Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3272130C3CE11EF8CB78FB5762E951A.roa
File: B3272130C3CE11EF8CB78FB5762E951A.roa (raw, json)
Hash identifier: eQDkpucRJcwUqN3RmktnsCRksZiUqWACRjmKMSs7bLY=
Subject key identifier: 75:20:B1:8A:D7:07:EF:F2:18:11:BE:81:48:4B:35:27:CA:86:56:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012828
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3272130C3CE11EF8CB78FB5762E951A.roa
Signing time: Thu 26 Dec 2024 21:16:41 +0000
ROA not before: Thu 26 Dec 2024 21:16:37 +0000
ROA not after: Sun 12 Dec 2027 21:16:37 +0000
asID: 17561
IP address blocks: 154.83.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75816 (0x12828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:16:37 2024 GMT
Not After : Dec 12 21:16:37 2027 GMT
Subject: CN=676dc7b9-3a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:d7:3e:e8:8b:a5:f7:d0:6c:9a:db:da:06:
58:40:f6:f0:e8:87:eb:03:88:63:bd:6e:d1:b1:b7:
35:db:f9:70:6e:b3:cc:df:dc:01:de:29:cf:ba:7a:
f2:5f:b5:48:11:f4:61:64:39:fd:7c:fd:7f:72:1d:
3b:e4:54:aa:a7:8c:5c:77:8a:1f:06:82:53:7f:94:
a2:f2:3d:68:ae:a8:63:60:52:ec:db:62:73:f0:6c:
7d:2e:d1:9c:12:8c:4c:81:20:ca:20:b1:8c:1d:34:
5b:4e:92:04:63:08:f8:f8:c9:67:03:50:61:c9:2b:
be:de:a5:2f:43:89:21:b3:ed:1f:34:21:8c:f1:6e:
73:66:c7:1d:2a:52:ce:41:b0:f9:c2:67:65:47:2a:
91:80:f2:ab:3c:34:a7:3f:79:1d:a6:be:8f:90:0b:
05:d7:31:60:d6:b8:97:57:d5:32:f1:ee:56:b6:b8:
e1:3c:40:a7:5e:ae:b0:e2:f4:77:c5:11:d3:56:97:
af:aa:df:0b:54:03:98:22:a4:dd:bb:52:63:ce:9f:
83:30:38:21:84:02:8c:e5:be:11:ec:a1:a1:cb:1b:
c5:83:25:65:47:d5:fd:e3:de:54:6d:84:4b:ff:ef:
3c:0f:cc:88:fe:d9:a2:54:3c:4a:a7:72:b8:06:88:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:B1:8A:D7:07:EF:F2:18:11:BE:81:48:4B:35:27:CA:86:56:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3272130C3CE11EF8CB78FB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e5:34:f6:31:28:cb:80:0d:c3:e4:05:74:a7:55:92:80:4e:
58:48:59:e3:98:6e:43:6c:30:5e:18:98:ae:09:70:8a:07:2a:
b3:27:8d:18:bc:b5:c4:22:8d:dc:eb:18:47:f7:c2:36:ff:0f:
ba:b8:9a:16:e7:50:45:5d:c2:e7:04:f8:2d:2c:5d:59:f5:e0:
cf:5f:1c:76:b8:5b:ab:78:ad:98:63:53:47:48:7f:32:4d:7f:
42:39:7c:75:40:dc:cd:84:e3:00:26:3d:6c:fa:d2:0b:2b:d0:
8b:74:5e:1c:49:5b:61:1d:5d:e5:0d:a4:82:9e:9d:53:f3:d8:
de:db:de:a8:eb:31:40:65:ce:15:b7:72:cf:cd:36:57:1c:be:
a2:ac:b5:d5:af:27:8f:53:8c:2b:95:1e:31:b6:13:ea:cf:fc:
38:a2:53:9c:bf:70:82:2d:c0:2a:f8:2a:a8:01:66:f1:74:2f:
e2:9e:d0:6d:5b:61:97:6e:70:c6:e8:fa:5c:39:0d:61:5e:48:
3b:c7:b3:5a:fd:40:8c:0b:9f:ef:dd:34:7c:6b:a2:98:3c:2f:
86:3a:60:f1:a3:d1:39:24:88:7b:35:be:b4:ba:fd:6d:04:5a:
46:09:59:4c:2b:2c:8f:65:58:6f:73:1e:a0:b2:85:1d:f9:4b:
48:8c:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:19 2025 by rpki-client