Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E408E4C1C911EF92672D5C762E951A.roa
File: C0E408E4C1C911EF92672D5C762E951A.roa (raw, json)
Hash identifier: 6g8vQuNka1TnRlJYx2rF7bFkyx0/jKH0bh/poP557R4=
Subject key identifier: 94:1A:D0:48:28:C5:42:FB:DE:3C:FB:D0:E0:AD:A2:DF:92:1B:8D:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01224D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E408E4C1C911EF92672D5C762E951A.roa
Signing time: Tue 24 Dec 2024 07:36:14 +0000
ROA not before: Tue 24 Dec 2024 07:36:10 +0000
ROA not after: Wed 10 Dec 2025 07:36:10 +0000
asID: 984
IP address blocks: 154.193.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74317 (0x1224d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:36:10 2024 GMT
Not After : Dec 10 07:36:10 2025 GMT
Subject: CN=676a646e-7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:da:a8:a3:bb:be:c8:c4:39:ca:10:7b:7d:
e7:9b:b0:a2:c4:b3:9e:c4:28:46:d2:32:e1:31:82:
df:5a:e5:ed:b6:f2:1f:97:03:b0:5e:d4:90:4b:d2:
4e:67:f0:6a:d3:ac:d4:1c:91:59:82:3b:7f:4e:59:
c8:43:f9:e8:28:7e:14:38:a2:bb:a2:79:d5:63:e7:
24:91:a6:58:18:55:23:eb:34:b8:d7:b7:97:f7:20:
4d:61:76:f2:33:d6:99:81:97:44:66:11:4d:68:ce:
d5:03:38:47:db:29:92:64:d4:76:d8:78:e4:29:f7:
52:a7:b9:61:44:80:96:58:02:10:4f:53:0a:de:78:
fb:f6:96:62:d6:d7:fd:01:6b:32:e2:7d:be:fd:c8:
47:8b:b5:aa:cd:aa:d5:28:3b:b6:42:de:56:cd:57:
3f:17:23:bb:0c:a9:0f:81:fb:8f:5e:0c:79:51:ae:
4d:ab:c6:5f:02:ee:e6:ec:28:ab:ed:aa:f0:d2:7b:
67:15:df:f7:7a:d3:1e:57:7b:d9:81:44:c4:50:50:
ac:fe:85:93:81:7b:b5:57:5d:3c:30:16:b3:51:cf:
bf:58:d8:8d:2c:1a:37:a6:7c:ea:fe:1f:77:0a:57:
12:28:7d:36:92:6c:1b:16:d0:47:c4:d8:38:31:55:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:D0:48:28:C5:42:FB:DE:3C:FB:D0:E0:AD:A2:DF:92:1B:8D:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0E408E4C1C911EF92672D5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.198.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4d:00:26:90:4c:45:be:64:77:c5:17:f1:34:12:c8:fc:ab:
51:5b:72:1d:d0:7c:e3:d1:ab:67:1a:68:db:97:03:f5:ed:9b:
71:bf:54:39:5c:02:48:3e:16:0c:26:e0:07:0b:c7:b5:f8:96:
6c:2f:5f:47:0c:43:68:71:eb:52:4b:3c:31:86:0e:7a:65:51:
31:68:8a:3f:9a:10:11:4f:2c:cb:59:6d:d3:6b:30:be:d8:e3:
10:f7:d4:78:4b:84:ed:ab:49:3f:57:7a:76:46:d1:7d:db:8b:
7c:4d:ad:7c:1a:b0:f9:51:d0:60:b3:e9:de:21:cc:4f:3f:84:
60:af:70:b8:08:7b:c1:93:a5:37:9d:a6:c7:aa:40:68:dc:54:
9b:45:de:72:ee:24:d6:2f:d1:bc:7c:27:e2:1f:94:c7:2c:4a:
72:7e:3e:48:c8:7d:b1:2d:1b:01:e9:f7:e8:f5:a2:3a:98:cb:
70:fc:cb:c8:85:83:04:46:ce:e4:0a:af:c8:e5:90:02:fb:46:
b9:76:55:76:95:4f:f7:3d:4d:26:be:db:5d:48:2f:6c:10:3c:
04:10:0b:da:68:fe:32:2b:50:a0:b4:46:61:2a:e7:79:c0:8f:
f7:ae:3e:d2:4a:8b:8b:9e:bc:f4:c4:30:73:54:f6:e1:ee:f4:
23:0e:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client