Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC734EC26F11EFB681D488762E951A.roa
File: 0AAC734EC26F11EFB681D488762E951A.roa (raw, json)
Hash identifier: WEOAGJXN0R+jdDjdjEH9vcE3RoxGLUP8nTwP6Cw/RPo=
Subject key identifier: 08:AD:21:B3:7A:5F:54:23:AC:C7:A6:99:0D:0A:34:0D:01:BE:0F:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01244E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC734EC26F11EFB681D488762E951A.roa
Signing time: Wed 25 Dec 2024 03:19:25 +0000
ROA not before: Wed 25 Dec 2024 03:19:21 +0000
ROA not after: Wed 10 Dec 2025 03:19:21 +0000
asID: 984
IP address blocks: 154.211.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74830 (0x1244e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:19:21 2024 GMT
Not After : Dec 10 03:19:21 2025 GMT
Subject: CN=676b79bd-63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:01:6b:b0:f5:8a:5e:0e:ec:b6:29:c6:29:
47:0a:05:83:a9:df:48:79:76:b0:43:79:13:bb:79:
15:2a:53:fa:83:bb:57:07:79:38:2d:bb:1e:14:41:
4a:ca:b7:a1:b2:22:81:59:bb:8b:21:c4:4f:2d:6e:
fb:10:71:37:77:f4:53:43:83:00:68:07:d5:79:da:
74:f4:38:92:23:1a:e0:bf:73:ac:cd:8e:81:86:53:
39:43:c4:30:64:48:5d:5d:91:85:1f:12:a8:1f:0b:
fd:34:f5:99:02:d4:fb:59:92:64:a9:f4:8c:51:77:
e5:38:6c:1b:19:63:e5:35:97:49:b4:d4:d9:aa:b4:
d8:68:1a:a0:17:ca:1e:a4:44:70:0b:65:07:a3:64:
6b:e4:8e:fd:81:c2:b2:aa:1e:fb:85:82:3f:7e:e2:
d7:15:89:e3:3c:78:f2:02:e3:08:b1:2c:ec:ae:1c:
38:24:b7:03:31:a1:ef:8e:9a:27:f7:bc:f9:85:d4:
7c:ab:09:a3:e2:19:6c:3e:0a:29:0e:01:69:49:76:
c3:05:fd:99:e5:b5:29:88:4a:1c:07:1c:7d:40:72:
5f:bb:7b:c3:1f:7c:48:b9:1f:21:77:58:4e:6b:2a:
25:c8:3e:ca:eb:38:5a:2c:e5:02:92:9c:e4:fc:d5:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:21:B3:7A:5F:54:23:AC:C7:A6:99:0D:0A:34:0D:01:BE:0F:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAC734EC26F11EFB681D488762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.179.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8b:8d:af:fb:72:87:66:4a:c8:48:8a:21:bc:cf:7c:30:d5:
7a:68:c0:71:2b:08:52:54:29:fa:f0:4e:aa:20:c7:3b:b4:af:
61:6d:31:a4:d0:c2:30:03:99:22:74:5e:5f:db:3e:8e:f1:0e:
60:86:4e:54:5f:27:60:72:6d:fc:8b:64:f3:11:31:48:f1:da:
df:ae:a2:c4:4a:84:ca:ac:7e:75:44:dc:bb:69:86:6c:2f:51:
29:46:10:f7:ca:3d:77:49:1d:92:76:e5:71:dc:5a:6b:24:7a:
29:9d:74:e6:9c:5a:48:e1:2a:27:82:1e:87:96:87:63:bb:27:
d6:b4:a3:99:4a:19:8e:e5:82:ad:16:70:a3:c3:55:84:02:6e:
06:5c:31:31:91:69:9e:5b:3b:51:ed:3e:26:b2:51:b0:80:e7:
e1:cb:76:8a:f5:98:f0:1e:92:a3:bc:98:aa:96:cd:2d:04:65:
67:15:3d:17:b9:eb:49:13:67:ef:f2:a1:d1:e5:69:bb:26:49:
c8:73:1b:c1:34:99:a1:7d:20:bc:61:f6:9d:a3:12:92:70:e4:
52:6c:51:d0:3e:48:55:b5:d9:14:11:a3:71:8e:b9:c5:c7:53:
a2:71:9b:89:5c:04:6d:51:76:4e:23:f3:90:df:4a:b3:c5:3e:
dc:2c:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:08 2025 by rpki-client