Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B091EAF35D11EFB19606B2762E951A.roa
File: 22B091EAF35D11EFB19606B2762E951A.roa (raw, json)
Hash identifier: +JEqC0S4u39n8Mxw3fNcFZH/C9M/tLn7RuFX+EkreNs=
Subject key identifier: 5F:0E:B4:D1:79:71:DA:45:99:2A:DB:B1:4A:62:87:83:45:2E:0D:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B091EAF35D11EFB19606B2762E951A.roa
Signing time: Tue 25 Feb 2025 09:44:41 +0000
ROA not before: Tue 25 Feb 2025 09:44:37 +0000
ROA not after: Sat 19 Feb 2028 09:44:37 +0000
asID: 17561
IP address blocks: 154.83.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89618 (0x15e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:44:37 2025 GMT
Not After : Feb 19 09:44:37 2028 GMT
Subject: CN=67bd9109-2bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:5e:11:56:de:f2:e8:2c:c0:99:d4:8f:55:
93:9e:6c:0c:f9:59:27:0e:8d:94:75:93:8c:49:3c:
13:77:d6:8b:d5:a4:78:18:67:7a:6a:0c:72:18:5b:
f4:06:aa:85:ae:60:3a:b0:e0:39:41:49:6f:77:3a:
10:a7:b3:b1:2e:34:98:e3:81:72:d4:e1:51:9f:0a:
22:42:13:a7:bc:ae:08:43:7c:30:49:95:6a:fb:ee:
a9:80:da:6b:4d:99:11:e8:2a:e0:2a:69:f7:3a:9b:
ef:c1:57:f6:5f:12:20:f4:d6:6b:4b:5b:11:d4:98:
85:c9:e0:b4:c2:f3:f7:57:cf:a9:12:a6:24:6a:b1:
31:7a:57:a6:7c:cc:f7:59:8b:14:00:28:3b:10:08:
85:48:b2:1f:3e:37:93:44:93:61:41:a4:1a:35:5c:
7a:39:69:db:3e:2c:c6:45:6b:47:d9:40:39:62:5c:
e5:28:2d:28:b6:d6:02:05:a6:25:1c:9b:c1:90:a2:
20:ce:d0:d2:fe:35:b1:7d:83:97:25:b5:73:27:4b:
55:a0:86:30:11:3b:bc:51:d7:c1:c9:0f:fa:d1:8c:
62:dd:78:ac:e5:5f:92:1e:94:23:de:89:b8:97:3c:
47:67:9e:72:04:cd:28:e8:f1:7a:eb:29:41:db:61:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:B4:D1:79:71:DA:45:99:2A:DB:B1:4A:62:87:83:45:2E:0D:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22B091EAF35D11EFB19606B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.80.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:bf:cc:71:ff:9e:4c:23:ff:2a:0a:16:ea:f0:bc:c8:56:65:
3c:7d:95:dd:31:2c:5c:a5:9e:88:0e:85:18:90:9d:3e:fd:40:
7b:bf:ca:29:28:33:0e:0f:0e:bd:19:63:1e:40:bd:0d:30:81:
b4:fe:81:14:5d:ae:99:65:26:8c:6d:be:d7:0a:4e:a5:ab:3d:
15:5a:1d:6d:76:b1:1c:3b:23:17:e3:6f:0d:f9:97:97:41:8d:
4f:ff:0e:d1:ce:5d:f0:81:54:72:78:c8:80:fa:5c:3b:8f:1a:
71:d9:88:d4:ac:d7:1a:bc:f8:cb:47:15:a0:16:44:43:05:1e:
24:df:e0:9d:0e:b8:67:23:7f:49:40:9e:68:6a:15:f3:1a:92:
e5:24:3e:fa:57:79:37:99:78:29:84:f8:9b:ec:02:dd:3f:46:
14:f7:87:d7:4a:72:62:90:42:88:91:de:5a:ed:21:ce:43:f8:
d6:4b:69:4b:33:18:16:cc:58:dd:7a:56:72:4c:a2:59:58:47:
f9:43:ec:98:74:63:a0:84:73:df:15:30:f8:5a:4e:bc:cf:96:
fb:7a:b0:3f:5a:df:d9:01:41:f3:e8:32:17:d7:4d:29:51:c2:
18:c9:53:e7:2c:38:d4:e5:94:2c:3f:41:c3:c4:91:9f:96:35:
28:f7:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:44 2025 by rpki-client