Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0378762C0CB11EFB1F6B487762E951A.roa
File: C0378762C0CB11EFB1F6B487762E951A.roa (raw, json)
Hash identifier: VlHBsLx4YMyFTRki6Cf97XCub5dzqqk71gFsZl4//hA=
Subject key identifier: 6B:A7:7B:BA:68:4E:79:03:10:94:CA:5D:DB:11:7D:42:37:35:94:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0378762C0CB11EFB1F6B487762E951A.roa
Signing time: Mon 23 Dec 2024 01:18:01 +0000
ROA not before: Mon 23 Dec 2024 01:17:57 +0000
ROA not after: Wed 10 Dec 2025 01:17:57 +0000
asID: 984
IP address blocks: 154.82.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73218 (0x11e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:17:57 2024 GMT
Not After : Dec 10 01:17:57 2025 GMT
Subject: CN=6768ba49-d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:4c:02:06:9a:1b:5a:11:f3:52:36:52:e5:
3d:ec:18:62:08:ee:28:ea:c7:ef:30:23:86:43:08:
d7:4e:2f:b8:6a:4b:f7:bb:da:cc:f8:ee:a6:c6:56:
1d:de:86:16:46:b9:76:22:6a:b8:06:03:9d:42:01:
9d:52:8a:7d:a3:25:94:d6:3a:8e:6d:29:90:be:e6:
16:a4:35:d0:ff:15:d1:79:f6:43:11:c3:b0:f1:3e:
bd:76:09:52:d7:9d:de:f4:2c:2e:bf:59:2a:84:52:
95:91:ba:b2:e1:2b:fc:db:b5:4e:78:a5:2b:4b:22:
8c:21:1c:28:46:89:37:2e:07:72:2a:c3:c0:99:69:
e2:9d:4e:66:dd:56:92:59:6e:c9:d1:84:a4:60:ec:
da:5b:20:f3:c0:d6:b0:83:d8:0d:60:88:22:04:6a:
e8:8c:bb:d6:4f:59:be:87:45:89:0a:a7:1b:1c:85:
d4:25:c1:b0:d4:e2:5a:40:71:f1:09:e0:78:08:9f:
ac:ab:ae:2a:ae:53:69:8e:82:9e:15:1e:28:ed:9f:
4d:58:0e:43:44:c8:10:1e:a0:25:1b:31:65:f5:87:
49:0f:55:c7:74:e4:d0:84:de:d5:8a:2d:37:aa:87:
a1:ee:3a:e6:66:28:2c:bd:50:df:6b:bf:52:cd:19:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:7B:BA:68:4E:79:03:10:94:CA:5D:DB:11:7D:42:37:35:94:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0378762C0CB11EFB1F6B487762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b7:3b:be:a7:7e:60:3c:20:b9:f4:07:ec:8e:ef:61:ff:43:
ec:57:09:3f:b5:09:8a:f8:13:bd:8c:f5:35:c2:18:bd:35:73:
39:e2:0c:13:ea:57:c3:0d:0d:33:18:3f:17:25:76:e6:b9:e1:
f8:22:fb:ba:83:13:97:97:53:a2:86:e8:55:a3:f2:82:aa:eb:
af:61:4e:29:01:92:f9:c7:07:43:66:e8:54:d7:4d:f9:b4:f4:
2b:1c:d5:fc:3d:b9:9e:75:56:22:26:0a:15:f4:0f:fc:a5:09:
29:b8:f5:ec:06:6f:9e:f6:f5:87:95:fa:53:af:e2:1b:eb:1a:
99:c0:4d:37:07:37:7c:d2:70:2a:36:f5:b5:33:cd:65:d2:8f:
0e:62:47:f0:bd:c1:5a:3a:3c:56:d1:19:1e:e8:c8:ef:0c:e0:
2f:2f:61:0c:bd:6d:bc:6d:11:0d:ac:e8:d7:cc:02:d8:85:41:
e5:95:7c:6f:78:ff:9b:7b:0f:37:d9:25:68:8f:32:5d:80:0d:
a3:cc:1c:00:c0:0f:04:f4:92:ee:f2:70:40:96:10:6f:d2:1a:
bd:77:a8:4f:d6:91:98:0f:7a:8c:66:56:ab:77:5e:0a:e4:50:
87:b1:e3:71:4e:9e:d9:77:f8:3e:be:38:0d:4e:d0:6c:63:aa:
a3:2c:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:32 2025 by rpki-client