Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4306E584C8A111EFAC637456762E951A.roa
File: 4306E584C8A111EFAC637456762E951A.roa (raw, json)
Hash identifier: wq5yuj1CaZxO8BMuk9m9oivAzgpV6x5MSPkah3Gaaj4=
Subject key identifier: 16:BB:E0:49:F6:B0:B8:B8:B8:43:30:68:45:7B:56:62:14:62:9A:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013120
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4306E584C8A111EFAC637456762E951A.roa
Signing time: Thu 02 Jan 2025 00:34:01 +0000
ROA not before: Thu 02 Jan 2025 00:00:57 +0000
ROA not after: Fri 12 Dec 2025 00:00:57 +0000
asID: 984
IP address blocks: 154.218.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78112 (0x13120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:57 2025 GMT
Not After : Dec 12 00:00:57 2025 GMT
Subject: CN=6775def9-25a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:f5:a9:84:e3:3d:3c:5c:19:03:f4:e9:19:
f1:d5:3d:a3:3e:c5:c9:12:6c:e5:4d:e2:8a:a2:71:
8a:ae:9f:8b:a4:e0:11:b4:94:38:9d:8c:2d:4f:53:
43:86:e6:23:ef:52:54:f9:74:ee:79:66:c2:2a:a2:
72:d5:8e:cc:11:1c:2c:e8:f9:56:0e:fc:00:a8:fd:
30:04:c1:11:64:ea:a2:8a:8d:4e:61:9a:60:90:39:
b6:59:f9:d5:d8:33:c5:bd:24:9b:3f:7a:38:a6:71:
3b:3f:7d:e3:f3:90:fa:b1:9f:50:8b:e4:46:86:95:
13:d9:25:9c:f2:90:07:eb:d9:f9:95:a2:09:dc:f5:
1c:ef:48:8d:62:7a:20:bf:48:b4:01:81:a7:e4:e0:
ca:1d:d2:a3:2a:df:3f:62:d1:0c:1f:88:43:6d:0c:
9c:21:2e:82:6c:d0:6c:b1:cc:eb:24:2e:98:b7:e6:
21:40:d4:bc:39:60:45:b7:5b:8f:b1:d6:e5:32:ae:
b4:91:97:4d:b9:10:a5:54:8d:54:a5:f7:db:84:90:
2d:83:15:d6:57:06:23:fe:a3:cb:b1:82:e9:03:08:
7d:af:16:96:d8:10:f0:f9:b7:58:7e:cd:5a:1d:c0:
99:fd:16:ba:1a:96:e3:15:ed:40:bc:fa:62:b3:f4:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:E0:49:F6:B0:B8:B8:B8:43:30:68:45:7B:56:62:14:62:9A:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4306E584C8A111EFAC637456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.44.0/24
Signature Algorithm: sha256WithRSAEncryption
15:98:c4:e9:67:e6:77:b8:dc:47:e4:92:ab:a5:94:1c:d2:61:
0c:14:5f:71:75:65:66:aa:be:e0:32:87:3d:85:b5:60:ea:f5:
ee:db:97:cf:04:87:83:70:a5:b5:b5:aa:54:01:76:fb:19:81:
c2:e4:4a:93:9c:4d:a6:b4:14:dc:1d:24:e5:17:d6:0c:52:9e:
30:c1:e0:10:be:23:c1:e3:57:84:03:d6:43:2b:10:dc:97:83:
e8:30:df:d8:e6:e2:9d:c3:87:3e:36:45:5b:e7:c0:16:23:78:
34:30:2c:e6:94:f8:32:d2:f4:69:57:e1:07:a1:02:f9:8c:2e:
49:3c:ca:8e:1b:fc:51:14:31:4d:fd:14:bd:47:e9:57:80:7d:
72:ad:24:9e:96:74:d4:38:96:f5:dd:8a:69:0e:32:26:4f:28:
9c:5a:bc:b4:65:13:76:34:ab:e2:0d:21:63:dd:88:c7:6e:2e:
45:8c:3e:d3:1d:13:36:90:74:7f:ed:bc:bb:bd:32:6d:94:88:
07:20:c8:a3:e2:a4:2a:2a:25:1d:3d:95:62:aa:16:d1:9e:44:
4a:8f:b0:4b:d1:ba:ba:ac:a8:09:f0:2d:a4:6d:47:ea:7c:d1:
d6:61:c8:82:98:b8:9b:66:a7:27:56:4f:43:f1:6e:6f:b7:99:
5c:dd:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:11:12 2025 by rpki-client