Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145E47D4C1AF11EFA9F6C1B4762E951A.roa
File: 145E47D4C1AF11EFA9F6C1B4762E951A.roa (raw, json)
Hash identifier: 7yWIzA5+RWjw6xEOlYE89umMkvPsKo9OBHXTqMUaYAY=
Subject key identifier: 72:72:12:01:9D:6E:A8:54:B3:51:96:72:82:7B:D9:50:FC:BA:B3:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01215D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145E47D4C1AF11EFA9F6C1B4762E951A.roa
Signing time: Tue 24 Dec 2024 04:25:18 +0000
ROA not before: Tue 24 Dec 2024 04:25:14 +0000
ROA not after: Wed 10 Dec 2025 04:25:14 +0000
asID: 984
IP address blocks: 154.193.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74077 (0x1215d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:25:14 2024 GMT
Not After : Dec 10 04:25:14 2025 GMT
Subject: CN=676a37ae-bc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:9c:05:f0:56:98:4f:7c:67:86:00:77:b5:
41:a3:c2:70:80:ee:8e:71:1f:ed:98:0a:af:16:e9:
02:c1:03:92:8a:ab:c4:da:11:71:21:eb:25:65:17:
2c:f9:1d:17:53:fb:d9:b9:5c:a6:89:4a:b0:e4:b6:
bf:c8:18:20:10:d1:96:8b:d4:df:6e:1e:81:c1:6d:
31:69:13:72:2f:ce:4c:4d:96:70:27:99:d6:ff:10:
33:3e:2a:b0:b5:2d:d7:65:4c:d4:42:00:12:91:12:
7e:cb:f8:b0:16:4f:ac:52:3b:0c:15:6e:fd:2d:47:
e9:73:ff:3c:c5:bc:ba:e5:7d:c4:e5:db:e2:23:60:
9a:ab:de:14:1a:78:6a:34:31:5b:7e:53:e6:b0:e9:
e5:2a:76:c0:28:f8:5e:25:ff:ee:05:08:ad:b0:96:
d7:fb:66:45:d1:39:ab:33:67:c9:53:00:32:36:89:
b8:7a:23:5b:54:3f:e2:94:d5:36:8b:22:47:3d:be:
80:1f:a8:6a:e0:49:f1:f5:26:c1:60:7a:91:c3:3d:
d4:f3:75:25:01:8d:0b:f0:dc:b1:47:a2:ab:e0:90:
7d:b0:5c:8b:1f:8d:79:86:af:df:60:fc:d6:58:92:
3a:b7:2b:3f:63:f7:10:10:0c:b7:8f:44:36:3c:3f:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:12:01:9D:6E:A8:54:B3:51:96:72:82:7B:D9:50:FC:BA:B3:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145E47D4C1AF11EFA9F6C1B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:17:1c:fb:10:24:26:41:b8:6b:e1:95:43:26:d4:74:f9:95:
41:40:9e:4b:b2:39:93:34:ce:02:3f:95:39:04:fe:66:3f:4a:
f6:17:c1:f8:3c:36:82:05:88:8d:04:12:2d:aa:10:fb:dd:00:
c4:7a:34:c7:bf:3c:69:fc:c4:ff:66:1f:5e:94:e6:31:a2:e3:
fa:6a:ae:30:3f:00:18:e2:58:3a:f6:11:60:e6:97:82:48:80:
01:c4:9f:b0:ca:24:4a:57:4b:d5:a1:57:ad:98:a0:19:f6:bf:
0b:03:8e:ac:c8:85:ad:64:95:dc:d6:bd:fe:fc:cb:bb:05:8e:
76:7c:50:e2:96:2d:00:1a:07:7d:82:ce:df:3a:3c:76:55:e3:
68:5d:c8:eb:2b:0a:01:be:e5:8e:2f:2e:0c:0e:3a:ff:3c:65:
0e:e7:3f:06:56:f9:1c:ea:04:68:cd:1a:70:79:e4:28:1c:ad:
0c:3c:7d:90:2a:42:62:b9:ba:37:fe:bd:0d:6c:59:01:5e:82:
1a:67:a0:5e:3a:95:68:2c:60:35:12:31:c4:f6:bc:8d:ba:8f:
d4:8a:96:5a:b6:ae:d3:07:29:46:41:0a:20:da:5e:5f:b4:f2:
f6:21:35:9a:93:ce:8d:ac:35:ac:4b:15:d3:78:c2:73:82:0d:
f8:8e:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:31 2025 by rpki-client