Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D353C140C26911EFB7B20563762E951A.roa
File: D353C140C26911EFB7B20563762E951A.roa (raw, json)
Hash identifier: toRwv0zT2l6RAan4saJ1/wX946U3Xo4dSLwr5bEBhug=
Subject key identifier: 0D:18:36:17:54:9C:36:EC:14:4A:C8:D2:FA:A2:8B:DB:1D:69:97:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012414
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D353C140C26911EFB7B20563762E951A.roa
Signing time: Wed 25 Dec 2024 02:42:05 +0000
ROA not before: Wed 25 Dec 2024 02:42:01 +0000
ROA not after: Wed 10 Dec 2025 02:42:01 +0000
asID: 984
IP address blocks: 154.211.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74772 (0x12414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:42:01 2024 GMT
Not After : Dec 10 02:42:01 2025 GMT
Subject: CN=676b70fc-8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:66:77:c4:9a:7c:90:90:e2:fb:e6:6b:ed:
10:17:b0:c1:c6:3d:19:42:5d:46:a1:e0:6b:f4:0a:
db:f3:95:4a:fd:78:4a:e5:de:b5:f7:b4:ca:46:8e:
46:ef:a3:cf:bf:03:63:ec:f0:c3:ac:64:fb:69:17:
90:d9:a9:8d:81:2f:96:a0:96:cc:fb:0b:65:f3:3d:
60:07:56:37:02:7d:8e:7a:df:7e:00:d6:6e:0d:fc:
c6:cb:c5:d4:13:51:4d:5f:2e:22:82:f0:c0:82:0d:
cb:47:8c:f0:fc:dc:b1:22:84:79:e6:e2:86:44:4a:
10:71:aa:a6:a3:61:44:73:74:58:68:93:2d:cf:3e:
ce:b5:8f:80:c2:83:3f:77:6d:0d:7f:2b:ef:91:6e:
08:39:a6:52:61:06:dc:7a:14:b2:29:4a:5f:28:da:
96:01:d1:76:d9:7a:40:cd:a4:d1:49:43:7a:95:23:
09:2a:38:40:66:05:27:2a:a4:ed:34:81:32:ed:12:
43:2f:8a:84:25:d8:94:36:92:b0:eb:37:d8:10:04:
85:c5:50:e6:b0:13:08:5e:9a:f0:15:a0:1e:07:2a:
71:5f:01:b7:d7:00:f2:61:22:ff:5d:6e:a1:91:97:
64:07:6e:cf:61:b0:2b:1e:db:c6:8c:89:dd:56:29:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:18:36:17:54:9C:36:EC:14:4A:C8:D2:FA:A2:8B:DB:1D:69:97:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D353C140C26911EFB7B20563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.150.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0a:62:fd:e1:d5:58:e0:a4:4e:71:77:da:45:e5:9d:1d:35:
90:80:18:8b:88:28:be:22:7e:8d:e7:ed:db:dc:c6:57:7b:69:
06:05:75:30:25:52:03:30:49:38:51:c4:f2:eb:cd:ec:4c:23:
08:09:05:7a:5f:b2:d2:3f:ca:75:b9:5c:c8:73:4b:ce:fa:8d:
27:cc:93:ec:24:d5:01:11:3d:12:35:a4:fe:e8:fa:22:01:c4:
25:53:68:b8:00:63:54:dc:e2:64:92:57:ba:97:d6:3d:60:1f:
c6:61:aa:64:a0:3d:5d:bc:37:42:a8:b1:4d:93:82:c5:a6:b1:
d2:30:d1:16:2a:d3:17:12:f5:dc:b3:53:86:a7:94:67:4c:2b:
9b:86:1f:87:9a:11:fc:71:cd:fe:f8:be:62:74:28:a8:3b:d9:
af:e9:d5:bf:7f:84:b5:b7:1a:85:0a:00:fa:66:fb:ca:56:38:
7b:88:94:d9:e4:0a:09:4d:32:fc:1e:08:b2:af:bf:aa:55:c1:
3f:41:a7:ae:d8:6c:1e:85:30:63:27:a1:49:f1:10:23:2e:50:
66:db:9c:d6:99:7b:7e:3d:14:f9:2d:e1:fc:0c:d9:3f:74:16:
ea:9e:5c:c1:66:f8:c3:d6:9c:7a:82:4e:c8:59:51:f5:e8:b0:
b0:a5:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:45 2025 by rpki-client