Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E22868C0C911EF83D50176762E951A.roa
File: 57E22868C0C911EF83D50176762E951A.roa (raw, json)
Hash identifier: wvjLpC4wfWbAciuL73HPa24P1HthvlpskkJOfus+rlo=
Subject key identifier: 71:7B:D1:A0:42:6B:A7:5E:68:72:08:91:8B:21:BA:83:3D:5C:8C:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E22868C0C911EF83D50176762E951A.roa
Signing time: Mon 23 Dec 2024 01:00:47 +0000
ROA not before: Mon 23 Dec 2024 01:00:43 +0000
ROA not after: Wed 10 Dec 2025 01:00:43 +0000
asID: 984
IP address blocks: 154.82.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73186 (0x11de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:00:43 2024 GMT
Not After : Dec 10 01:00:43 2025 GMT
Subject: CN=6768b63f-b1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:a3:5e:e9:e4:ca:06:42:4a:75:f8:fa:a9:
c0:26:60:95:25:ed:49:4f:99:47:c3:b0:99:85:6c:
5f:c8:74:be:b3:8e:64:ac:f7:59:56:b8:8a:31:23:
92:cd:ea:91:a6:ad:08:86:d9:ed:6d:81:12:dc:50:
09:17:11:d3:b9:14:8e:13:a7:02:fe:c5:ae:a0:3e:
56:97:77:50:a7:56:f1:6f:be:53:95:49:ac:39:79:
12:f2:73:c5:3e:bb:aa:e5:46:c8:7f:04:79:95:d0:
00:e2:19:0c:7d:9e:72:d6:13:7a:35:dd:89:2b:c2:
ca:d5:d4:e0:b8:c5:6d:02:d6:8b:86:15:79:94:c5:
e8:bf:cc:30:29:a1:fd:bf:48:2c:6f:f9:0b:4e:17:
2e:f2:dc:7b:27:e3:f8:4d:b3:2a:a8:e5:00:7f:65:
b5:26:92:ec:43:c7:26:67:c3:4e:3f:ca:97:72:4a:
b9:ff:19:2c:6c:4b:47:de:ee:37:4f:9e:43:96:62:
c5:1e:fd:03:1f:53:79:1f:65:90:c7:95:ee:be:13:
cb:3c:a4:f5:e7:e0:2c:bc:44:45:c1:5e:50:bb:ce:
db:8f:ac:00:d2:22:81:d2:b6:0a:df:da:8c:43:1a:
30:5b:9c:ff:f5:c0:72:04:a4:0f:a6:14:6c:7b:b7:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:D1:A0:42:6B:A7:5E:68:72:08:91:8B:21:BA:83:3D:5C:8C:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E22868C0C911EF83D50176762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ad:e8:de:39:cc:fb:d9:6c:42:ab:9e:e8:48:0c:60:ee:4e:
53:ad:65:95:86:ae:12:b5:64:65:e0:c7:a0:d6:14:ad:f0:b1:
b0:52:87:39:bf:3a:1d:06:ed:83:36:31:d5:e7:40:18:0c:7d:
73:2f:ef:db:44:1d:7f:b6:eb:ef:09:95:63:29:03:b6:1e:1c:
d2:3e:9d:a8:df:83:fe:f8:d6:97:e1:19:39:7b:eb:bc:60:dc:
62:66:e9:63:47:18:11:3b:d1:8e:9d:d2:71:56:32:29:65:77:
0f:ee:78:43:17:9c:ca:a5:56:75:4b:5e:08:9b:89:4f:8f:fa:
bc:58:93:2b:1a:a1:d1:db:cb:e6:75:5c:05:ea:01:f2:77:67:
70:68:fa:7a:b1:3b:31:b3:d8:02:06:de:a6:af:0a:2a:3f:8b:
44:39:25:ca:9d:c5:bd:fb:72:db:e1:d4:a4:65:62:fb:9b:f7:
df:0e:fb:34:3c:39:51:71:41:df:72:56:74:96:69:6b:96:16:
0e:8e:7b:ff:28:8d:b2:8e:3a:4a:9c:59:8f:23:69:b5:48:aa:
de:98:7a:5f:54:b5:bb:70:44:d8:97:f4:9d:44:8f:0b:0d:02:
b1:8b:49:c5:90:f7:f4:bb:fd:a3:ed:4d:86:dd:19:11:ac:92:
18:1b:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:09 2025 by rpki-client