Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C700BE2C3C911EFBBEB1096762E951A.roa
File: 8C700BE2C3C911EFBBEB1096762E951A.roa (raw, json)
Hash identifier: cPWVgY1nJ5JZ/pzwbL6dzLdyxgn6sQ9mLkKAc3vyvYc=
Subject key identifier: A0:08:D5:4A:82:D5:7C:DA:FE:69:0E:60:6D:CD:5F:9E:69:B5:73:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C700BE2C3C911EFBBEB1096762E951A.roa
Signing time: Thu 26 Dec 2024 20:39:48 +0000
ROA not before: Thu 26 Dec 2024 20:39:45 +0000
ROA not after: Sun 12 Dec 2027 20:39:45 +0000
asID: 17561
IP address blocks: 154.83.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75764 (0x127f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:39:45 2024 GMT
Not After : Dec 12 20:39:45 2027 GMT
Subject: CN=676dbf14-e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ca:4f:af:74:16:d1:8b:e3:81:8e:84:29:
cf:fe:45:1d:fa:8d:05:65:0d:61:8f:73:5d:f4:ab:
44:f8:1b:5c:ac:2a:ac:81:4e:e4:b9:0d:d8:35:d5:
06:a8:65:fd:31:91:1f:2b:bf:84:86:bb:ae:7e:d7:
a7:3f:c1:e8:64:9d:fb:1c:98:c9:e7:8f:bf:de:28:
02:b3:2e:ca:95:7b:24:bc:2e:13:e6:c8:10:d2:67:
8b:6f:44:17:16:bc:20:30:bd:7e:ee:e2:9c:d8:83:
fb:e3:28:0f:04:f1:28:cb:6c:c0:e3:27:c4:6c:7c:
14:62:1a:db:5e:7f:eb:fa:63:b0:87:d0:74:71:3a:
ed:22:70:3e:d4:32:03:df:7d:32:23:43:85:fd:33:
fa:56:b2:82:5e:00:bd:13:e3:f7:70:db:4b:98:d6:
ce:35:c5:aa:c0:77:7a:f2:75:4e:0c:0a:31:a0:e2:
22:cc:e8:ae:ea:86:7b:e9:c7:50:5b:ae:d7:d7:ee:
fb:26:85:73:6c:69:00:a9:84:bb:0c:68:6b:1d:8f:
c7:03:ef:fc:5f:b9:76:94:b5:69:4e:34:6a:e7:7e:
5d:a5:27:72:57:78:55:4e:29:86:5b:e2:9f:80:c8:
51:8d:7c:ff:d3:cc:23:79:d9:f7:ff:b2:1a:cf:72:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:D5:4A:82:D5:7C:DA:FE:69:0E:60:6D:CD:5F:9E:69:B5:73:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C700BE2C3C911EFBBEB1096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5a:64:29:10:fd:97:6e:9d:31:34:17:41:68:79:66:46:70:
de:57:c2:45:b0:14:04:8e:c7:7e:83:10:9d:d5:4f:80:76:0a:
8d:23:90:8b:12:fe:45:70:a2:ee:85:bc:55:a6:c7:6a:96:3f:
64:b7:d2:ad:4d:d2:2d:d0:e5:6d:b6:d6:62:44:b2:c4:51:02:
d1:cd:30:70:2c:51:fc:91:9a:e0:eb:1c:56:10:f1:fe:ce:7e:
38:15:d7:48:fb:8a:17:a8:2a:41:43:d4:d8:44:c4:ae:ee:dd:
84:15:35:e2:80:da:bc:5b:60:8a:b3:e9:b6:b0:24:c7:fe:06:
fa:05:d6:c0:4f:a1:8c:f2:58:74:0b:4e:ba:40:7b:57:a3:a1:
4d:5d:1d:f8:50:05:c7:1b:05:89:ef:dd:7c:1a:be:07:8e:e3:
13:5f:f3:45:85:b5:53:12:da:b4:25:fb:60:4d:d3:89:88:09:
d5:2e:c0:1a:27:d3:07:12:2f:f4:ed:e8:e3:a7:a0:04:a0:9f:
98:7c:44:f5:1a:26:6b:e4:30:e5:b5:93:a3:2d:6f:21:16:85:
0e:04:e4:7c:37:41:e8:d2:21:6c:5a:7c:66:5c:d6:7d:85:25:
9d:e6:55:30:e4:f6:36:b2:3d:c8:8e:ef:3e:ac:13:6d:87:e9:
11:84:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:13 2025 by rpki-client