Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23147906D2DA11EFB408DE42762E951A.roa
File: 23147906D2DA11EFB408DE42762E951A.roa (raw, json)
Hash identifier: oTL1em1mJAkUNC4eqtEQorBksBV1UklK4+WCq9GmDbE=
Subject key identifier: 69:31:66:BB:33:F2:CB:9D:11:D3:92:6A:E8:FC:46:EC:B4:69:77:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23147906D2DA11EFB408DE42762E951A.roa
Signing time: Wed 15 Jan 2025 00:46:20 +0000
ROA not before: Wed 15 Jan 2025 00:00:17 +0000
ROA not after: Fri 12 Dec 2025 00:00:17 +0000
asID: 984
IP address blocks: 154.81.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80727 (0x13b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:17 2025 GMT
Not After : Dec 12 00:00:17 2025 GMT
Subject: CN=6787055c-8216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:9b:02:b0:26:9f:dd:9e:c2:ac:94:fa:a6:
6f:51:a1:7d:79:b4:f4:cc:31:82:31:8c:fd:2b:f8:
62:ab:18:b3:02:5a:c2:56:42:92:eb:e7:fa:f5:5d:
26:d5:9a:85:cc:3b:e0:00:90:00:3b:46:01:e4:72:
c1:7b:ac:86:b8:99:b0:b4:a8:d1:c6:58:0e:e9:0c:
7f:dc:8f:ca:52:41:c1:e3:66:ac:68:70:3f:4b:9b:
4a:87:e1:7e:50:dd:bd:34:67:17:f0:a8:96:d9:cf:
0b:49:3a:0f:f6:89:3c:b6:60:1e:36:16:56:42:b6:
0b:2e:fd:f2:8e:99:ca:5b:a4:7d:1f:60:b6:9d:72:
1a:bd:9c:29:83:86:67:67:e0:39:7e:53:33:0f:d7:
08:4b:d5:85:b2:49:31:b2:52:05:e6:21:47:c4:af:
d1:8a:f6:d5:56:30:c4:71:e5:63:ea:2e:ff:cb:62:
ef:ff:98:27:37:fa:f6:de:b1:79:c4:34:35:01:b9:
fd:69:8d:76:b1:75:d3:73:d5:fc:1e:ca:e9:51:03:
eb:37:48:0f:91:e1:f9:10:6d:47:9b:b9:ec:e7:2f:
13:f9:0e:9f:54:f1:88:d1:de:1c:43:ce:ba:81:03:
18:d3:18:91:e8:53:c1:e9:6e:4b:a5:c0:a1:88:9a:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:66:BB:33:F2:CB:9D:11:D3:92:6A:E8:FC:46:EC:B4:69:77:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23147906D2DA11EFB408DE42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.176.0/24
Signature Algorithm: sha256WithRSAEncryption
73:bb:3f:d3:bc:46:7e:a6:53:56:98:15:60:7f:49:f6:58:27:
90:6b:c6:13:8f:63:c8:10:eb:db:5a:df:24:ed:63:58:2c:75:
49:44:7c:86:ef:8e:3f:54:df:f3:d1:87:8e:0c:c6:09:34:a7:
c4:b1:e1:05:fe:72:24:21:8e:35:50:16:74:08:39:91:f0:95:
2d:eb:d6:99:b2:28:91:e4:ad:05:d1:63:e4:81:2b:d3:ba:ec:
a3:1c:02:79:ba:74:22:be:66:b4:8e:de:b6:7e:c2:f8:85:7a:
30:7f:72:60:15:9a:77:e0:3b:da:68:50:84:a9:66:d0:45:a2:
1b:6c:6b:6d:6e:51:1f:68:f3:74:17:3a:31:61:26:81:81:12:
8f:03:7c:17:b2:5b:48:0a:f5:0c:cf:ba:6d:7b:44:57:b7:4b:
f9:46:03:85:da:3d:48:e0:86:d8:5b:0e:8f:eb:cc:cb:82:86:
11:66:06:39:30:69:1c:4c:fe:c1:fa:46:5c:6e:68:ba:6b:09:
52:a7:93:7d:39:60:7f:75:42:3c:79:0a:a7:11:47:8f:f5:e6:
5f:54:0a:7f:05:76:91:ea:14:0a:dd:8f:87:cc:bf:d5:13:71:
da:75:2a:16:4a:7f:f8:cb:f1:94:20:cc:94:bc:62:13:e5:71:
89:31:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client