Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8321F54EF35F11EFA90EBF43762E951A.roa
File: 8321F54EF35F11EFA90EBF43762E951A.roa (raw, json)
Hash identifier: Vkk9gBKeYLKNg76qIyzztkRgi7bRE50A8GBfSToUDGY=
Subject key identifier: 73:75:A5:77:AD:A0:96:FB:E3:33:D8:B5:8F:44:03:B6:8E:4B:79:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8321F54EF35F11EFA90EBF43762E951A.roa
Signing time: Tue 25 Feb 2025 10:01:42 +0000
ROA not before: Tue 25 Feb 2025 10:01:38 +0000
ROA not after: Sat 19 Feb 2028 10:01:38 +0000
asID: 17561
IP address blocks: 154.83.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89638 (0x15e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 10:01:38 2025 GMT
Not After : Feb 19 10:01:38 2028 GMT
Subject: CN=67bd9506-6d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1b:b8:63:10:99:35:41:e4:6a:cb:ce:67:96:
e5:f8:6c:55:34:19:e8:cb:e7:97:36:0c:7a:40:e7:
10:35:9b:d6:84:38:6a:6d:f8:6b:26:80:7d:60:c3:
77:d4:1d:fa:eb:e4:c5:a5:bb:09:2a:c8:e0:92:44:
30:23:bb:b5:f0:ea:6b:db:9d:1d:8a:bc:c9:9c:b0:
60:f2:2b:7a:e4:dd:04:c6:7f:5c:07:ee:54:64:ce:
d8:45:72:7e:dd:e9:d6:6d:13:5e:5f:a7:e1:f0:d2:
68:88:ea:e2:9c:a9:90:f2:0d:40:51:67:3e:7c:04:
1b:99:59:8b:e8:d5:0c:01:a0:41:fe:9b:24:60:ab:
7f:1d:df:94:cc:b7:9f:b5:3d:9b:8e:2f:61:ae:0e:
bd:eb:6a:e4:aa:3b:bb:7c:d9:2b:d6:94:a6:17:59:
d7:f9:74:86:3b:aa:50:8b:e5:e3:ae:d4:40:13:03:
b0:cb:e9:d9:bb:f1:e7:aa:c5:f2:5a:88:5c:5e:0c:
3a:ad:76:43:f6:cf:7b:b1:d3:3d:02:b5:f0:ce:bc:
f7:3d:ee:da:05:49:f7:eb:83:4d:6a:ef:2c:3c:d0:
4e:89:2b:fe:1f:93:5c:a1:5f:d5:68:00:dd:48:f7:
29:98:8b:84:be:ec:fc:86:cd:ee:66:2a:52:98:f8:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:A5:77:AD:A0:96:FB:E3:33:D8:B5:8F:44:03:B6:8E:4B:79:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8321F54EF35F11EFA90EBF43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.110.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a0:4c:3b:37:5e:f8:75:ae:ba:b5:bb:47:69:ab:4b:59:34:
d4:89:76:7c:41:bc:7e:8f:e1:0d:56:ed:1b:b7:dc:cb:63:a5:
4e:ac:3c:26:f4:28:9b:3b:c8:cb:fc:d2:c5:38:74:04:05:eb:
02:f1:15:d7:23:5f:08:31:cc:ea:7f:70:77:bb:69:a3:b8:bd:
f0:db:66:57:06:4b:d6:e9:03:64:63:c0:72:9c:6f:f9:8a:f4:
bf:f5:a1:5a:a5:36:95:4f:d8:1d:ce:8a:48:5b:ec:91:fa:c4:
f8:8e:b5:ec:a6:20:27:e4:90:8f:84:c1:36:90:61:f7:77:e8:
10:ba:52:ba:83:c2:23:93:f8:f3:75:a8:12:3a:c1:55:12:94:
cc:5e:36:51:e9:35:7f:e1:94:ca:75:3c:ad:d4:28:3f:87:6e:
5d:74:fd:ba:6b:d0:51:a7:60:01:b4:53:09:06:9a:aa:e1:2c:
df:36:08:55:e2:22:8e:5f:43:59:d7:2f:0e:2b:39:0c:f8:38:
70:94:e3:cc:2a:3c:15:03:3b:1b:01:33:23:d9:a0:6c:1c:8e:
8c:3a:02:a5:da:88:48:77:27:1c:ed:1d:e7:b5:00:1c:c4:4b:
0d:d6:75:fa:68:43:e8:a1:69:7d:2d:1e:e0:a3:75:bf:15:57:
b4:fc:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:04 2025 by rpki-client