Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F489F9EC3C611EF92080D83762E951A.roa
File: 8F489F9EC3C611EF92080D83762E951A.roa (raw, json)
Hash identifier: 8PeMf/sJe5pHHVv/dvFAurWp6V6QkuosptUtSHe7ymc=
Subject key identifier: 56:CA:FF:C6:D7:98:90:2C:6F:2C:07:46:96:1A:6D:B2:A8:B8:06:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F489F9EC3C611EF92080D83762E951A.roa
Signing time: Thu 26 Dec 2024 20:18:25 +0000
ROA not before: Thu 26 Dec 2024 20:18:21 +0000
ROA not after: Fri 12 Dec 2025 20:18:21 +0000
asID: 984
IP address blocks: 154.83.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75734 (0x127d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:18:21 2024 GMT
Not After : Dec 12 20:18:21 2025 GMT
Subject: CN=676dba11-85af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:66:54:59:4a:ca:12:0c:ac:97:f5:86:1a:
04:74:de:51:c3:fb:7f:af:08:34:7f:ea:e5:ad:1e:
ce:55:c9:04:c5:9a:4f:ac:e2:65:a7:48:8d:56:cb:
fe:10:58:69:a7:82:6f:9e:e8:22:c1:11:10:90:bd:
76:dd:53:1a:85:35:4d:f7:00:05:71:5e:b7:a3:f7:
a4:b6:ad:d7:b2:06:f7:90:54:00:43:00:27:43:6d:
1c:43:43:91:27:42:81:a0:82:20:d5:99:95:62:0a:
ca:60:00:ab:e5:6a:cc:ee:cd:45:cc:9f:05:81:09:
2a:bc:9f:ce:03:f3:4f:67:63:57:f0:a6:42:92:a6:
e6:71:45:4c:a5:9c:90:2c:4e:6d:0e:cd:cc:c4:10:
3f:85:93:a1:10:b4:cc:9a:96:0e:3f:ab:ef:fa:29:
69:0d:c4:55:f3:5d:76:81:25:6b:34:a5:5b:fe:81:
b4:2b:7a:68:d1:99:ef:9b:26:c5:15:11:50:07:cf:
3e:04:ef:98:89:15:72:b6:d4:d0:c9:39:b9:92:ff:
77:2b:f5:56:23:0e:b8:a8:49:f3:31:e4:82:3b:fb:
d6:f6:fc:f7:5b:93:06:ca:22:61:e5:b9:a7:a3:c4:
ca:eb:67:ab:ba:92:1c:28:25:a4:2e:56:78:53:a1:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:FF:C6:D7:98:90:2C:6F:2C:07:46:96:1A:6D:B2:A8:B8:06:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F489F9EC3C611EF92080D83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:47:85:f6:1f:18:fb:b5:0b:26:ed:40:f5:05:c6:de:2c:84:
4f:50:55:6c:17:d9:9c:18:02:21:e9:eb:4a:e9:3e:51:ad:b4:
a9:cd:3a:06:d9:55:df:26:90:e3:e8:e2:95:35:03:79:b4:ce:
ed:1f:0f:7f:c2:68:b0:2a:ce:43:24:9e:f9:d5:35:55:75:99:
e2:3e:0d:87:16:cb:05:5c:37:a3:12:9d:47:e5:ec:a6:28:34:
42:94:61:be:3d:82:db:a2:35:c8:e7:60:78:ee:8c:65:d6:da:
b2:c2:62:b7:a6:4c:41:40:93:54:eb:04:c9:9d:35:ee:3f:20:
25:da:d1:00:42:02:e3:fb:2b:65:7c:75:87:d0:e3:dc:d5:47:
52:38:82:8d:2b:a4:b8:08:b1:56:2c:c6:f8:13:e2:dc:55:c8:
2e:67:0a:45:d3:31:7b:22:d5:d9:7c:07:4a:81:ef:35:55:51:
48:c6:e7:93:6d:0f:fa:46:93:db:16:99:0a:2d:a4:0d:f6:75:
79:30:db:be:5e:04:e3:11:b4:44:f8:8e:d8:ac:d9:16:79:db:
67:be:82:b0:7a:a4:d5:6a:ee:67:82:53:28:0d:f1:3e:a8:d5:
ca:15:72:05:1d:ba:96:7b:47:13:e2:88:3d:5d:0d:a8:b7:2d:
af:50:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:46 2025 by rpki-client