Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D0F4D2F35C11EFA0D077AD762E951A.roa
File: 67D0F4D2F35C11EFA0D077AD762E951A.roa (raw, json)
Hash identifier: uhADT3Y4s5vh3Yu/ctFccxxoVjsd50Xtf8NLNSGvlxM=
Subject key identifier: 36:91:60:EE:2A:72:28:0B:4F:15:6D:BF:5A:20:5E:A0:8E:06:8B:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D0F4D2F35C11EFA0D077AD762E951A.roa
Signing time: Tue 25 Feb 2025 09:39:28 +0000
ROA not before: Tue 25 Feb 2025 09:39:24 +0000
ROA not after: Sat 19 Feb 2028 09:39:24 +0000
asID: 17561
IP address blocks: 154.83.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89614 (0x15e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:39:24 2025 GMT
Not After : Feb 19 09:39:24 2028 GMT
Subject: CN=67bd8fcf-b6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:69:c1:fd:b4:93:0a:cb:c1:cd:a9:bf:d0:
be:34:6c:bd:58:be:a7:b8:71:41:be:36:4f:c0:89:
e0:20:18:b4:69:6c:f5:24:cf:d2:b1:e5:d0:92:81:
f1:ad:7b:3e:9b:41:1e:c8:11:17:4a:b5:85:b8:4f:
f4:69:7f:01:01:fc:54:63:f1:e5:33:83:66:51:3d:
c0:5c:d6:34:23:6b:50:a7:cf:28:ad:7e:76:06:ee:
5b:df:67:9e:be:dd:93:e4:15:46:a7:a9:24:f8:f2:
2c:84:0b:50:80:b1:c8:a3:7f:29:ac:d3:6a:8f:40:
96:6d:69:d4:42:79:c3:0b:dc:50:08:3d:12:41:95:
d4:5c:f7:b7:57:2c:b3:c2:a4:bb:ba:b1:39:5c:c6:
f8:49:cc:ae:04:1a:1f:72:7a:58:7b:dd:69:50:ea:
a1:ae:e6:14:cd:26:74:c2:9b:b0:65:1e:eb:63:73:
68:c8:75:0d:a2:95:1a:46:bc:98:b7:9a:56:00:00:
3d:00:35:64:36:50:70:51:83:74:12:ac:8e:1c:0f:
5c:c3:ac:d4:74:3b:c6:3f:85:85:02:a2:06:38:45:
5d:d8:d0:6a:21:d8:31:23:44:05:ae:e1:a4:24:89:
70:a7:e3:7f:fc:c4:16:46:db:ed:42:75:d6:30:7f:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:60:EE:2A:72:28:0B:4F:15:6D:BF:5A:20:5E:A0:8E:06:8B:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D0F4D2F35C11EFA0D077AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.77.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f1:e3:13:50:a7:44:a8:a8:03:e4:a1:a4:30:af:54:df:78:
0d:f1:60:0c:57:eb:07:81:49:60:f3:9a:be:33:ad:21:31:a4:
1a:dd:f3:1b:4b:74:4e:89:84:99:ad:f5:47:ca:2e:45:b8:6d:
eb:8d:fb:e1:b9:4d:7a:7e:ef:18:fc:51:07:7f:9b:4e:06:f8:
f1:d3:c5:37:fe:1d:80:10:fc:24:5c:04:7d:7e:65:14:a7:cf:
95:2d:ad:29:d1:cf:f4:b7:01:f5:03:5b:1f:4e:72:a3:37:ad:
a9:ae:89:ee:40:69:1e:34:43:dd:e6:e2:38:81:e6:d3:ac:e8:
64:28:b5:5c:4a:e5:d5:7a:c0:ae:ac:f7:10:da:d0:fc:9e:da:
3f:c0:04:2a:55:f2:66:9f:7d:0d:b1:57:3e:ff:05:1f:5d:67:
5d:f6:b0:10:63:be:d5:fd:52:9e:e7:c9:d2:ac:09:2c:1a:1d:
89:41:c8:ae:23:31:59:d8:9e:87:b0:84:ee:c3:36:68:46:d2:
58:ce:63:d0:27:ab:1f:90:cf:61:64:80:da:74:f6:dd:cc:2a:
53:26:70:0c:1a:d4:60:6f:39:21:8a:65:cc:62:e5:da:ea:9e:
3c:56:2b:8e:be:a2:48:de:f5:0a:8e:6e:bb:57:da:70:a0:a4:
76:82:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:01 2025 by rpki-client