Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9318BE28C36311EFBA6C4396762E951A.roa
File: 9318BE28C36311EFBA6C4396762E951A.roa (raw, json)
Hash identifier: gQrd0vsEg+iOLyk82Vu/liIGv4tPjIR4KG7LmsqyI1Q=
Subject key identifier: 64:9E:CF:00:D7:88:85:B0:46:9C:E9:EB:42:22:52:21:A4:78:F3:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012684
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9318BE28C36311EFBA6C4396762E951A.roa
Signing time: Thu 26 Dec 2024 08:29:51 +0000
ROA not before: Thu 26 Dec 2024 08:29:47 +0000
ROA not after: Tue 04 Mar 2025 08:29:47 +0000
asID: 138915
IP address blocks: 154.93.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75396 (0x12684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:29:47 2024 GMT
Not After : Mar 4 08:29:47 2025 GMT
Subject: CN=676d13ff-a2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:f8:be:c1:14:7c:14:5d:c2:80:bb:ca:b2:
ae:2d:06:cb:99:07:29:8f:f8:7d:1e:c2:a4:bb:1f:
ec:1c:aa:68:ac:b8:a9:b8:ef:01:50:5c:33:a8:96:
d4:83:a1:d9:66:78:f0:d4:fc:cb:0f:49:0e:a6:20:
8d:ab:b2:25:90:5c:4d:6e:dd:b1:dc:13:64:38:0a:
42:17:13:94:b8:fc:46:d8:b1:e0:37:3d:5a:e9:42:
67:44:11:09:4b:8e:e2:bb:d6:5a:92:97:5d:3c:6d:
9c:4f:10:3d:56:b7:1b:42:01:b3:b1:d5:8f:4f:4f:
e4:2b:c6:97:4e:63:3c:23:12:3b:90:53:e1:6a:65:
a8:6a:87:6a:98:69:9f:98:66:66:33:ee:da:09:02:
d8:61:a7:ee:8a:de:a6:f1:37:21:a2:b0:9f:4d:60:
ca:64:ff:5b:c7:c8:21:72:bf:96:d2:0c:4d:35:cf:
eb:84:2b:91:13:f9:f0:fd:7e:60:c2:4a:f8:10:0a:
98:30:b2:fa:e9:93:1d:f3:d8:6e:ea:2b:77:d7:f5:
f4:c2:d4:cc:6b:d3:9d:cf:fa:56:57:02:62:7a:79:
4b:4e:e6:8c:26:43:4a:39:a8:27:72:c3:4a:30:75:
dd:52:ca:20:ad:e0:ab:e6:df:26:40:06:89:a2:eb:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:CF:00:D7:88:85:B0:46:9C:E9:EB:42:22:52:21:A4:78:F3:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9318BE28C36311EFBA6C4396762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.126.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e7:fb:b5:0c:09:a8:66:3e:87:8c:6b:32:6d:36:f8:93:cf:
d3:ba:d2:aa:08:dc:35:53:2d:99:92:32:46:ca:e2:40:4c:df:
3f:1b:05:49:b2:94:12:00:c7:fe:21:78:b7:ae:6c:b5:64:5e:
a8:d5:b8:4e:c3:8b:ca:f8:13:7e:e2:0a:33:6c:8a:36:81:57:
53:9d:07:87:55:73:82:17:ab:e5:80:09:86:7d:c9:fe:0a:87:
78:cb:e9:9c:66:ba:03:1d:fd:b9:b9:6e:24:bd:73:12:e4:de:
5a:d2:5a:17:6a:a2:a5:11:c9:44:e5:9f:c8:da:15:39:a3:cb:
83:83:aa:bf:cb:1b:dd:12:4d:e6:51:a7:2a:1f:01:27:dc:7c:
0d:be:f5:49:a0:fc:0f:33:4d:2d:bb:68:c7:1e:a5:8d:d9:eb:
89:30:e2:75:3b:b0:cb:a5:41:5d:98:e5:5b:21:f4:fc:48:c2:
ab:cf:9e:86:ba:30:4e:29:33:8a:87:57:ad:f2:3e:62:89:a6:
d7:7c:b1:42:6a:7f:e2:0e:96:0a:74:92:7e:a0:41:31:3d:02:
d0:65:0f:e6:5a:a5:93:08:a7:87:8b:60:54:2c:e5:72:65:a7:
3c:23:0f:fd:8e:1a:e5:d8:77:fd:ad:a6:20:d8:e2:e4:25:30:
96:75:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:52 2025 by rpki-client