Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA76B10B3D111EF95BEEB6F762E951A.roa
File: 8EA76B10B3D111EF95BEEB6F762E951A.roa (raw, json)
Hash identifier: I/97uZUtBY5zL1mMmTst8b5QEOOL+NLLmo04OjI/4Hg=
Subject key identifier: 0B:EC:90:CB:2D:68:49:46:9F:17:A3:08:2E:7C:42:E2:60:F7:E2:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA76B10B3D111EF95BEEB6F762E951A.roa
Signing time: Fri 06 Dec 2024 12:56:49 +0000
ROA not before: Fri 06 Dec 2024 12:56:46 +0000
ROA not after: Mon 10 Mar 2025 12:56:46 +0000
asID: 398478
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71906 (0x118e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:56:46 2024 GMT
Not After : Mar 10 12:56:46 2025 GMT
Subject: CN=6752f491-1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:04:d2:bc:53:aa:59:9a:08:69:72:74:de:
24:88:c4:18:98:05:94:57:f7:1a:12:f7:f9:6e:e0:
64:8a:59:0f:0f:b2:93:26:44:9b:cc:9d:9b:f8:3e:
12:12:21:1a:87:b6:4c:27:64:50:7c:9b:e1:74:eb:
e6:4f:00:c8:ed:c8:bd:9c:e0:9c:95:e3:06:f7:88:
54:2d:84:92:d9:da:59:dc:ed:db:06:b0:c5:c9:bd:
88:88:aa:21:df:e1:53:b8:7b:ae:ed:4c:91:94:17:
e5:1e:14:5c:ef:ea:c0:1c:15:6a:8a:36:b4:8d:7a:
09:df:17:df:02:4c:70:48:a3:1c:6f:e0:8a:e4:52:
91:a3:12:f8:8b:8d:cf:83:fc:0a:9c:77:3c:91:3e:
ad:d8:cd:cf:08:0e:a1:4a:a8:12:b4:d9:61:91:81:
14:cd:e6:eb:9f:88:c3:8b:59:34:ac:23:86:25:03:
82:6b:06:3d:62:63:b8:3c:ed:6f:b8:52:d8:63:f7:
26:8d:d2:3e:ce:00:b4:87:aa:25:f3:9e:49:ae:7a:
1b:7e:7b:c7:96:52:bf:42:3d:20:6d:3f:a0:87:da:
a2:2a:32:d9:a2:ba:02:54:ac:01:52:ae:e6:20:c1:
17:fe:6f:bc:7b:4d:2e:d5:c3:25:d0:f4:bf:4c:ea:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:90:CB:2D:68:49:46:9F:17:A3:08:2E:7C:42:E2:60:F7:E2:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA76B10B3D111EF95BEEB6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
49:8d:00:89:72:97:1a:c9:db:c7:48:a4:18:db:97:01:e9:d0:
23:83:09:cb:4f:46:32:ef:ea:64:dd:52:99:06:4c:aa:21:a1:
9d:12:a1:db:0b:fa:7e:c2:cb:6a:e4:cf:fe:31:d6:9c:c9:24:
e1:fe:85:fd:04:f2:bf:70:aa:cf:c3:31:77:a9:e6:ac:13:f4:
5a:fb:50:32:6e:48:84:d9:29:f9:7b:45:6b:64:ac:67:30:56:
49:4c:c6:f4:94:6f:ad:f9:15:9f:2d:91:45:1e:94:59:19:34:
5a:c2:48:fa:de:d0:9b:70:a4:70:ab:18:ab:d1:3b:5a:3f:34:
98:30:fc:be:74:46:d9:85:2e:2d:97:11:49:9a:82:71:13:5d:
eb:ec:7e:a0:07:5f:52:bc:b8:39:d9:69:91:3a:e1:a6:17:55:
eb:7d:e8:97:30:ec:ab:b9:c9:9a:39:06:06:8a:e9:3f:5f:74:
69:d2:a2:82:6a:5b:c1:62:fe:9f:7d:68:96:00:f7:8e:f8:d3:
a4:e0:8b:da:8e:4c:18:f2:7b:15:ad:71:58:9a:e4:1d:a5:03:
57:99:3a:90:92:64:f8:7e:85:6b:79:85:c4:ce:b0:0a:8d:d7:
84:3d:67:8d:a8:70:1f:47:e3:10:c4:3d:3e:44:a9:e9:72:ba:
89:87:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:18 2025 by rpki-client