Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C7CE1AAD2D811EF87FE71B8762E951A.roa
File: 8C7CE1AAD2D811EF87FE71B8762E951A.roa (raw, json)
Hash identifier: Bluyjy7lrcupx/qTn87S3QRywZ5yHtpEKHSVlx3qfI0=
Subject key identifier: 79:68:C3:51:5C:EB:A4:AC:73:5A:23:04:70:64:7E:29:45:2A:2F:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C7CE1AAD2D811EF87FE71B8762E951A.roa
Signing time: Wed 15 Jan 2025 00:34:58 +0000
ROA not before: Wed 15 Jan 2025 00:00:55 +0000
ROA not after: Sun 12 Dec 2027 00:00:55 +0000
asID: 17561
IP address blocks: 154.81.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80715 (0x13b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:55 2025 GMT
Not After : Dec 12 00:00:55 2027 GMT
Subject: CN=678702b2-ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:cd:b0:49:7d:bb:b8:13:ca:78:92:d0:f7:
dc:9c:7c:fd:49:6a:64:03:cd:c3:cd:a3:35:c5:05:
76:73:ac:50:90:c8:b1:7d:67:cc:21:30:74:39:ea:
18:aa:70:5e:7a:70:c6:79:36:af:c2:bd:d6:1f:d0:
6b:f8:33:db:9e:07:a9:31:f6:a5:bb:8d:7a:61:5b:
65:47:c1:90:12:b4:4d:c9:64:46:7d:6c:0c:fa:8b:
3a:2f:71:8a:7b:00:59:46:0d:9d:02:65:b2:b1:d2:
14:15:e4:ac:2c:de:c8:1a:8f:49:ef:91:a8:b3:7e:
1e:36:fa:05:e6:50:d8:5d:77:43:48:71:ef:b5:76:
6f:3b:1f:9c:43:a6:ee:cb:c9:15:9a:96:ad:1a:d0:
5f:86:fb:a7:90:6d:08:dc:99:67:9f:30:84:90:bf:
7f:05:a1:7d:14:18:7a:ae:46:25:81:2a:ed:ed:e1:
f1:35:84:c1:b8:49:59:2b:0b:ac:08:be:2d:16:94:
39:70:80:69:35:38:5f:60:ab:1f:18:7e:78:a4:f9:
36:f4:e4:52:8b:32:18:38:0b:47:fe:bc:f4:8b:1d:
ef:c3:92:ad:da:00:6d:76:d8:61:2e:ce:c4:cf:ae:
32:d8:e9:d7:90:af:9f:6b:e9:4b:e5:ec:a9:be:27:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:C3:51:5C:EB:A4:AC:73:5A:23:04:70:64:7E:29:45:2A:2F:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C7CE1AAD2D811EF87FE71B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ec:58:29:01:4e:cb:0b:5d:7a:47:90:a7:66:1c:43:a0:cd:
91:3f:c0:86:d4:99:ca:6f:ef:31:68:20:98:99:7a:69:39:79:
71:04:ba:bc:31:de:2a:86:41:b9:9f:90:83:1b:b9:07:3b:2e:
f0:58:e5:81:9a:48:6a:f3:13:0d:51:7e:05:b6:93:5c:29:ec:
92:d6:9f:f6:aa:05:25:02:5b:24:88:bb:25:57:9a:b6:61:05:
a8:52:05:cf:f4:35:7c:46:3c:ca:15:1d:ea:d3:f7:d7:f9:72:
4b:4c:a6:11:c5:7b:f0:94:20:26:8d:d9:f9:e9:12:9d:0b:e1:
fa:1e:cb:ca:06:a3:da:06:81:45:07:1e:bd:57:2b:1a:47:f6:
10:6b:06:9c:d9:98:79:92:47:b8:6c:c3:70:0a:e7:0e:b4:24:
45:d6:fc:e2:6e:6e:42:bc:2c:2d:65:5f:10:12:97:32:ef:48:
16:49:e9:b1:f2:75:14:06:7e:94:4e:ab:8f:d4:ba:e1:e4:90:
c8:b1:a3:28:fc:eb:64:4b:b6:af:12:5b:2e:ab:64:ff:1b:e6:
07:5f:a4:51:7f:84:87:18:fa:fe:96:9b:78:99:3e:f4:b7:a5:
21:ab:66:1c:96:45:fd:ca:70:c4:7f:e6:90:5a:e0:cb:82:48:
f1:0f:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:45:38 2025 by rpki-client