Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CD205CC1CF11EF8303A27E762E951A.roa
File: 74CD205CC1CF11EF8303A27E762E951A.roa (raw, json)
Hash identifier: DaIRRFYjGgwA07mejoeShxwopZCjQGyifA3XfBTQsL0=
Subject key identifier: 21:CE:99:F6:9D:3F:71:AC:27:8E:95:B0:0D:E2:81:7E:DD:FA:DB:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01228F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CD205CC1CF11EF8303A27E762E951A.roa
Signing time: Tue 24 Dec 2024 08:17:03 +0000
ROA not before: Tue 24 Dec 2024 08:17:00 +0000
ROA not after: Wed 10 Dec 2025 08:17:00 +0000
asID: 984
IP address blocks: 154.193.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74383 (0x1228f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:17:00 2024 GMT
Not After : Dec 10 08:17:00 2025 GMT
Subject: CN=676a6dff-9fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:04:da:69:14:12:08:3c:80:44:d1:06:67:
5a:a6:16:7a:fe:ba:8a:e3:29:ee:2c:8c:e6:f6:5c:
ab:5d:af:74:67:c6:ab:b1:4a:10:29:ed:fb:ec:3c:
da:e0:51:26:8e:fd:ab:15:4c:fe:e9:d1:03:93:8d:
07:e8:0b:a6:a5:5f:dd:e1:06:e9:ee:0c:7f:2c:f0:
eb:af:91:74:bd:28:b1:11:1f:42:62:9d:3c:31:fc:
7c:66:63:df:fd:cc:90:6d:86:38:0e:8a:08:56:0c:
34:0b:06:be:96:8a:9b:b4:56:56:17:d7:65:82:0a:
49:ee:8e:38:04:87:bb:20:ee:95:53:03:8b:38:14:
c4:a9:8f:38:de:9a:20:45:03:17:9e:b5:a2:92:70:
02:52:c3:c9:b5:a3:d9:e4:df:9c:60:a7:b0:2c:e1:
f3:7f:1b:ec:d9:df:8e:be:3c:49:9e:fa:91:fc:ae:
13:53:74:77:74:84:4c:d4:33:e6:8a:2f:26:58:6e:
3f:82:21:2f:c5:c1:88:5a:25:3f:61:94:81:96:44:
04:08:8d:bb:f0:63:d4:21:a4:5b:a9:4c:9f:53:db:
9b:5b:23:8c:b8:e2:c3:1b:2c:65:0c:1b:16:0b:83:
08:fe:3f:c4:5a:e8:67:b2:fc:82:ad:23:23:50:b1:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:99:F6:9D:3F:71:AC:27:8E:95:B0:0D:E2:81:7E:DD:FA:DB:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74CD205CC1CF11EF8303A27E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:74:aa:4d:9e:c6:a3:bf:a9:ea:44:e2:6d:82:9e:96:d0:b5:
61:03:a5:97:61:74:b3:bb:e3:79:32:6a:32:6f:a3:31:29:a8:
57:03:59:38:59:8c:ff:1a:6b:b9:97:7f:ee:6d:85:9f:a8:ef:
fa:ae:bd:db:65:f1:75:6c:b9:33:56:2a:92:ef:8d:14:4c:38:
e5:09:81:22:40:55:3e:ef:04:14:f8:e5:88:8d:7b:f0:32:d0:
d7:5d:f3:b3:10:a7:6d:9f:f5:2a:a8:f2:6f:ec:c2:f6:ab:72:
9a:c0:72:fe:4f:28:58:bc:03:c2:c6:5d:e7:b1:59:5e:b9:c3:
35:03:6c:5e:23:1e:4f:3d:fb:e6:36:14:3a:eb:fa:2f:0d:2b:
d7:e2:e7:e3:9b:12:46:87:31:a0:cd:5f:5c:08:f6:5b:76:18:
7d:bf:07:44:92:62:08:97:87:05:d9:c6:40:80:16:55:31:d1:
13:10:c1:a1:30:13:bf:10:4a:38:51:85:b4:05:d2:e2:11:b5:
44:46:9b:11:cf:f1:44:7c:69:db:4e:de:17:63:2a:20:af:33:
68:0b:cc:c8:31:8c:c2:79:5b:13:83:39:a0:62:c1:71:c6:7b:
f8:bb:c9:97:c4:fc:d8:b6:ab:78:6b:e4:28:37:74:35:6a:e1:
cb:99:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:29 2025 by rpki-client