Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D721582BE9111EFA1FD7592762E951A.roa
File: 2D721582BE9111EFA1FD7592762E951A.roa (raw, json)
Hash identifier: RAioBlyDNzxSGK2PThicEMWEReHVtrcjz51Oll8w5tE=
Subject key identifier: CA:44:72:16:55:80:96:D6:76:D0:C0:03:B7:98:DF:BB:67:8A:76:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D721582BE9111EFA1FD7592762E951A.roa
Signing time: Fri 20 Dec 2024 05:13:41 +0000
ROA not before: Fri 20 Dec 2024 05:13:38 +0000
ROA not after: Wed 10 Dec 2025 05:13:38 +0000
asID: 984
IP address blocks: 154.82.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72718 (0x11c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:13:38 2024 GMT
Not After : Dec 10 05:13:38 2025 GMT
Subject: CN=6764fd05-706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:0e:1f:be:b9:ce:80:d0:90:43:88:2d:a6:
49:e1:dd:bf:3a:7b:4a:cc:04:27:9a:04:20:80:e1:
59:00:66:f3:8e:b7:3b:89:cb:4f:bc:7f:d3:df:9a:
88:61:04:2e:ca:f4:e2:21:dc:14:06:0b:79:ff:b1:
9f:21:f5:8b:6f:fa:e3:24:c4:54:d0:11:3b:a9:2c:
4d:8e:0c:56:17:7b:66:1b:c2:37:df:0d:d7:b0:7a:
55:37:f4:ed:d7:4b:01:cb:ec:78:5a:05:9b:6f:1b:
c3:95:ac:fd:99:9e:61:98:3c:68:77:c4:a5:f0:8a:
a9:26:12:26:94:05:95:f6:4b:69:4c:10:f6:2f:1b:
78:63:04:fb:94:2b:f8:06:2b:16:75:ec:12:20:4a:
2e:71:d3:32:f3:46:32:bc:e3:00:3a:e9:24:7b:ab:
4d:70:54:00:03:5b:86:81:24:4d:69:23:35:02:e0:
93:32:63:cb:9e:bd:a7:a6:a3:7c:99:dd:e7:75:6a:
da:c4:ea:2c:ef:46:04:a5:9e:d5:68:12:93:3c:2e:
25:e0:4b:dc:d5:96:e9:7d:08:7e:45:5d:06:3f:11:
28:1f:97:f7:44:2c:b8:6e:d2:7a:ec:64:a9:ba:42:
46:d7:04:0e:1d:eb:b2:85:bc:e2:ba:a1:a7:4a:96:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:72:16:55:80:96:D6:76:D0:C0:03:B7:98:DF:BB:67:8A:76:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D721582BE9111EFA1FD7592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.180.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ed:ec:13:33:2e:1f:6c:5b:1a:16:8a:83:b5:39:47:33:9b:
85:3b:ec:ed:2d:a0:4b:d4:74:96:61:6a:49:4c:87:4e:cb:25:
84:43:b6:9f:0e:b0:88:bf:57:d5:02:df:5d:03:b5:10:0a:5f:
d0:89:c6:31:c9:c6:14:c1:ee:a6:c6:50:1a:b4:5e:1c:d6:cd:
e7:4c:d3:e8:de:60:eb:ae:f0:f2:1c:f9:d3:4c:3e:54:93:c3:
39:11:1d:2f:94:5a:07:0c:5d:3a:56:20:b1:a0:cb:8f:1d:79:
d8:7b:5a:e0:84:a9:2d:72:cb:81:b3:ac:8f:f3:59:11:e0:1c:
0a:e2:bb:fd:45:6f:ce:9c:0a:04:bb:ed:19:b6:25:8c:b3:b8:
7f:03:12:b0:ce:b9:37:72:a8:7e:ad:11:14:57:2e:82:25:e9:
95:2e:32:41:d9:9c:d0:9b:f1:49:81:18:8b:a6:5b:74:2b:13:
8d:c8:33:49:1d:40:ee:e9:ca:3c:4b:52:b6:9c:d2:dd:77:18:
a5:7b:62:07:9e:38:b0:0a:27:9e:aa:99:f7:29:b6:55:c3:6a:
91:a3:e5:26:5f:08:7b:b7:0f:33:04:74:ea:e9:d1:3a:ac:f1:
b7:94:2c:12:c4:40:de:46:3b:6d:57:3d:be:41:e6:33:21:21:
54:22:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:05:54 2025 by rpki-client