Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89EE02F8C3C811EF8A111B8E762E951A.roa
File: 89EE02F8C3C811EF8A111B8E762E951A.roa (raw, json)
Hash identifier: PrO1QM9TidRtvImFzIvgSCHioT3BAQIq1JBfC2jXuMQ=
Subject key identifier: A3:09:57:D0:1D:23:04:1C:2B:F0:B3:63:84:A4:A1:AE:44:C3:BD:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89EE02F8C3C811EF8A111B8E762E951A.roa
Signing time: Thu 26 Dec 2024 20:32:35 +0000
ROA not before: Thu 26 Dec 2024 20:32:31 +0000
ROA not after: Fri 12 Dec 2025 20:32:31 +0000
asID: 984
IP address blocks: 154.83.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75754 (0x127ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:32:31 2024 GMT
Not After : Dec 12 20:32:31 2025 GMT
Subject: CN=676dbd63-9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:39:0a:c5:12:08:01:84:de:9e:53:3d:f7:
9a:24:3b:be:93:30:ec:4d:c8:a6:82:ba:45:cc:04:
6e:94:73:46:91:13:82:43:b1:32:bc:3f:2f:3f:eb:
82:46:f8:90:11:17:7a:07:83:83:38:d8:44:d7:7d:
86:d5:32:dd:5f:b9:78:9b:41:ae:d7:d7:41:be:73:
f6:d7:08:c6:71:46:5b:78:fa:22:44:f2:a2:40:fe:
f4:62:63:f7:3b:d0:3c:54:f9:d2:a7:c4:c8:5d:fb:
f0:ce:22:56:33:1b:72:27:bc:cd:af:8c:ce:5b:db:
d1:b3:f8:03:52:ce:45:9f:fb:18:62:f4:3c:14:6d:
27:41:fa:a2:d7:47:eb:f6:04:e3:f8:ff:59:38:ed:
4d:7d:4c:48:0b:c0:53:67:15:21:50:15:f0:90:e0:
95:10:a3:ad:cf:7e:d1:c0:5b:8b:94:d4:38:44:6a:
69:5f:62:dc:94:6e:c4:b2:c1:63:fc:f5:af:3c:08:
24:8c:6f:82:33:f2:23:b5:f9:ae:46:54:a8:5e:4d:
bc:22:2a:25:08:a2:d7:18:a4:26:38:e2:89:6a:b1:
8b:51:d2:1a:6d:66:c1:18:52:fd:f6:df:93:3c:a5:
37:d7:09:41:a4:39:f3:7b:9f:ab:38:41:03:20:ec:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:57:D0:1D:23:04:1C:2B:F0:B3:63:84:A4:A1:AE:44:C3:BD:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89EE02F8C3C811EF8A111B8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.138.0/24
Signature Algorithm: sha256WithRSAEncryption
26:03:3c:2f:d9:10:61:9b:ad:3d:c2:94:b6:d6:c7:6f:38:8b:
0a:a9:fe:64:4b:0e:4a:21:6a:d4:01:ac:1d:a3:c3:1c:f7:f7:
53:50:6c:e2:40:03:f2:b2:ab:39:ed:8e:ad:c1:46:dc:b6:e2:
fc:75:34:41:9c:6a:e0:e6:22:bb:c5:bf:bf:b1:b7:01:67:7b:
dd:a5:10:de:c3:a1:6a:9f:ba:55:b4:30:18:d1:d6:2f:8b:a1:
c2:f3:96:b6:1d:24:b2:99:1b:3c:a7:19:c4:b7:a6:cb:3d:0e:
8f:49:7e:57:ba:e4:a2:df:42:f2:27:e3:ae:12:51:b8:f4:68:
36:11:e2:db:be:7c:74:59:c8:5a:ca:0b:d7:ec:43:46:78:d3:
b6:22:33:17:16:2a:03:ca:09:dd:70:e3:4a:e8:22:09:01:22:
d5:69:26:6c:71:18:33:87:a5:f6:30:e4:3d:21:18:65:46:d9:
bf:d3:81:6c:43:d3:fb:f1:54:68:cd:e5:10:f8:74:d6:ea:c5:
87:a5:3e:dd:ce:4f:f5:a5:10:e9:7d:2f:f7:d1:c1:34:28:57:
e3:59:fb:f7:1e:38:5b:be:21:7a:3c:f2:fb:81:7b:c0:ca:c3:
3e:46:d9:91:2f:a4:a9:62:45:5f:76:84:12:85:16:79:33:06:
38:14:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:01 2025 by rpki-client