Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA4B32F45411EFBE3B0055762E951A.roa
File: 07FA4B32F45411EFBE3B0055762E951A.roa (raw, json)
Hash identifier: 4UNHV+3nvnkzSSuSjA61otBsOI9VF1KD6l0fMEUtvQY=
Subject key identifier: 12:65:00:81:9D:84:37:8D:3B:2F:1D:C9:60:F6:E5:C5:2A:01:AF:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA4B32F45411EFBE3B0055762E951A.roa
Signing time: Wed 26 Feb 2025 15:12:02 +0000
ROA not before: Wed 26 Feb 2025 15:11:58 +0000
ROA not after: Sat 19 Feb 2028 15:11:58 +0000
asID: 17561
IP address blocks: 154.82.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91311 (0x164af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:11:58 2025 GMT
Not After : Feb 19 15:11:58 2028 GMT
Subject: CN=67bf2f42-674f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:d5:4b:90:dd:8d:ef:20:54:69:06:3b:e0:
c7:1e:15:99:9f:f7:79:0e:bf:e0:22:27:8c:18:36:
ea:85:3f:1b:ab:7d:68:df:12:45:0e:09:51:2d:44:
12:ee:25:69:09:1d:3c:e9:70:79:9f:38:cf:8f:b8:
65:47:ab:e8:a1:4d:2f:65:01:42:07:aa:33:5b:75:
3c:52:bd:77:04:9b:c9:45:93:44:e9:d5:de:31:2e:
86:9b:91:1a:78:35:d8:cb:e6:e9:fb:11:c9:91:05:
45:22:59:ab:cf:20:50:dd:10:7b:5b:d1:f0:09:b1:
bf:bf:df:34:3e:ba:f5:ba:4e:cb:b2:7f:08:97:c9:
56:0b:8e:dd:73:eb:01:79:83:d6:58:da:f9:fe:86:
33:ed:8c:a1:87:3f:ce:18:a6:6d:d3:33:fa:65:36:
aa:d2:48:af:87:0e:83:b0:83:82:d5:74:14:b4:8b:
03:07:ad:b6:45:a1:8a:77:a2:2f:d5:64:aa:da:4e:
70:29:88:60:59:0f:82:88:2b:fa:1f:b0:09:ff:5c:
a0:20:40:77:81:b5:4a:98:47:8c:d3:f5:19:64:98:
04:42:1b:05:77:15:12:44:2f:76:01:2f:da:fa:cd:
42:ad:1e:4d:2e:73:ab:c2:82:89:30:43:94:28:77:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:00:81:9D:84:37:8D:3B:2F:1D:C9:60:F6:E5:C5:2A:01:AF:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07FA4B32F45411EFBE3B0055762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.227.0/24
Signature Algorithm: sha256WithRSAEncryption
01:30:f3:b0:5b:c8:b2:bc:78:7f:11:7a:3f:55:f7:6c:93:f8:
4a:21:f6:36:99:08:7e:0f:4a:2d:6f:48:f0:85:20:99:f5:89:
56:5a:cf:fd:bd:c6:8a:53:f8:b1:7e:a8:ea:41:4d:00:9a:63:
92:85:90:70:24:2e:d3:3a:f9:a2:c6:82:f6:04:00:6d:01:a4:
37:55:f2:cf:9c:83:c6:f5:92:1e:66:f7:4d:2c:a2:57:c9:28:
de:4d:25:c2:a5:e6:0e:01:a4:38:fb:ad:38:fe:98:e2:80:50:
72:65:c6:47:25:cb:c0:83:a0:5f:37:19:3c:5f:36:38:2a:26:
69:51:a6:6c:3b:d5:9b:f5:d5:c8:35:31:99:0b:94:55:d0:1f:
d5:61:84:97:28:36:e1:1b:ae:b4:5e:c3:f2:84:6c:c9:30:ae:
20:0e:54:18:f6:94:4a:13:66:29:13:d4:79:25:90:84:cf:bd:
1c:ca:d6:9e:62:8f:90:88:4c:80:89:6b:9f:0f:97:65:4a:a7:
0a:6a:bd:45:2e:3e:f0:c0:cd:e5:fe:a2:cf:c6:6b:7b:88:4c:
e8:e1:2c:9f:60:6a:96:e3:00:03:9a:a3:2a:b6:80:ba:10:41:
5c:9a:a5:84:6c:1c:36:34:05:b1:a9:c6:17:5c:f2:60:a6:a1:
58:48:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client