Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E148A1AC35D11EFA9A9496F762E951A.roa
File: 9E148A1AC35D11EFA9A9496F762E951A.roa (raw, json)
Hash identifier: +F2HC5dRoBDTIFkAVofxCvWFJOL/bJ4hvupxMsY7JIc=
Subject key identifier: 3E:98:5F:9A:24:93:1E:AB:5F:38:03:37:BD:AE:F8:D6:4E:3D:D6:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012609
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E148A1AC35D11EFA9A9496F762E951A.roa
Signing time: Thu 26 Dec 2024 07:47:12 +0000
ROA not before: Thu 26 Dec 2024 07:47:09 +0000
ROA not after: Tue 04 Mar 2025 07:47:09 +0000
asID: 138915
IP address blocks: 154.93.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75273 (0x12609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:47:09 2024 GMT
Not After : Mar 4 07:47:09 2025 GMT
Subject: CN=676d0a00-5110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:aa:5b:93:54:5c:0e:a6:43:64:bb:d8:99:
28:ea:7b:5a:0d:4b:48:1c:ee:ea:50:01:dd:1f:86:
a3:37:91:fd:88:06:64:f0:f9:d0:08:ce:a3:c1:b5:
6d:d1:80:aa:04:b8:cc:d5:e9:14:d2:89:36:94:df:
83:2d:b8:f6:07:2e:75:00:9b:6d:c1:12:72:8c:5e:
80:4d:a6:9c:37:84:9b:83:d1:56:b1:9f:33:08:c1:
1e:86:f2:16:6c:f2:c4:5f:d2:15:be:a3:ab:2c:df:
95:18:88:b4:c6:20:4b:79:2f:7a:4e:2c:7e:f3:d0:
c4:57:87:df:a2:a9:e0:95:d1:9d:e3:f9:ce:c7:ab:
97:e7:80:42:04:fe:b6:be:2a:1d:37:97:db:59:ab:
6e:b1:43:5e:d5:2f:2a:7d:18:25:7c:24:56:de:f2:
18:90:89:f4:50:0f:27:06:23:52:f2:0a:bd:ef:f7:
14:85:af:fc:a3:ea:bf:4d:c1:35:0b:08:96:36:1c:
49:52:6f:7f:57:24:8a:bd:a8:ac:20:04:df:25:c9:
a2:ec:27:a5:17:de:2d:6a:72:e3:71:7a:b7:c2:c2:
b1:82:7a:bb:3e:05:35:d8:e4:f5:7f:a0:df:08:14:
ca:33:a4:11:68:09:0a:40:92:f2:56:54:8e:e0:70:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:5F:9A:24:93:1E:AB:5F:38:03:37:BD:AE:F8:D6:4E:3D:D6:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E148A1AC35D11EFA9A9496F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:0b:e2:c3:15:f4:eb:ca:63:c9:8e:18:ef:1e:6a:53:d4:66:
c4:b3:d5:b7:05:55:32:05:b6:13:5a:2b:bd:c0:0e:64:0c:16:
e4:c4:6e:63:88:98:71:65:85:a2:ce:b0:aa:a7:c9:2c:38:96:
75:01:db:36:e8:75:f7:bf:cc:30:65:30:b0:d8:bc:d6:cb:9c:
d0:86:68:f9:34:b0:78:aa:cd:13:54:07:0d:6d:24:7e:1d:bd:
3b:68:99:8b:11:57:5b:87:37:ab:e2:0b:87:3a:fe:07:fc:e0:
e6:9b:40:f6:58:53:8c:6d:11:07:91:f7:30:34:3e:a3:6b:05:
01:7c:e8:4e:43:88:ae:7c:93:dc:71:60:d1:38:5f:c1:08:47:
73:f7:5b:c4:9d:cc:f7:02:89:0a:8e:7d:43:c8:7d:7f:c8:bb:
fb:c4:57:bf:45:f2:58:a2:e2:c8:da:0d:c3:a6:7d:c2:df:c4:
a2:bb:1c:56:d3:b6:d3:54:cd:c2:98:1a:1b:bb:5a:e2:c4:fa:
f0:3f:5a:60:e6:7b:b8:ad:e0:65:fd:03:5a:a2:04:31:b7:52:
8b:9e:86:ec:31:28:f8:35:fd:9a:5a:5b:93:76:ac:cb:07:80:
d0:9c:7f:81:f0:2a:b8:81:57:03:57:bb:e7:25:52:e5:b9:8a:
5d:b8:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:59:03 2025 by rpki-client