Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F2174C0D511EFBB892251762E951A.roa
File: B78F2174C0D511EFBB892251762E951A.roa (raw, json)
Hash identifier: f3SzHEBzsjeznGTtHI8ix/DS8HO8UfEdGKTN7eh4EFo=
Subject key identifier: 24:97:08:66:0A:58:72:75:C0:42:3D:99:DF:0A:F0:8F:B6:FE:73:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F2174C0D511EFBB892251762E951A.roa
Signing time: Mon 23 Dec 2024 02:29:21 +0000
ROA not before: Mon 23 Dec 2024 02:29:17 +0000
ROA not after: Wed 10 Dec 2025 02:29:17 +0000
asID: 984
IP address blocks: 154.89.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73304 (0x11e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:29:17 2024 GMT
Not After : Dec 10 02:29:17 2025 GMT
Subject: CN=6768cb01-2a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:3a:6c:17:7f:48:7b:16:8e:7e:25:e3:3b:
b9:53:62:f8:81:d0:b1:b8:67:57:d9:07:6f:07:f8:
4d:76:03:b2:f3:2c:bd:14:3e:6b:b5:56:05:25:2c:
f5:ba:26:9f:55:35:65:e3:82:bb:e9:2f:3b:88:af:
a7:46:17:e1:17:94:30:87:bb:67:e5:0e:49:00:e4:
af:9f:1e:a1:d4:95:7a:1e:c9:38:f7:2d:cb:0f:aa:
cf:fe:02:02:c1:c1:1b:c5:cd:1e:2b:b3:fd:83:2b:
15:0f:ca:6b:94:45:d1:ea:78:ae:2d:66:48:a7:12:
38:63:69:c7:0f:e7:15:e8:a1:74:a2:50:9a:07:9d:
ec:4d:ed:77:34:3f:21:df:84:d7:28:9c:4e:4f:8e:
f3:c4:02:7f:ad:95:d1:70:8f:f5:95:ea:92:3b:f1:
5a:b7:a1:8c:fa:71:db:38:b2:e3:d1:34:ec:fb:f7:
50:b2:42:cd:67:fd:df:44:6c:30:94:31:bd:75:a4:
b0:fb:f3:a0:0d:cb:12:c3:56:3f:77:b9:5e:2d:ee:
6c:59:8d:45:b3:38:8b:c7:51:bc:17:b8:73:39:f6:
87:6c:8a:63:dd:34:d4:b3:19:f7:21:16:b9:40:23:
e3:b4:e1:24:27:8c:47:8f:70:41:4a:79:0c:dd:e7:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:08:66:0A:58:72:75:C0:42:3D:99:DF:0A:F0:8F:B6:FE:73:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B78F2174C0D511EFBB892251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:2d:51:c8:30:c3:d3:14:7d:e9:8d:61:4c:31:48:1a:45:57:
ed:05:74:87:e1:34:f8:a1:e8:00:20:08:8f:40:84:8b:47:a8:
81:58:4f:d6:0c:00:84:b0:47:e5:c9:bb:68:af:ab:8c:c1:87:
95:9d:f3:2a:fa:f7:c6:eb:f5:55:d9:b0:ce:1e:b4:c5:28:6e:
cb:c4:33:93:88:16:f2:2f:90:a3:f9:63:72:c4:ee:8a:d4:25:
15:a2:2b:4c:c5:a7:88:49:9b:0f:a1:25:97:76:08:44:fc:93:
ac:41:77:20:bd:87:c6:74:0f:a2:1b:6f:d7:e8:44:8f:0b:bb:
ff:ba:2f:36:ef:84:a8:a8:54:05:47:b8:8d:36:0e:66:59:6d:
9a:da:57:d6:17:61:41:0b:b4:ca:2b:27:fd:a9:d1:1e:10:5b:
f1:4b:11:48:41:f6:09:a1:9b:84:f3:46:82:62:13:ea:c9:a9:
8e:1b:b7:4b:d1:d9:42:07:0c:24:19:16:06:53:a5:ac:ef:73:
54:b2:a5:2f:41:22:3e:c8:e0:9d:a5:83:ab:fe:3a:f0:49:86:
83:b4:ba:18:4b:63:c3:cf:5a:08:ab:8a:d3:3c:0b:b3:b7:ee:
7d:77:e1:40:eb:0a:ef:1f:41:68:ca:0d:d3:ef:f9:b4:38:77:
a8:a3:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:40 2025 by rpki-client