Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282D7790C1B811EFAA76486E762E951A.roa
File: 282D7790C1B811EFAA76486E762E951A.roa (raw, json)
Hash identifier: hMgU/hGsyEzT4scF9qO3WT3k/DU5CZrO/RZCz7RQenk=
Subject key identifier: 77:CD:DA:AF:91:56:CF:CA:5A:46:3C:99:7E:3E:48:18:F8:E6:25:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282D7790C1B811EFAA76486E762E951A.roa
Signing time: Tue 24 Dec 2024 05:30:16 +0000
ROA not before: Tue 24 Dec 2024 05:30:13 +0000
ROA not after: Wed 10 Dec 2025 05:30:13 +0000
asID: 984
IP address blocks: 154.193.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74185 (0x121c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:30:13 2024 GMT
Not After : Dec 10 05:30:13 2025 GMT
Subject: CN=676a46e8-4668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:ec:6d:c0:34:0d:f4:e1:a1:bc:4e:75:f0:
14:54:8a:6e:62:f5:f8:60:7b:52:51:36:37:2b:0c:
f3:99:9c:a7:66:9d:9e:e7:79:4a:10:ac:e6:32:8d:
b9:2f:12:39:bf:bb:93:ae:90:80:d9:a1:12:88:f7:
a9:bd:3c:72:8f:b2:4d:2a:e0:d4:a8:8f:20:f9:24:
6d:58:e0:30:b2:08:c9:8d:6a:7b:f7:1c:04:a3:2b:
7d:12:a2:d8:56:40:22:1c:75:1b:4c:a0:d2:b5:1f:
1c:fd:64:00:70:a7:65:8c:88:85:0a:1a:96:a5:dd:
f8:e0:54:f5:29:58:39:eb:47:ee:ac:83:f7:4b:e7:
1d:eb:46:73:4b:6c:ab:8f:eb:cb:5a:5d:86:13:5e:
c7:10:84:04:bd:6a:d3:81:3c:ce:2d:a9:e4:07:1f:
1b:e6:36:ee:64:ad:47:25:89:73:dd:c2:d9:53:02:
90:54:30:b8:6d:e0:03:cb:93:0a:b7:b0:1b:c4:82:
85:4a:64:3f:ed:b4:71:17:bc:1f:a5:65:ec:b9:70:
bb:ca:d5:0a:0c:5a:20:85:86:09:f6:e4:2a:9a:75:
30:91:60:a2:06:fc:4e:13:32:b7:fd:7f:d0:9a:66:
00:33:82:25:40:f3:6b:b8:f4:88:11:26:9a:03:1a:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:DA:AF:91:56:CF:CA:5A:46:3C:99:7E:3E:48:18:F8:E6:25:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282D7790C1B811EFAA76486E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.158.0/24
Signature Algorithm: sha256WithRSAEncryption
79:03:fd:da:20:17:a2:52:cb:31:da:bc:79:cb:68:4a:23:af:
aa:8e:43:8d:ad:c4:d9:0f:40:ab:64:a7:6e:71:52:bf:f6:6e:
1c:21:0d:b3:4d:5f:10:a6:6a:46:8e:77:ff:f2:20:51:e9:25:
10:79:19:1a:be:8f:ef:eb:1d:25:7c:9f:31:89:09:15:6e:fb:
ab:db:b4:61:89:71:5d:b3:d8:cd:91:37:50:e7:8c:fd:1c:64:
df:e7:5b:cb:c7:8e:b9:cb:02:e1:1f:36:98:b7:c1:ab:1d:21:
d7:27:1b:c2:e0:d1:e7:f1:fe:2b:7f:2b:cd:52:03:10:b6:d8:
3d:5e:d3:58:36:41:e6:41:37:e9:53:58:8e:33:03:11:a5:2f:
d2:cd:28:68:f6:3f:ee:2d:eb:fe:ee:8a:5a:a3:bc:bf:40:1a:
c8:00:7f:4e:42:ae:2b:b4:93:7f:98:62:7b:82:57:cb:f9:71:
2f:98:37:c6:b6:da:85:36:55:83:86:2e:26:39:6a:0a:19:96:
36:92:e9:77:22:a3:fc:f4:0b:f8:30:63:8e:64:23:53:71:02:
eb:2a:17:bd:e4:99:db:79:13:e3:2e:3a:cd:51:6a:df:38:fd:
50:b5:65:2e:33:89:5a:b8:92:db:c1:75:d8:7f:af:94:5b:18:
9f:7f:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:55 2025 by rpki-client