Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A346653AC0C911EF8FCCBB76762E951A.roa
File: A346653AC0C911EF8FCCBB76762E951A.roa (raw, json)
Hash identifier: wGh7G/XH/7wMT+GY7JTMpPTgkimrSSB03/20iLDznT8=
Subject key identifier: 46:97:52:82:CF:41:4B:5F:D9:C5:BD:A4:65:38:D7:EB:91:C8:4C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A346653AC0C911EF8FCCBB76762E951A.roa
Signing time: Mon 23 Dec 2024 01:02:53 +0000
ROA not before: Mon 23 Dec 2024 01:02:50 +0000
ROA not after: Wed 10 Dec 2025 01:02:50 +0000
asID: 984
IP address blocks: 154.82.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73190 (0x11de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:02:50 2024 GMT
Not After : Dec 10 01:02:50 2025 GMT
Subject: CN=6768b6bd-0f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:ce:f8:ff:48:54:bd:67:ae:65:87:98:d1:
3c:22:07:5a:5f:87:23:37:3d:2d:41:85:23:b3:c0:
91:6b:c4:61:ab:be:45:27:2c:91:25:c5:ee:1a:bf:
c1:15:5d:26:78:61:50:a2:d7:9e:c7:e0:9d:54:e9:
a6:07:29:1b:57:07:fd:3f:36:ed:71:39:f7:de:da:
e4:4d:03:7a:50:d9:45:4f:cc:a4:5c:57:4f:e3:2e:
2d:81:f9:23:74:64:60:59:f1:65:fe:82:d1:5c:94:
d9:9f:a1:a3:c6:88:27:b6:ec:b5:69:3e:ca:7b:9e:
2f:c0:81:54:5f:be:db:e6:fa:c3:a4:d4:65:6c:f5:
f6:2b:34:15:8e:0a:c6:54:7f:b1:91:16:b6:53:20:
7a:8f:45:ac:18:ff:6a:4a:8f:5b:47:01:dc:08:e9:
5c:87:ff:20:34:4f:e6:d9:52:12:c8:37:a4:77:f2:
3f:42:b6:b5:f0:0b:18:6e:98:d7:8b:88:3e:b1:6c:
97:d1:ed:30:d9:c2:b2:4e:b8:78:1b:ba:03:fb:01:
ab:26:b0:90:cd:61:60:fc:4d:0f:e3:0a:f9:09:ac:
03:3a:06:29:fd:c4:af:10:20:ec:c9:d2:fc:0e:36:
71:a1:78:1a:f5:38:30:7a:d5:bc:ec:35:fb:d8:51:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:52:82:CF:41:4B:5F:D9:C5:BD:A4:65:38:D7:EB:91:C8:4C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A346653AC0C911EF8FCCBB76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:29:ff:9b:91:95:d7:4d:96:84:be:80:f0:30:0f:7b:58:2f:
e6:15:dc:87:eb:8b:2a:a6:b8:85:ec:dd:aa:57:9b:81:b2:51:
a1:e5:a3:d1:9c:5e:a0:56:49:03:6f:ec:8f:66:c9:80:b2:09:
c8:46:de:e3:10:34:fa:9e:43:62:94:9f:4d:65:23:9f:3a:4a:
4e:61:bf:5c:4a:fc:68:f1:13:f9:ff:97:b0:52:0f:89:45:74:
52:b1:19:ea:a3:88:a8:58:e5:24:c7:cc:f5:7d:91:90:6e:d5:
f9:a6:7e:a6:8d:2d:80:0e:d3:63:08:ad:a1:e7:3e:46:0e:d3:
c7:6e:79:e4:19:57:d4:7c:cd:57:b4:91:1b:eb:cf:05:cc:ad:
e2:c7:c4:26:99:9f:9e:22:63:94:8d:9e:45:89:2c:0c:3e:ca:
51:61:55:0f:ff:45:6d:37:55:ce:6d:54:c9:18:02:bd:98:ac:
5e:46:2e:f2:91:c5:7f:72:83:cd:7a:33:c9:dc:91:17:5f:80:
a1:4b:9a:e8:20:f8:bd:60:2e:01:9f:69:ee:07:d9:05:8f:9e:
6f:a5:0e:a6:8b:51:ed:fa:0a:02:ff:89:f3:1c:d7:51:f8:ee:
7c:1c:5f:b2:1a:d1:bc:93:5e:94:52:f5:a0:42:df:13:d8:b9:
9f:36:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:20 2025 by rpki-client