Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306FAAC6C1CD11EFBD266871762E951A.roa
File: 306FAAC6C1CD11EFBD266871762E951A.roa (raw, json)
Hash identifier: VYmmhf36azu9bcxFPBf/3zfOSpjaHf//G9yrAADMeIc=
Subject key identifier: B0:A4:98:6F:78:5B:1B:23:4B:46:7A:66:DB:25:A9:B8:F6:9A:C4:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012275
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306FAAC6C1CD11EFBD266871762E951A.roa
Signing time: Tue 24 Dec 2024 08:00:50 +0000
ROA not before: Tue 24 Dec 2024 08:00:46 +0000
ROA not after: Wed 10 Dec 2025 08:00:46 +0000
asID: 984
IP address blocks: 154.193.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74357 (0x12275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:00:46 2024 GMT
Not After : Dec 10 08:00:46 2025 GMT
Subject: CN=676a6a32-5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:5f:0e:81:6c:10:dc:f8:ab:54:78:95:9d:
a7:99:97:9d:5b:9f:4e:5f:cd:5d:22:e6:4b:0d:36:
9b:d8:c2:83:aa:a8:be:ed:7e:46:ea:1b:08:38:9e:
04:b5:ce:2d:74:2e:15:d8:22:2f:6f:22:05:28:d8:
06:98:76:00:60:43:ac:ab:1f:af:96:d7:0f:4d:01:
a1:3a:44:e1:9b:74:d1:61:76:e0:3d:fa:b5:dc:56:
2e:05:de:36:49:21:7e:a8:af:56:31:f8:ac:fc:0a:
83:b2:fa:21:ab:6e:b6:3a:f1:5e:c6:b2:88:33:65:
ef:9e:17:4b:3d:bf:7e:73:a4:68:74:8c:18:8b:70:
91:25:12:19:54:43:f6:8f:64:73:d0:94:e2:f1:72:
39:e4:a0:62:51:42:d8:b8:ca:55:e7:3b:d7:34:44:
fc:7e:a3:fb:20:25:fb:54:db:1a:3e:0f:40:86:0e:
d0:34:4b:8a:8f:a2:b6:36:50:bd:f8:a1:b6:cf:72:
cf:6f:69:a8:9f:4b:41:16:dd:5c:5a:38:a5:e7:09:
98:f0:30:c1:bc:52:af:aa:5c:bd:dd:0d:d5:3a:4b:
82:8d:0c:0e:43:72:c9:91:4f:6d:ec:82:64:5a:66:
c1:74:8c:bc:d0:a4:12:81:73:d0:e2:e2:05:00:22:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:98:6F:78:5B:1B:23:4B:46:7A:66:DB:25:A9:B8:F6:9A:C4:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306FAAC6C1CD11EFBD266871762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:77:67:94:e1:a4:88:e0:0c:f1:45:0e:a0:75:b8:96:d0:55:
9f:6e:0f:7a:36:b6:c5:4e:92:33:5e:d5:ca:4e:07:d7:d6:a5:
f0:08:53:14:0c:fc:95:76:4f:b0:72:70:9a:d7:81:60:0d:e7:
fe:e0:3c:93:8f:f2:2b:31:bd:00:74:45:aa:e7:77:41:5f:6d:
7c:db:39:54:3f:68:ea:e2:ae:dd:a3:be:d4:e3:9f:7b:7c:0c:
b0:36:9e:30:61:fe:b9:8f:f5:c1:2b:4d:2d:4f:fd:88:7e:88:
6b:76:ad:a7:66:70:c1:08:c1:7d:3a:a3:a4:95:9b:7c:a0:e9:
c7:18:81:d8:de:f7:40:e1:76:7f:6c:f8:86:0c:0e:08:1b:6d:
aa:3f:7e:60:84:a7:8e:a7:e5:93:e1:48:fb:41:6b:3c:be:08:
6d:e7:4f:c7:fe:b0:55:60:0c:f7:48:cd:8c:87:46:a0:42:5c:
ad:ec:27:59:13:ed:0c:8e:49:c7:9e:e7:f3:31:14:3d:5b:21:
60:f1:94:37:57:76:c0:2f:32:d1:53:67:60:c3:b5:0f:fd:40:
90:e9:3e:3c:2a:3c:d5:0b:bf:92:42:25:33:42:c9:1e:1b:4b:
4c:d2:ac:1c:2d:95:bb:3b:d5:a5:46:f6:2b:73:a8:f1:39:b6:
d0:05:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:43 2025 by rpki-client