Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077584FAC53E11EF9ABFF258762E951A.roa
File: 077584FAC53E11EF9ABFF258762E951A.roa (raw, json)
Hash identifier: BC9cxNrOE0Ju7BryS3HogfFHyA1cpfQ+wvRCr05C/PI=
Subject key identifier: 3E:DD:3B:42:9C:78:35:16:C7:AB:FE:AF:33:C3:97:55:76:AF:CC:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077584FAC53E11EF9ABFF258762E951A.roa
Signing time: Sat 28 Dec 2024 17:06:08 +0000
ROA not before: Sat 28 Dec 2024 17:06:04 +0000
ROA not after: Fri 12 Dec 2025 17:06:04 +0000
asID: 984
IP address blocks: 154.206.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76897 (0x12c61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:06:04 2024 GMT
Not After : Dec 12 17:06:04 2025 GMT
Subject: CN=67702fff-7ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:2a:a9:6f:07:2c:2c:82:98:f8:a3:e5:44:
8a:27:4c:fa:3d:44:e2:db:12:45:ae:7f:7c:7f:81:
b5:a2:ca:e9:ce:00:c4:07:da:91:6a:cc:32:79:db:
06:09:5f:22:d4:9d:91:5c:05:fc:63:dc:65:41:9e:
f5:0c:b0:c9:66:16:d4:a1:06:cf:d6:de:ae:ad:a3:
0f:9a:52:7c:b3:5c:4c:9d:9c:59:d1:05:c1:4d:cd:
47:3e:23:c5:ab:98:7e:b8:f1:65:34:a4:77:1c:3e:
dd:10:c6:7d:42:83:31:3f:6e:ab:0f:33:7c:75:37:
a1:35:a7:dd:39:31:26:c1:16:6e:c0:d3:d9:3e:c0:
59:d2:5d:80:96:2c:07:b1:35:71:00:96:86:ed:9d:
0e:a9:89:50:af:33:95:ae:67:98:98:7c:10:b4:d7:
96:18:cc:77:cf:1b:4c:2d:81:78:3a:1d:26:ec:83:
16:98:46:12:84:7d:c5:f5:6f:90:c2:c4:69:d2:5f:
cc:0b:2f:3a:b9:4d:73:4d:3d:88:3f:21:64:c9:e7:
5f:91:a9:d9:f2:d5:52:6f:75:66:91:3b:30:69:e9:
31:cd:a8:50:7d:35:5e:45:62:a1:1f:d6:1c:1d:0a:
a6:37:d4:51:0e:38:0b:31:66:d7:89:82:48:60:59:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:3B:42:9C:78:35:16:C7:AB:FE:AF:33:C3:97:55:76:AF:CC:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077584FAC53E11EF9ABFF258762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.232.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1c:4b:67:be:a5:41:f9:66:11:da:fe:0e:67:e2:ac:97:92:
9b:8a:33:7b:17:9b:97:06:bf:6b:31:65:24:e0:00:52:40:89:
47:74:2e:c2:8d:49:ec:f2:c2:33:8d:f4:cc:0b:11:ac:2c:d5:
b3:02:cc:16:af:88:e5:72:7c:59:ad:e6:a6:c3:73:42:63:d9:
ad:92:91:e9:6d:8d:66:15:af:97:4e:a1:30:c4:53:56:46:9b:
b0:69:9b:bf:4c:47:45:32:7c:bb:77:d1:e5:de:b5:2e:74:cc:
79:50:93:ec:f1:5a:a9:fd:f0:08:8f:29:e0:a9:c8:3d:68:9a:
af:26:ac:97:23:0c:32:b8:85:63:f4:63:e5:72:96:12:32:c3:
5e:23:e0:12:ec:6c:7d:0c:d7:ca:d6:50:e8:75:2f:4c:ba:12:
11:5d:7e:b7:5d:d5:2b:76:f2:8b:78:0e:7c:39:46:b2:9c:8e:
6f:77:50:e9:8d:df:7c:58:a0:f7:6a:5d:c9:64:e7:b2:3f:aa:
32:10:98:8b:b9:9d:9a:45:74:05:e6:b5:5c:22:42:91:8d:91:
36:01:f7:93:dc:4c:d7:41:f4:20:58:7d:ef:d5:23:50:6b:e1:
9b:04:d0:d8:45:42:bb:2c:47:23:28:aa:4e:9a:ed:67:3d:eb:
13:e0:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:54 2025 by rpki-client