Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE113CAF44011EFBF545F46762E951A.roa
File: 1FE113CAF44011EFBF545F46762E951A.roa (raw, json)
Hash identifier: AOA8kEceiM4kHI2v48gcBpAxcmXEQbec6OLg0B9bDYY=
Subject key identifier: 96:BC:CD:AC:35:97:65:C4:C4:B4:87:18:F3:D0:65:07:F5:C0:CB:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01634F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE113CAF44011EFBF545F46762E951A.roa
Signing time: Wed 26 Feb 2025 12:49:32 +0000
ROA not before: Wed 26 Feb 2025 12:49:28 +0000
ROA not after: Sat 19 Feb 2028 12:49:28 +0000
asID: 17561
IP address blocks: 154.82.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90959 (0x1634f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:49:28 2025 GMT
Not After : Feb 19 12:49:28 2028 GMT
Subject: CN=67bf0ddc-4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:9e:5f:04:8d:ec:78:80:48:4a:5d:38:fd:
84:8d:0c:63:84:1f:9c:cd:11:7f:ae:a4:38:78:3e:
78:3f:56:22:cd:e1:95:e1:06:66:36:9a:93:97:cc:
29:62:22:3f:71:f5:f0:59:83:38:a4:ec:71:1c:26:
8f:1f:b3:16:a2:be:0c:14:b8:d5:41:36:37:0c:a1:
c3:53:74:d7:80:f5:14:84:9e:5c:9f:49:e6:ed:d3:
5b:65:58:33:b9:1d:82:12:59:14:cd:98:95:34:91:
a1:01:37:75:d6:0d:88:90:19:72:a5:51:f4:26:e8:
c9:dc:0f:6a:e5:f7:48:67:f6:95:e1:5a:ec:57:16:
43:4f:2c:5e:4c:ab:66:06:44:47:8a:3b:bd:6f:cf:
6f:a8:d5:5e:25:12:71:83:98:a2:94:f7:a5:c1:95:
81:86:73:73:61:e4:f8:1f:20:84:04:55:39:4b:11:
14:ec:66:1a:b4:2b:b7:7a:dc:fb:99:08:bb:af:da:
4e:19:56:5e:8c:eb:d6:77:e2:2a:26:34:64:0b:e9:
71:2e:84:f0:c0:94:a6:71:b0:a7:08:dd:11:86:7f:
d1:80:1e:8e:1a:51:10:04:27:5e:d1:f2:b1:a8:4e:
07:7d:c3:65:7a:f3:b8:05:85:26:5d:43:86:41:ca:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:CD:AC:35:97:65:C4:C4:B4:87:18:F3:D0:65:07:F5:C0:CB:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE113CAF44011EFBF545F46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e6:5a:76:9c:a4:ca:4f:59:e8:a4:2f:d0:3a:f6:68:0a:88:
78:c6:1c:f0:cd:c3:66:57:f1:02:80:3f:99:d7:83:0d:ab:fc:
36:74:f2:75:8c:65:0d:84:35:4a:e4:21:8e:33:97:06:d7:62:
44:5a:2d:9f:cc:b0:3f:35:c8:23:62:38:55:e3:1b:58:e6:e9:
e2:7b:29:1b:78:00:fd:c0:9e:4d:28:ce:2f:5e:44:ec:da:58:
b9:a2:6a:63:44:df:43:b5:d2:57:5b:22:f5:29:78:da:31:b0:
b6:eb:b5:2c:1e:ae:62:a4:a9:e2:bb:34:a4:16:3b:32:74:b5:
4d:f1:3b:c7:80:be:65:b3:e9:69:5d:ce:78:1c:d4:35:dc:1a:
3b:92:8e:25:75:28:7a:c5:fc:72:35:e0:72:0a:48:69:45:3b:
7a:fc:26:5e:ad:97:4b:f4:dc:b8:8a:f1:89:17:95:82:9a:d3:
77:22:10:b7:96:5e:67:1c:c5:59:e6:5b:ad:a0:49:07:fe:be:
0f:c3:11:03:9b:99:40:59:00:27:e6:81:76:9a:8d:95:1c:41:
4b:f0:7f:66:1b:8e:a3:01:20:33:f6:65:19:84:23:82:2a:1d:
7f:44:f5:e5:16:e3:8c:36:f7:f5:0f:20:4a:f6:6f:67:11:4c:
f9:6f:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:44 2025 by rpki-client