Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360483D6C1DB11EF808E264A762E951A.roa
File: 360483D6C1DB11EF808E264A762E951A.roa (raw, json)
Hash identifier: 8rx+b1gGjGhn8QtSlO5HVsxzTA1iUIu8XGi7hbaM+l4=
Subject key identifier: DB:D6:43:B5:57:33:A7:05:1B:B6:04:F8:B3:A9:1E:A3:96:D4:CD:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012303
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360483D6C1DB11EF808E264A762E951A.roa
Signing time: Tue 24 Dec 2024 09:41:12 +0000
ROA not before: Tue 24 Dec 2024 09:41:08 +0000
ROA not after: Wed 10 Dec 2025 09:41:08 +0000
asID: 984
IP address blocks: 154.194.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74499 (0x12303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:41:08 2024 GMT
Not After : Dec 10 09:41:08 2025 GMT
Subject: CN=676a81b8-a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:61:77:35:66:33:8d:1d:06:0e:3b:29:db:
9f:79:79:cb:d9:99:8b:71:d2:1a:c5:c8:2a:13:f8:
44:53:d0:80:3c:a1:53:8d:7e:2a:61:af:bd:4a:9b:
27:ba:d1:5e:32:98:0c:8e:3f:e6:48:64:cf:f6:0a:
0a:6b:d6:1f:09:c7:32:48:80:6b:38:39:fe:f7:5d:
7e:0f:2b:c0:57:b2:25:51:f0:03:2e:b5:be:f4:ec:
f1:84:8c:db:fd:90:c7:ae:7d:91:12:58:38:34:c0:
3c:fb:13:50:fe:f3:60:0a:ca:51:9e:a3:9a:f3:a7:
cb:11:04:7f:72:8f:f6:07:12:bd:65:fd:fd:00:95:
80:e0:7c:4a:43:fd:6c:19:bd:b7:55:8a:d7:87:15:
ba:f5:46:da:b0:67:c0:46:51:21:8e:85:22:e2:4a:
12:4a:e8:66:3a:6c:83:76:90:be:1b:7e:bd:5d:67:
77:d8:cc:3e:92:76:09:3d:d8:9a:69:01:6a:9c:7e:
6d:c2:f7:71:98:e2:d6:fd:11:fe:f0:59:eb:65:06:
e0:02:59:91:4c:27:8d:7e:d5:e9:42:b0:1d:6c:6f:
d3:b3:a3:ff:0a:08:95:29:1c:9a:37:74:4e:66:dd:
d5:ce:85:10:e0:fe:67:59:c4:58:21:93:1d:f8:b6:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:43:B5:57:33:A7:05:1B:B6:04:F8:B3:A9:1E:A3:96:D4:CD:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/360483D6C1DB11EF808E264A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b2:bc:46:98:1c:1d:ff:89:94:e5:f4:8d:11:6e:00:b4:77:
ae:a5:18:e8:81:bb:d3:54:8a:06:9f:fe:97:c7:8e:60:9f:37:
94:95:e4:bb:c7:f6:2d:cc:1e:07:28:4f:e7:db:d2:a9:43:65:
fa:35:93:f9:50:ad:32:68:38:e4:5b:95:19:34:04:79:f7:0b:
ff:d5:4b:1e:c2:b5:81:35:c7:38:47:6f:56:99:77:6b:74:3c:
f3:9d:1f:d5:55:60:e5:f3:33:07:d9:8c:01:9d:49:23:31:39:
0a:26:f7:f3:4a:1b:54:33:5d:5a:bb:e7:47:aa:bd:1a:06:36:
05:10:cb:36:f9:df:88:02:b5:c8:71:a3:0a:18:9d:41:15:b2:
1c:a0:7e:e8:03:4a:35:07:95:4b:bf:fb:60:06:c8:bf:bf:00:
e2:bb:a5:7b:bb:c3:76:3f:59:27:e0:97:88:0b:0f:ab:ed:1a:
d6:ae:04:1e:f1:f3:8b:76:a0:e8:9b:f6:57:18:a5:dc:31:9c:
d4:da:fd:4c:8e:87:0a:e6:bd:75:9f:13:ab:23:cc:f4:97:9a:
f6:b3:56:5b:d5:01:8b:1f:f2:51:40:5b:e1:19:ca:82:6c:aa:
f4:4f:0c:d9:47:e2:d5:e6:c9:9f:16:c8:b6:41:c5:02:f0:af:
dd:59:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:34 2025 by rpki-client