Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B298264CC0A11EF82974292762E951A.roa
File: 9B298264CC0A11EF82974292762E951A.roa (raw, json)
Hash identifier: iGSkMoIC5GrYFAKTa6xZqXZ8wo/1AeT+j/71mzUEaKA=
Subject key identifier: 94:48:55:FD:1D:A6:D4:AD:BE:93:61:FB:0B:2F:42:CE:50:E4:6D:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B298264CC0A11EF82974292762E951A.roa
Signing time: Mon 06 Jan 2025 08:45:40 +0000
ROA not before: Mon 06 Jan 2025 08:45:36 +0000
ROA not after: Thu 06 Feb 2025 08:45:36 +0000
asID: 200373
IP address blocks: 154.94.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79292 (0x135bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 08:45:36 2025 GMT
Not After : Feb 6 08:45:36 2025 GMT
Subject: CN=677b9834-6ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:ed:4e:71:9f:07:24:e2:23:bf:1c:e3:4e:
be:82:8c:2c:70:60:7a:3d:94:7a:79:26:46:48:6a:
8b:19:f4:a1:ee:a1:2a:1c:7d:e2:bd:7a:11:5d:35:
51:bb:b1:6f:2f:55:70:d2:bf:87:11:f9:4f:f4:cd:
c2:c2:90:6d:7f:61:0e:39:1a:e2:d1:84:ea:ec:15:
42:44:e6:cf:c3:f7:18:87:e9:8c:03:a6:9e:8e:82:
b6:dc:d3:4b:12:52:af:18:4f:b8:4c:63:61:0b:fa:
f9:3f:f1:3d:19:87:32:d9:ad:26:5d:ef:8c:20:1d:
13:74:42:ae:b2:5d:e9:8d:18:0e:56:62:3f:ca:d3:
68:88:97:86:f7:3e:83:36:d8:e2:bc:4c:fb:f7:dd:
5a:e0:cf:9a:06:5f:33:86:65:ac:35:55:6a:18:1f:
0e:8a:dc:a2:97:37:9e:7f:54:23:fc:ae:b8:75:80:
d4:d7:1c:1f:ee:a3:03:3f:6f:61:3e:ae:cf:ca:24:
6c:07:e6:0a:61:a9:c0:3c:06:84:9d:e5:15:f2:0e:
26:7a:5b:24:93:9d:df:0d:3c:dc:1b:4c:2e:ee:9d:
0f:79:56:52:78:65:e6:b6:b3:92:e4:9f:c3:18:69:
ea:9d:5c:a7:f8:b4:53:d1:68:0d:4e:fa:4c:d7:73:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:55:FD:1D:A6:D4:AD:BE:93:61:FB:0B:2F:42:CE:50:E4:6D:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B298264CC0A11EF82974292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d7:8b:72:f6:cf:a7:2e:cc:2e:c4:ca:f6:50:b6:4a:04:e6:
f7:74:51:70:4b:60:39:2d:00:9d:2f:c8:fb:15:6f:9d:c7:ea:
eb:01:c0:d2:98:15:3b:13:b8:4f:03:ff:a1:54:d6:5f:ed:fe:
6c:47:5e:17:d5:42:2d:82:be:aa:67:48:76:26:5c:00:71:ab:
73:fe:9b:6d:7f:b2:84:04:9b:1e:46:5b:53:30:88:72:8d:06:
b1:f3:7f:25:3b:52:b8:13:b8:4e:a9:01:99:4a:a7:b6:ff:a3:
6a:0a:c1:c5:04:f4:d4:63:f3:7e:1c:ff:26:73:19:f0:0a:68:
73:82:0f:98:fe:f4:5e:57:8c:36:3f:28:d1:c5:c1:6d:02:62:
52:51:8d:1e:61:2e:36:d4:b5:08:67:06:56:31:b1:0b:a9:c1:
f3:20:e6:75:e9:45:e3:34:2b:fc:5a:d2:e3:75:6c:10:ab:e2:
9e:51:da:b2:2c:00:72:7c:1c:fb:93:5f:77:06:58:d0:cc:2e:
6b:f5:30:7b:99:d1:79:d6:eb:bc:57:e1:e8:4b:f9:d8:0b:9f:
f9:b3:52:78:5e:1a:64:de:f8:65:29:5f:59:cf:ac:51:bb:31:
a0:37:01:bf:80:ac:09:0e:8d:8c:3e:2f:f3:4a:03:45:0f:d5:
fb:c0:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:14 2025 by rpki-client