Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03924A2CC63C11EFA2680B9C762E951A.roa
File: 03924A2CC63C11EFA2680B9C762E951A.roa (raw, json)
Hash identifier: zt+KkPKw5RqQKePe4U8bMZEIOlZ7bZL/welH8JTg3Hw=
Subject key identifier: EB:05:B5:A7:11:AB:10:DC:C1:55:DA:A4:46:FF:7E:FD:1F:D7:C2:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01304D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03924A2CC63C11EFA2680B9C762E951A.roa
Signing time: Sun 29 Dec 2024 23:24:13 +0000
ROA not before: Sun 29 Dec 2024 23:24:10 +0000
ROA not after: Fri 12 Dec 2025 23:24:10 +0000
asID: 984
IP address blocks: 154.218.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77901 (0x1304d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:24:10 2024 GMT
Not After : Dec 12 23:24:10 2025 GMT
Subject: CN=6771da1d-bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:f5:f9:31:d0:fa:0f:ca:c2:df:24:a0:4f:
23:1e:de:ad:73:1b:dc:3b:0e:6d:bf:92:45:9a:cb:
a9:4c:db:e6:e6:5f:e7:2b:a1:34:61:76:34:df:fc:
24:e8:d1:2a:ab:53:8b:79:3a:95:db:6a:79:91:d3:
b9:39:d1:04:aa:32:a1:25:1e:75:73:9e:5d:28:30:
8d:4a:60:df:02:17:5a:c2:2e:f5:c2:d7:e8:ac:7b:
7e:e8:33:18:e0:72:68:15:bc:b5:92:44:6c:ba:39:
e6:2a:8f:a9:d8:18:b1:ee:7a:2b:4f:01:78:1e:e2:
45:7b:22:d9:42:51:20:5c:e4:3a:35:8e:7b:be:89:
61:10:37:c8:06:bf:ce:6f:c0:b6:6a:c3:d5:5f:42:
32:68:5a:0c:68:8e:23:30:56:cc:b9:d9:61:7c:77:
b7:41:6a:be:65:68:a2:51:e5:0f:eb:71:aa:1a:df:
10:11:00:1f:9c:3a:b1:b0:a9:04:b4:51:d3:d9:d5:
66:dd:e3:4a:da:f2:c4:73:05:70:51:bf:27:b5:54:
d8:76:54:de:31:22:76:d9:2f:d0:1f:f5:50:53:d4:
db:e8:bd:aa:b7:49:c4:57:f1:00:74:af:61:96:2f:
83:53:98:9c:9b:24:f3:63:c3:c7:02:39:a1:24:bf:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:B5:A7:11:AB:10:DC:C1:55:DA:A4:46:FF:7E:FD:1F:D7:C2:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03924A2CC63C11EFA2680B9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c0:b4:0a:82:7a:cb:03:38:4f:bc:60:79:f1:b2:54:97:13:
a9:8d:c9:58:d6:ee:03:2c:ae:1e:c2:6b:00:a7:90:6c:e7:b8:
bd:58:0e:f0:db:ce:5a:2f:a8:70:f7:f8:5f:6b:57:80:f6:81:
c9:b9:11:2a:74:5d:64:80:70:24:77:e9:7d:0d:36:11:f8:e8:
78:76:4f:13:39:5b:c5:5d:f6:be:ce:3a:31:7d:73:30:fe:f0:
a2:88:50:9c:f1:7a:42:1c:aa:ee:00:24:62:c5:82:b1:79:c7:
5e:e0:64:58:bd:e0:4b:df:0a:44:92:fc:6f:b0:22:0a:0d:30:
30:79:d6:17:86:19:eb:a7:3c:19:60:cf:2d:61:d2:60:83:93:
20:c8:0e:f0:e4:ab:da:b5:2c:b2:2e:e0:78:03:e1:be:72:17:
1a:70:93:d9:6f:65:61:56:b9:61:e7:e6:08:29:1b:b5:e0:06:
b9:b5:bd:0e:78:0a:9f:ee:c3:a5:43:f4:04:08:83:95:b3:dc:
d1:0b:40:1b:91:1c:4a:5c:20:9d:48:24:d3:fa:c3:54:a9:60:
f5:79:d8:4d:e0:f7:73:87:d7:2e:df:ab:62:85:e6:02:b7:0d:
9c:36:eb:ac:e8:bb:60:3d:8b:77:e6:76:1e:fc:80:74:c8:3c:
4a:6c:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:43 2025 by rpki-client