Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1E69C4C0CD11EF8531CB94762E951A.roa
File: AC1E69C4C0CD11EF8531CB94762E951A.roa (raw, json)
Hash identifier: l6ma7efWbglk3bYPjx6A+lTt8lzohP0tStW+X0S0bOY=
Subject key identifier: 65:FF:98:4D:58:40:9B:5C:61:A0:6F:BE:33:C0:42:48:1D:AD:66:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1E69C4C0CD11EF8531CB94762E951A.roa
Signing time: Mon 23 Dec 2024 01:31:46 +0000
ROA not before: Mon 23 Dec 2024 01:31:42 +0000
ROA not after: Fri 10 Dec 2027 01:31:42 +0000
asID: 17561
IP address blocks: 154.83.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73244 (0x11e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:31:42 2024 GMT
Not After : Dec 10 01:31:42 2027 GMT
Subject: CN=6768bd82-bf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:9b:3e:9b:6e:a5:11:cb:9b:85:6b:9d:72:
c0:54:6d:b1:ca:ba:bb:95:e8:8f:d0:3f:96:e2:7e:
c1:89:e5:cf:7d:d2:86:8d:15:74:ab:c7:95:84:ca:
0d:60:a6:8d:23:bc:1b:f0:c0:c2:45:63:91:25:55:
3a:6c:e6:60:7d:33:59:84:9b:d9:a3:7d:f8:69:e2:
fa:93:a9:7c:04:1f:84:36:a1:3f:c3:a4:fb:6c:8a:
d0:82:df:28:06:41:ce:49:4a:43:f0:24:62:a1:9d:
8e:92:82:e6:a9:cf:43:18:15:32:7d:50:84:c3:0b:
09:ba:36:5a:aa:c1:a0:50:07:c5:fc:3b:6e:8c:75:
e0:75:c8:79:79:f2:eb:14:4e:67:39:98:b1:f5:f1:
fe:01:f4:29:0a:02:16:c5:b2:fe:4d:97:4c:46:99:
d3:a5:68:50:4c:ee:c0:76:3e:dc:98:f0:07:cc:1c:
7d:18:98:2d:e1:e5:2c:04:b1:1e:06:6a:9c:0b:22:
19:3f:8c:ca:f4:a2:9f:5a:a7:1b:3c:ee:8c:b1:42:
52:05:34:6d:d0:19:14:56:aa:e4:6b:28:10:a3:12:
e0:5d:09:da:ad:6d:c4:80:01:e8:31:b0:97:99:8c:
c9:d6:42:44:8c:a6:fe:fb:1f:f6:3b:ad:11:5b:d3:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:98:4D:58:40:9B:5C:61:A0:6F:BE:33:C0:42:48:1D:AD:66:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1E69C4C0CD11EF8531CB94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:50:b3:87:12:62:9d:25:03:d7:18:5c:b0:bb:99:3e:0c:3b:
c7:e7:c1:ae:9c:27:eb:dc:e2:f3:d7:08:19:dc:91:e3:59:39:
8a:31:b2:66:30:81:8f:85:0f:5b:8b:7b:98:9d:ad:67:5c:8a:
5c:2c:3a:fa:4b:3e:ef:c1:3e:4c:42:27:5e:1d:f9:40:56:6a:
b8:1d:9c:4d:d0:17:78:e7:4e:14:43:de:49:57:f3:c7:6d:c5:
3a:da:db:bd:2e:02:d1:ef:63:29:1b:e6:0a:07:be:dd:d6:03:
31:dc:7c:74:86:a2:2d:9d:20:32:ad:9b:49:28:69:88:85:43:
71:19:e6:87:cd:28:2b:c1:cd:62:90:66:e0:05:63:9d:82:43:
46:c2:e6:ad:43:60:b8:65:e1:24:c2:a6:00:76:9e:07:dc:0b:
ae:45:d9:b9:30:47:e6:80:c3:8e:ac:ec:29:ef:0f:b7:b2:fc:
70:0e:f2:17:a9:f4:24:42:ed:78:a1:ad:4b:23:7c:b7:36:86:
fc:06:59:4a:d9:0e:d5:6e:01:07:dd:78:95:75:fb:fb:5b:56:
cf:02:14:55:7b:4d:b8:06:94:f7:54:a7:65:33:60:ba:ef:8b:
41:3d:72:44:2e:dc:ba:0e:30:53:86:a4:f3:81:4d:60:49:b1:
31:08:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:42 2025 by rpki-client