33:4e:45:70:df:
5c:5e:3a:8f:11:65:23:97:8d:6f:dd:ae:22:84:60:88:18:f8:
1b:00:06:2d:4e:34:5e:6d:6c:ed:54:28:e5:d0:af:2f:d2:32:
86:e3:b1:64:7b:f4:9b:95:a8:22:56:79:ab:37:b9:6f:00:d7:
8e:51:c7:3e:93:54:01:52:19:da:b9:12:24:80:3c:e3:aa:0f:
b6:1b:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:20 2025 by rpki-client