Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36ECBC58C0CA11EFBAFA9A7B762E951A.roa
File: 36ECBC58C0CA11EFBAFA9A7B762E951A.roa (raw, json)
Hash identifier: DWuodNSQS3KgB1ReksqkvA0WbqY9noPKzQRZXO3H6IE=
Subject key identifier: 28:71:39:45:CA:99:53:CD:00:8D:AB:F7:82:9C:2E:3E:36:EE:D9:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36ECBC58C0CA11EFBAFA9A7B762E951A.roa
Signing time: Mon 23 Dec 2024 01:07:01 +0000
ROA not before: Mon 23 Dec 2024 01:06:57 +0000
ROA not after: Wed 10 Dec 2025 01:06:57 +0000
asID: 984
IP address blocks: 154.82.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73198 (0x11dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:06:57 2024 GMT
Not After : Dec 10 01:06:57 2025 GMT
Subject: CN=6768b7b5-23fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:cb:02:6e:63:39:24:da:2d:c9:a5:ff:a7:
31:92:5a:e7:d8:25:69:1a:23:40:da:a9:f3:ab:31:
84:a9:8d:80:d0:02:1f:8e:1d:b5:2b:cb:8b:e9:e7:
67:53:ed:41:29:18:45:78:77:9e:de:27:a3:10:69:
a7:31:43:78:1d:fa:b9:0c:df:31:e7:6d:6e:22:a0:
91:59:71:82:23:ef:64:ec:47:a5:dc:e2:3c:51:05:
96:c4:f7:0b:50:8a:f5:e4:37:8c:76:52:48:6e:c5:
31:74:04:2a:a3:d0:e6:0f:5e:4c:07:6d:f0:46:f4:
0a:f9:03:d9:40:24:e8:2b:f8:4d:db:49:e6:3e:19:
dd:11:68:4e:8c:1d:a1:60:dc:99:dc:3a:76:5c:9d:
ad:90:65:40:f6:49:ad:e6:ff:fc:a2:d1:52:6e:aa:
af:73:c5:3c:10:76:95:68:fd:36:b6:95:c2:d5:84:
57:bb:6b:96:28:c6:f1:c7:10:27:c8:4a:68:29:dd:
3b:fd:4f:76:cd:bf:86:41:3a:34:92:7b:88:2f:43:
dc:14:9d:18:74:65:e4:8a:42:83:10:61:3b:14:84:
1e:bc:99:8b:60:04:5b:cc:7e:4c:50:4b:41:c0:93:
51:de:6f:89:8a:bf:68:cd:d3:79:c4:b7:32:cd:07:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:39:45:CA:99:53:CD:00:8D:AB:F7:82:9C:2E:3E:36:EE:D9:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36ECBC58C0CA11EFBAFA9A7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.234.0/24
Signature Algorithm: sha256WithRSAEncryption
18:11:a5:9c:90:6c:55:65:f0:f6:0f:96:3a:7a:44:64:0c:59:
1e:e4:f3:66:79:8c:33:6d:86:6c:59:79:e2:8a:55:f4:b3:34:
81:92:37:a7:66:d1:f4:40:ed:32:40:c8:30:3b:c5:e2:d3:f0:
e3:1e:ef:f2:69:d7:a1:06:f2:3d:57:75:44:30:f6:4a:9e:95:
33:38:20:e1:72:e4:a1:03:9c:94:f7:ec:36:9d:9e:15:70:c0:
68:45:d2:7c:23:22:64:c1:12:e1:ac:25:4d:da:5f:6e:58:eb:
9c:0e:23:ac:33:4e:d5:c3:74:91:8e:5b:c0:a2:8e:9f:8e:40:
1c:68:af:e7:53:1d:e0:01:c2:73:6f:ef:24:b7:6e:2c:a3:a2:
46:ca:c9:4a:37:88:8d:23:9e:a6:c3:08:92:14:55:98:35:67:
e4:45:1e:1d:68:ba:08:1a:f8:7a:e7:37:ab:c1:a4:d5:5e:27:
d2:a3:ce:8f:52:a6:8b:93:b1:7e:67:28:73:85:6d:02:61:73:
51:2b:34:c2:f6:29:9f:59:03:fb:ee:fc:52:15:35:f0:cd:d0:
58:37:93:ef:0d:42:7e:fc:fe:96:23:d9:1c:bc:21:ec:0e:ab:
46:a7:22:41:2c:b4:ae:b9:5b:70:6f:e7:20:27:15:90:15:fe:
b9:76:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:51 2025 by rpki-client