Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/740F4B0AC40D11EFB7A4C358762E951A.roa
File: 740F4B0AC40D11EFB7A4C358762E951A.roa (raw, json)
Hash identifier: mlbt7I+I13/KGZ/nGIurp/tb15dLuY+LRV2WL79P0Og=
Subject key identifier: 27:BF:DF:6B:50:B7:34:5A:64:64:7B:A9:C2:F4:03:9D:22:F9:F8:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01292D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/740F4B0AC40D11EFB7A4C358762E951A.roa
Signing time: Fri 27 Dec 2024 04:45:53 +0000
ROA not before: Fri 27 Dec 2024 04:45:50 +0000
ROA not after: Fri 12 Dec 2025 04:45:50 +0000
asID: 984
IP address blocks: 154.196.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76077 (0x1292d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:45:50 2024 GMT
Not After : Dec 12 04:45:50 2025 GMT
Subject: CN=676e3101-d301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:bb:09:9f:73:03:ad:8a:ad:eb:f3:0a:5e:
5d:81:7e:a1:ce:44:dd:e4:74:44:e6:66:0d:c6:60:
6c:c2:82:7d:1d:1f:60:b0:a3:1b:ce:2b:95:8c:76:
a2:b3:6c:fd:8d:a5:80:15:bf:33:d2:23:49:f0:0d:
be:4f:a9:a3:85:8f:bc:18:d8:aa:8c:1c:37:cf:ea:
4c:71:5e:77:70:d5:99:25:b8:8b:75:3e:d2:a9:cd:
98:fa:7c:94:cc:05:99:21:a0:f3:07:4d:fc:6c:61:
8f:7b:c5:50:ad:9d:1e:0c:fc:e7:2f:8e:51:8e:a7:
82:dd:a6:fa:c0:c0:95:8d:58:a8:5e:c1:cc:12:a9:
67:e3:71:f9:3c:91:6e:14:78:57:76:cb:d0:60:d4:
ac:01:64:1a:da:a0:af:b0:26:52:83:89:8c:9e:b7:
00:48:82:0a:16:e7:0f:3c:46:21:88:16:69:a9:df:
73:92:7b:b3:a9:6b:89:0f:2d:31:4c:56:8a:f1:a6:
1d:fe:87:dc:bd:08:62:88:0b:a2:df:c8:24:92:f1:
58:dc:0f:85:35:f2:f6:a7:a0:86:e7:c3:86:0e:51:
ab:c0:c5:aa:36:85:a4:42:87:58:d2:de:4e:5f:31:
1e:79:be:50:3d:87:8a:2e:9a:54:c8:10:a3:eb:e6:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:DF:6B:50:B7:34:5A:64:64:7B:A9:C2:F4:03:9D:22:F9:F8:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/740F4B0AC40D11EFB7A4C358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b9:e8:ca:fb:bc:47:ac:c2:c7:32:00:48:08:af:61:99:91:
b1:33:cf:8a:31:b1:9c:cd:f5:62:fd:12:6b:8a:5e:37:c1:76:
8a:92:2a:c2:c5:f6:a3:a0:f5:d0:3e:1e:07:5e:c3:22:50:4b:
af:19:c3:3a:b8:5d:fe:f2:2f:71:4d:05:fb:d8:16:b8:07:e8:
fc:ee:23:f8:87:c8:c9:a7:10:9b:ec:51:21:f1:79:d0:f7:8d:
33:fb:dd:8f:a7:e0:7a:59:01:b4:2e:72:53:bb:11:0e:8d:90:
79:e2:6a:ae:50:ac:5c:6a:1b:d2:ca:a5:ae:97:3a:a3:20:6d:
dc:b1:be:1b:ba:d7:38:e6:10:f4:3b:b7:27:2a:2e:2f:f5:d4:
44:8f:67:f8:a3:79:0f:69:1b:b2:f8:44:d2:63:e8:0f:db:53:
86:70:2d:c6:e2:6a:bf:07:4f:21:2d:7e:9d:c2:d5:1a:9f:89:
2b:7e:2d:46:b9:3e:c2:10:74:0e:71:f5:37:3b:7b:18:aa:c2:
e0:85:7f:f6:51:f8:6b:e2:ca:69:32:10:9b:b1:37:d0:95:e7:
e3:c8:1a:c2:32:73:e9:64:32:cb:a2:40:75:8e:f1:f9:57:15:
3f:5f:0a:70:bd:29:a7:8e:f7:21:12:dc:97:ad:93:48:1a:04:
58:85:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client