Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE5B3A64C3C911EFA4517896762E951A.roa
File: BE5B3A64C3C911EFA4517896762E951A.roa (raw, json)
Hash identifier: g8muq5W/Al5Qj45U1/jLKLcyplWciLMZ1yb5DtOy+hA=
Subject key identifier: 6D:BB:B3:09:1D:2A:EA:DA:42:4E:F2:72:E0:F0:BB:CB:10:08:C6:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE5B3A64C3C911EFA4517896762E951A.roa
Signing time: Thu 26 Dec 2024 20:41:12 +0000
ROA not before: Thu 26 Dec 2024 20:41:08 +0000
ROA not after: Sun 12 Dec 2027 20:41:08 +0000
asID: 17561
IP address blocks: 154.83.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75766 (0x127f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:41:08 2024 GMT
Not After : Dec 12 20:41:08 2027 GMT
Subject: CN=676dbf68-0f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:86:c5:53:c7:22:9d:17:f0:36:c9:a8:6c:
09:d9:91:12:7f:5d:47:bf:62:52:1a:27:87:be:bb:
61:99:9b:4c:79:9b:4f:af:7f:84:ca:55:60:ec:22:
5e:3f:cd:83:c6:03:e2:3c:1c:e6:67:18:4d:92:61:
12:05:6a:da:d0:6a:75:2f:ba:c3:a4:65:c4:8a:a4:
a7:0d:ff:f3:f0:2c:b2:37:01:86:e3:13:d3:82:cc:
97:fd:a0:da:c9:b4:95:d2:4a:aa:f1:42:f4:07:b7:
40:3a:4e:e1:c6:75:a3:ec:10:bc:e3:63:9a:63:6e:
5b:cc:7c:86:bb:e5:eb:33:12:e7:e8:33:fc:fe:b3:
29:61:b7:89:7c:37:c9:e2:cc:db:19:9b:ef:96:ed:
a9:7e:5f:bc:64:cb:eb:c8:0a:c9:20:a3:20:e9:d2:
32:92:5e:3a:fa:7f:ce:d4:28:c2:e6:03:5f:6b:f3:
d3:d1:90:a2:f9:49:cc:2d:c8:1e:4b:7a:1f:68:a5:
42:ae:ea:0c:ed:b2:be:98:63:26:f0:14:58:80:39:
04:69:26:a9:a8:77:d8:01:4c:af:c1:bc:55:18:73:
f6:d0:b1:9c:e1:2b:44:65:54:53:d5:e9:dc:96:ea:
a7:ca:dd:dc:01:c3:94:91:d9:61:2f:57:e3:53:d0:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:B3:09:1D:2A:EA:DA:42:4E:F2:72:E0:F0:BB:CB:10:08:C6:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE5B3A64C3C911EFA4517896762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f5:c4:d7:c3:db:ac:96:0b:8e:a9:1c:31:5f:3a:71:1c:2c:
68:d9:09:94:b4:a4:92:a3:92:3c:cb:a0:df:da:1f:7c:34:52:
d0:3a:77:e4:0c:ea:aa:7c:c6:fd:94:dd:88:01:50:f9:7c:a7:
ac:e8:4f:d5:15:11:61:01:5d:38:df:44:a0:2a:02:42:5c:17:
31:7c:e4:e1:97:ac:51:83:2f:65:cc:2c:bf:15:9b:7a:d6:dd:
90:a4:ea:1c:99:41:be:a0:b3:4b:db:44:f2:9b:0c:f0:5c:69:
07:ed:e8:14:2c:e2:29:c1:a3:e7:04:ea:3f:1b:f0:62:d7:f6:
48:b0:a5:f0:5a:37:0a:12:ab:a6:86:d8:4e:ad:be:29:43:b6:
66:43:bc:68:4a:5d:79:43:b3:26:c1:fd:a5:9f:72:ba:c3:10:
ab:c9:5d:cb:fe:cb:3f:74:40:e8:b2:c9:c2:13:da:ee:a4:0f:
09:8d:c5:9e:ee:5f:19:91:02:47:2c:23:6c:0e:f3:ca:73:74:
38:e6:98:f0:20:47:8c:30:9b:4d:18:eb:d7:ef:17:c0:8b:06:
0a:5f:71:ce:38:00:dc:cf:d1:c0:ed:fa:c7:68:cc:4a:f7:7e:
16:c5:d5:56:f2:fb:73:1d:41:59:37:99:d2:2e:5b:8b:84:f6:
3b:e3:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:57 2025 by rpki-client