Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3285B19AC0CC11EFA4EF7F8A762E951A.roa
File: 3285B19AC0CC11EFA4EF7F8A762E951A.roa (raw, json)
Hash identifier: SCFvnFBU2MRKyCjirYkfyGP8LnY/t+QBb08uvQV1wVA=
Subject key identifier: 1A:9A:A9:F1:29:43:68:23:EC:7D:73:CB:61:2A:F4:1F:09:35:5F:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3285B19AC0CC11EFA4EF7F8A762E951A.roa
Signing time: Mon 23 Dec 2024 01:21:12 +0000
ROA not before: Mon 23 Dec 2024 01:21:09 +0000
ROA not after: Wed 10 Dec 2025 01:21:09 +0000
asID: 984
IP address blocks: 154.82.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73224 (0x11e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:21:09 2024 GMT
Not After : Dec 10 01:21:09 2025 GMT
Subject: CN=6768bb08-b53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:a8:8f:4b:c6:a0:07:01:56:7d:7b:51:82:
2b:13:34:3f:68:2b:13:1e:e3:38:b6:23:ca:a0:2b:
b8:8d:f1:c6:2c:ec:b4:37:12:b7:0e:e4:b6:93:43:
57:c0:07:ec:a5:38:31:e0:90:2c:37:c8:73:a8:bf:
05:89:12:1f:94:c8:6a:d3:6d:fb:37:8e:b4:ac:50:
bf:29:93:d7:8d:d1:35:75:c1:5e:83:e6:9f:1e:b0:
18:8e:c2:95:46:d0:7c:c9:33:61:9c:bd:46:e8:18:
c4:c1:25:27:ab:01:04:a3:89:d7:4c:45:d1:21:c8:
55:19:40:9f:9b:8b:df:f8:7b:81:ab:ff:31:c9:32:
ae:26:b6:9f:53:fa:43:28:a1:f2:92:13:de:a8:c2:
ac:61:f1:62:76:74:c3:30:4a:ba:5d:78:a0:f8:bf:
3b:3b:52:c6:1c:0e:fc:4b:1e:5d:4e:25:78:fa:39:
30:0c:ad:db:23:22:0a:09:a4:b1:c4:a0:9f:94:a6:
1d:f5:c7:43:01:cb:ca:6a:27:be:84:b7:81:27:09:
d6:9d:ce:c1:18:05:9c:36:f3:2b:e1:93:2f:b1:78:
e9:4e:1f:b1:5b:51:52:ee:20:6a:f5:70:ee:9a:7a:
7c:db:3f:2d:23:8a:29:8e:1f:6d:2d:1d:fd:8a:22:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:A9:F1:29:43:68:23:EC:7D:73:CB:61:2A:F4:1F:09:35:5F:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3285B19AC0CC11EFA4EF7F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:82:07:de:1a:34:6c:be:71:84:11:74:5e:e7:8b:25:25:94:
9b:a0:12:ec:3b:f0:86:d2:73:01:69:2a:ba:cf:94:31:0b:01:
91:85:6d:33:eb:7b:7c:27:08:37:2c:77:13:c0:01:fe:67:b6:
62:a9:e0:cf:bb:87:99:fb:68:1c:be:7f:20:ce:81:d9:e3:8b:
9b:83:f6:3c:56:e1:04:b6:1e:ee:c7:e7:2c:3a:af:21:1b:c1:
ad:5b:a4:91:2f:95:27:ea:03:f6:c2:13:c0:bd:49:1e:1f:4e:
36:39:66:f9:4d:bf:63:1b:3e:92:3a:56:db:d2:e4:6b:2a:7c:
7d:33:c3:3e:31:a9:3d:e1:c6:47:bf:16:ff:50:87:f8:91:3d:
d3:cc:a4:64:52:52:32:c6:46:15:ed:6b:2e:ca:8e:2c:a0:91:
5b:21:34:78:4f:b9:d4:58:c6:a3:5c:0f:3a:5e:93:1a:c5:af:
da:65:39:2d:80:51:bf:25:0d:af:4e:25:40:53:5f:02:06:c7:
7b:f4:af:9a:f1:f2:48:17:74:0c:c0:1f:85:1e:19:0d:ad:4e:
c3:0f:52:a9:a8:21:b2:80:58:42:21:d2:fd:28:72:7c:27:8e:
57:96:fd:56:72:cc:00:ee:89:db:ce:b2:3c:60:57:e1:b9:b8:
83:bb:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:00 2025 by rpki-client