Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88654E1AC3DB11EFA02E7986762E951A.roa
File: 88654E1AC3DB11EFA02E7986762E951A.roa (raw, json)
Hash identifier: amEUKUurz692d31HWkQEVBE77ZBJEEG0TVKhO7EF8WU=
Subject key identifier: 4A:DA:66:71:0A:E5:CA:67:BF:AB:3E:3E:41:40:8A:1C:E7:0A:86:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88654E1AC3DB11EFA02E7986762E951A.roa
Signing time: Thu 26 Dec 2024 22:48:32 +0000
ROA not before: Thu 26 Dec 2024 22:48:29 +0000
ROA not after: Sun 12 Dec 2027 22:48:29 +0000
asID: 17561
IP address blocks: 154.85.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75946 (0x128aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:48:29 2024 GMT
Not After : Dec 12 22:48:29 2027 GMT
Subject: CN=676ddd40-f894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:fd:5e:d5:44:8c:55:12:ef:e7:16:64:22:
36:29:1e:1f:7e:62:f0:cd:47:e1:fd:e2:73:49:e8:
3e:60:81:fb:7f:02:c8:b2:9b:3a:24:bb:fd:71:03:
41:24:e2:f6:c4:85:47:89:0e:ea:6b:1f:93:3b:1b:
fd:f5:5f:22:d8:ae:7a:7b:40:c1:f8:ab:6f:14:a3:
51:6a:43:34:23:fa:6b:df:50:8b:c6:33:27:64:77:
3c:d9:3a:5e:63:00:5c:79:f8:32:b0:a8:71:c8:80:
91:bb:1b:7e:68:82:66:5c:ee:16:79:49:46:a7:f8:
2d:05:91:a1:45:be:60:b5:40:8e:06:b5:3f:c8:14:
84:90:45:fe:8f:88:7c:e8:15:73:97:d4:dc:8a:35:
3c:86:69:2d:33:7e:14:25:66:b0:23:be:e2:9c:89:
a1:92:eb:5d:3b:9a:9e:e2:07:b9:63:59:9d:5a:a7:
f9:c0:23:e2:18:2c:6d:67:0c:e9:b9:a0:f7:71:d8:
c7:4d:c5:6a:fa:30:fc:51:04:ec:92:3d:ba:a4:1f:
ed:26:09:37:6b:5e:69:48:c4:ec:db:52:35:c7:e1:
71:b1:77:46:db:5f:c9:7f:d8:7b:f8:c3:b0:62:73:
d8:ba:28:8d:68:87:34:ed:df:2c:2a:ca:e0:96:cd:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:66:71:0A:E5:CA:67:BF:AB:3E:3E:41:40:8A:1C:E7:0A:86:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88654E1AC3DB11EFA02E7986762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.31.0/24
Signature Algorithm: sha256WithRSAEncryption
79:01:54:c5:b8:bb:1d:7d:09:fd:30:3d:19:0b:0f:fe:36:00:
80:f0:02:7d:3a:97:dd:56:7e:38:2d:17:5e:a3:39:8a:66:c2:
5b:af:22:2f:0b:f7:db:7b:db:36:f9:74:8d:2f:24:b8:17:9e:
db:6f:c3:7e:0b:29:68:b5:aa:4d:c7:d3:5c:dc:09:88:e5:90:
60:4e:b8:0b:11:e7:78:1e:db:00:d7:d1:5f:15:2f:95:0c:59:
30:7b:b1:0d:17:71:dd:8c:cd:dd:f9:fe:b0:70:66:ff:98:9f:
ed:8c:35:7e:ea:57:52:53:5f:cf:69:b5:fc:ba:a1:a8:3b:e6:
3f:4e:18:1b:50:fe:4e:90:95:68:67:74:39:24:d8:5a:01:72:
a5:0b:4c:dc:63:0e:90:5c:9e:c6:58:6a:49:7d:2c:ae:42:23:
fa:0d:af:e8:76:d4:bb:39:bd:86:58:12:2a:53:b7:e7:69:31:
24:a0:dd:ee:f6:6e:c6:66:24:df:20:f3:93:f8:d8:50:46:1b:
dc:ef:2c:c4:34:88:72:b2:32:85:ea:19:6c:d4:d6:9f:b4:2d:
72:7d:4e:7a:58:a4:2c:93:25:00:f1:e6:30:11:1f:c2:c2:58:
1c:1e:0e:f9:ee:d6:61:c5:55:21:83:4b:79:8a:63:df:9a:21:
6f:68:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:46 2025 by rpki-client