Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5433DBECBE9111EF8A1F4694762E951A.roa
File: 5433DBECBE9111EF8A1F4694762E951A.roa (raw, json)
Hash identifier: F1I1QWWSS0OG+BbWke1R4PzydX9wWQIbVYFbVBxQ8Ls=
Subject key identifier: 8D:70:7D:1B:20:BC:2E:47:4C:6C:84:A1:B9:AE:9B:B4:29:51:33:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5433DBECBE9111EF8A1F4694762E951A.roa
Signing time: Fri 20 Dec 2024 05:14:46 +0000
ROA not before: Fri 20 Dec 2024 05:14:43 +0000
ROA not after: Wed 10 Dec 2025 05:14:43 +0000
asID: 984
IP address blocks: 154.82.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72720 (0x11c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:14:43 2024 GMT
Not After : Dec 10 05:14:43 2025 GMT
Subject: CN=6764fd46-2cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:2c:61:e7:89:41:6f:92:c4:3b:82:f7:9c:
6f:27:ac:44:37:bc:35:da:4b:9d:eb:09:01:26:bd:
c4:1e:6b:87:9f:4c:24:83:76:95:40:36:ab:26:1e:
c9:91:aa:e5:a6:f8:ab:a5:ab:48:c5:d6:e3:cb:24:
b7:68:5e:3b:ae:1e:8a:e9:02:30:2c:be:9e:36:0e:
ae:07:5f:89:b8:f1:e2:fa:a3:59:29:14:7f:8e:e6:
9e:40:9d:72:3b:97:fe:ad:bb:a3:41:62:54:2a:64:
2c:f3:31:9c:2b:85:bb:aa:26:2b:bc:56:76:93:40:
10:8a:d8:fd:ca:95:c2:5d:9d:ff:43:cb:27:db:9b:
2a:09:6e:3f:3b:e5:10:64:82:3a:3f:4e:d3:fd:c1:
52:83:29:f5:f9:7d:7d:1c:2e:bd:39:50:8c:4b:af:
cd:dc:95:b1:b5:bb:89:2a:2e:25:82:17:6b:ac:d1:
34:94:66:06:7d:6d:15:af:34:8b:de:e9:bb:52:33:
f7:da:83:f2:8f:d7:c8:d6:7f:29:85:72:df:db:4b:
e2:a5:f2:53:4a:05:4e:a5:d6:b2:3a:07:07:b8:33:
0a:d3:a6:4a:6d:e0:be:ff:8b:7a:27:6c:fc:bc:47:
81:c1:b2:8a:f1:42:ec:20:f1:e4:c4:d2:cc:cf:fa:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:7D:1B:20:BC:2E:47:4C:6C:84:A1:B9:AE:9B:B4:29:51:33:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5433DBECBE9111EF8A1F4694762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.181.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bc:4b:06:8f:ef:1c:6d:c9:d4:12:21:f1:2a:a1:76:46:e8:
d7:6b:8e:f1:f4:52:db:c5:4c:21:73:0f:78:09:b4:86:14:8d:
b2:56:59:47:af:1d:aa:56:1b:c1:b5:10:16:d0:a7:cf:f1:f5:
5f:2e:b8:a6:f4:05:32:b2:a6:bd:7f:bd:1a:a6:f2:f0:f0:be:
08:d7:ff:84:b4:b8:88:c3:6b:c2:a2:9a:3c:ba:b1:ad:9a:7b:
91:f8:23:0c:5b:5a:a0:4b:66:91:6c:21:51:ba:bb:6b:c0:ff:
41:7a:dd:d2:c9:aa:f3:21:42:37:fd:4c:f3:30:42:63:47:f2:
b1:82:e8:0e:60:25:2a:79:7d:d9:b2:37:86:0d:6d:10:a5:33:
e2:df:ca:72:c6:36:ab:27:d7:d6:c9:fc:d4:1f:9e:86:26:b8:
63:f9:3d:cc:26:8d:7d:ea:f1:f0:8b:3d:fe:89:c2:c2:f5:d3:
ce:20:a0:7c:e9:4c:43:0f:1f:93:99:1c:53:ae:ae:a7:e9:50:
f5:88:f7:d0:d5:94:59:61:88:f0:69:09:d4:5f:5c:92:cb:a2:
f7:0a:94:2e:fd:96:48:87:b7:02:b2:2a:07:03:b1:f7:a7:5a:
6a:8d:bd:80:1c:1d:1a:e5:92:03:5f:1e:53:51:76:58:38:e8:
01:76:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:25 2025 by rpki-client