Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830AB114BE9311EFAFDB59A1762E951A.roa
File: 830AB114BE9311EFAFDB59A1762E951A.roa (raw, json)
Hash identifier: yldPcEv2WFwJxNrFheWPCUA8OK3yhZ785NAt+cZDFWY=
Subject key identifier: 2D:77:4C:03:84:55:B9:59:48:EF:08:6D:6C:CB:4B:63:2F:BD:49:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830AB114BE9311EFAFDB59A1762E951A.roa
Signing time: Fri 20 Dec 2024 05:30:24 +0000
ROA not before: Fri 20 Dec 2024 05:30:20 +0000
ROA not after: Wed 10 Dec 2025 05:30:20 +0000
asID: 984
IP address blocks: 154.82.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72750 (0x11c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:30:20 2024 GMT
Not After : Dec 10 05:30:20 2025 GMT
Subject: CN=676500f0-c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:65:cd:56:dc:24:e6:52:44:ac:76:92:8d:
5e:b4:4f:1e:fa:e9:bf:5e:9d:78:c9:13:ee:f2:72:
76:53:b8:83:e5:3c:e9:30:10:a3:0f:bd:96:a9:f3:
0b:f6:7f:f2:3e:69:4d:cb:06:b6:e7:67:e8:a8:a0:
2e:80:9c:c3:d5:7f:75:47:37:0e:24:cc:0c:15:c4:
70:3c:62:08:51:bd:18:87:20:71:12:c6:8c:6f:26:
3f:af:01:58:a9:87:27:ba:13:ab:48:27:7c:8a:ec:
fe:18:fd:ec:f2:58:31:20:cc:fd:e9:68:e0:30:86:
48:48:81:55:fb:a7:f7:81:34:a4:f9:62:7c:41:97:
25:b5:39:25:50:95:06:7f:55:d3:e5:03:99:56:19:
49:0a:d7:a1:fe:46:e2:21:00:97:0f:4d:26:76:8e:
b0:db:1e:72:50:aa:d8:65:a2:13:d2:33:0e:5b:3b:
d0:ff:da:42:c4:85:24:6b:82:9c:75:57:db:ce:78:
a9:0c:b3:cb:fb:b6:a8:25:bb:20:54:da:ea:d8:ca:
8d:7c:a2:c7:ec:e9:48:25:29:d8:eb:8c:8e:7c:67:
10:3e:aa:08:38:b6:0d:12:71:d5:d0:04:ca:1d:cf:
98:d6:22:f7:2e:f9:2b:7a:50:08:92:7d:78:dc:d8:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:77:4C:03:84:55:B9:59:48:EF:08:6D:6C:CB:4B:63:2F:BD:49:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/830AB114BE9311EFAFDB59A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.201.0/24
Signature Algorithm: sha256WithRSAEncryption
58:06:f1:97:3d:d5:7d:f5:b6:16:56:7e:2d:7e:2c:b1:38:a2:
15:8a:9c:63:54:25:89:83:b7:05:1e:54:ea:e8:1e:ad:47:c2:
53:a2:9b:e9:ad:72:9e:64:ac:16:97:51:89:21:ac:d7:fb:76:
93:f8:c2:27:c5:db:07:f1:46:02:90:e4:e0:ee:c7:a6:8a:5b:
6d:5a:cd:b2:4a:22:0e:0c:d7:0b:7c:32:c0:46:6a:94:2a:0f:
de:b7:50:13:8f:9d:03:90:e8:46:77:2a:ba:4b:24:ae:ef:62:
d8:e1:c2:91:86:1d:b6:19:86:a7:d9:0e:6b:a1:3e:91:02:9b:
57:0d:19:13:a0:b4:38:f6:47:af:62:55:a5:5c:26:99:d5:b4:
eb:a9:b7:02:bd:7c:4e:fe:5b:8d:b8:69:dc:b8:bd:5d:63:45:
b1:13:56:f2:01:e6:e8:62:ba:01:20:6a:b5:36:c6:a5:fc:89:
67:6e:7e:06:9d:3b:88:4d:f8:07:23:fa:78:23:ed:6c:25:fe:
b1:05:da:4d:4f:0d:f4:fd:90:06:c6:23:3a:de:41:7a:62:53:
ee:47:68:f9:da:11:b5:53:60:28:3c:57:2c:ec:16:48:2e:be:
d5:c5:4e:ab:20:ac:39:23:35:a1:b8:25:62:59:76:45:c6:24:
a4:06:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:51:17 2025 by rpki-client