Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E65CA2C0CE11EFB7430D99762E951A.roa
File: 21E65CA2C0CE11EFB7430D99762E951A.roa (raw, json)
Hash identifier: ZExcSVC4fw85kM13UUf0yAoo7611YSN3zomPOoYdzTs=
Subject key identifier: 45:2C:46:79:70:AB:2B:18:0D:9C:DB:E1:65:03:35:03:95:FA:37:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E65CA2C0CE11EFB7430D99762E951A.roa
Signing time: Mon 23 Dec 2024 01:35:04 +0000
ROA not before: Mon 23 Dec 2024 01:35:00 +0000
ROA not after: Wed 10 Dec 2025 01:35:00 +0000
asID: 984
IP address blocks: 154.83.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73250 (0x11e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:35:00 2024 GMT
Not After : Dec 10 01:35:00 2025 GMT
Subject: CN=6768be48-13a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:52:f9:fc:09:76:9c:0a:55:64:cd:e8:64:
e6:78:41:1f:89:f1:2a:db:b4:28:c5:52:e0:a1:c6:
c7:f5:92:d5:1c:9f:9f:e8:21:9b:28:12:a8:05:ca:
f7:68:b1:90:ee:93:60:99:2a:b1:95:4a:db:e1:81:
22:5b:3e:1f:c8:cb:15:01:86:74:6b:11:25:f0:7e:
13:12:f2:6d:39:17:f9:cd:e4:90:63:30:dc:c1:84:
86:52:45:3c:02:6a:8b:3c:11:a5:57:e2:67:18:f1:
aa:c4:12:81:f3:63:68:bf:66:5a:86:a6:ef:95:4c:
63:83:7e:5f:cf:2a:63:24:bf:2a:45:1e:07:f5:45:
42:88:5b:13:3b:a9:47:5c:2b:ea:99:0d:f2:af:43:
8b:53:e7:f1:ac:5b:13:c0:42:d4:13:92:64:cd:a9:
ba:f8:3d:39:0f:68:0e:8c:92:5b:d7:c7:37:ac:6e:
2a:f7:d1:64:99:ae:ca:bd:44:06:46:d8:1c:92:65:
22:82:ea:34:ac:1b:e6:70:4b:88:23:2b:65:7e:41:
fa:e4:ea:a3:f5:6c:d2:13:04:16:c9:31:9a:a4:f3:
a9:b3:94:c2:13:47:f3:40:a1:c2:54:d9:7b:d5:d1:
72:79:7d:53:ca:b1:23:6d:48:d4:d7:87:d2:28:08:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:46:79:70:AB:2B:18:0D:9C:DB:E1:65:03:35:03:95:FA:37:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21E65CA2C0CE11EFB7430D99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3f:0c:91:b5:c4:53:89:97:16:30:5c:6e:78:a0:1c:9b:67:
b5:4e:7e:61:b0:4d:ec:9f:21:7b:5c:d1:96:b8:aa:84:7a:d3:
df:29:49:11:6a:79:cd:99:73:69:82:72:d2:34:26:2e:b2:47:
76:bf:d7:fa:34:8a:01:78:6a:c0:d4:7b:a2:e5:e3:38:cb:eb:
2c:83:96:d3:e3:52:9d:26:7e:09:3f:71:d0:d3:b1:7b:0c:f5:
fd:cf:23:32:e9:9d:60:32:e6:3b:d6:f4:9e:12:ec:58:1f:c8:
05:c1:2d:6b:94:22:f0:8e:e4:20:0a:2d:9e:c6:06:ba:7c:9c:
5b:e6:51:f7:3c:5b:6e:0f:22:0d:52:dc:68:73:5d:e1:ba:6a:
bd:68:fb:5d:4a:61:f3:98:f0:11:da:57:ba:c3:81:30:36:5e:
2f:31:55:66:12:32:6f:e0:07:cc:84:9a:01:0e:e8:0d:90:9b:
c8:e4:5b:69:b2:10:2c:00:a1:c1:ce:e3:87:57:a0:07:48:51:
9c:0d:65:2d:ab:b1:64:9f:13:14:4c:71:5e:7a:c4:ea:80:8b:
31:4b:dd:f7:7f:53:c1:36:66:5f:77:90:87:8e:29:ea:96:69:
50:52:0d:be:76:d7:ea:85:6a:e7:d3:10:68:e3:f6:e8:9f:6d:
a8:98:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:52 2025 by rpki-client