Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF6F0C36CF6E11EFBEC86DAF762E951A.roa
File: BF6F0C36CF6E11EFBEC86DAF762E951A.roa (raw, json)
Hash identifier: VgFErwGgJci8XrN4F909j3T+sT6zQXxUCBGSXFWb34g=
Subject key identifier: 7E:F4:33:30:30:6B:06:56:50:52:85:10:F8:4D:80:8F:82:3C:28:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF6F0C36CF6E11EFBEC86DAF762E951A.roa
Signing time: Fri 10 Jan 2025 16:20:04 +0000
ROA not before: Fri 10 Jan 2025 16:20:00 +0000
ROA not after: Fri 12 Dec 2025 16:20:00 +0000
asID: 984
IP address blocks: 154.81.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80466 (0x13a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:20:00 2025 GMT
Not After : Dec 12 16:20:00 2025 GMT
Subject: CN=678148b4-73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:33:56:e9:9d:8d:4b:3f:7d:39:4d:8b:d6:
82:01:e4:06:e0:f5:e4:2e:e8:e1:89:e2:dc:b3:66:
a0:b5:7a:ac:14:4d:ad:8d:3d:ad:40:c0:5c:b7:fb:
0f:5b:81:7f:94:67:ef:ae:9f:96:5c:0a:eb:9a:a0:
a4:7b:5e:08:a1:d9:66:86:2a:f9:bb:48:97:e8:54:
09:d2:bb:7f:a5:7d:58:c4:07:cf:7d:8e:f6:4b:76:
92:87:14:1c:8a:b3:4a:1e:6d:2b:5f:a9:9a:e8:38:
9a:ab:41:cb:9c:ec:9a:4a:f2:d1:69:1c:77:c6:49:
cf:fc:87:0c:db:64:22:5c:60:53:36:7a:e6:48:7c:
86:e6:f7:47:a9:84:2f:63:da:52:9e:5e:9e:e4:20:
22:6a:31:e5:5c:64:18:a0:0d:7a:41:a4:a8:d6:01:
72:3a:bc:2c:d8:d1:31:2e:9e:d8:0d:20:b1:1f:44:
9f:e3:6b:07:b2:0a:1a:5b:38:ac:fe:a8:7d:3f:3b:
78:41:fb:8f:46:3a:64:db:ba:b7:a4:a9:27:66:6e:
25:c1:d2:6a:6e:7a:af:98:68:40:a0:85:42:a5:1b:
fe:68:4c:f0:31:96:20:15:9b:a7:ae:12:50:cd:ec:
c1:1c:26:b0:a5:01:b2:55:90:8b:e5:69:4f:e1:56:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:33:30:30:6B:06:56:50:52:85:10:F8:4D:80:8F:82:3C:28:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF6F0C36CF6E11EFBEC86DAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e5:ee:62:16:e2:26:61:d8:1a:5a:ad:27:ee:d4:50:18:d2:
af:4d:ef:7d:a4:5a:72:9b:0b:6d:41:4e:b9:9d:c9:1a:7b:b0:
ec:62:63:ab:2e:dd:8e:76:c9:cb:fb:4a:2c:5e:1c:ca:8f:c2:
ea:b7:5a:f1:00:71:e6:04:4c:c9:22:f4:b1:44:bd:d3:23:e1:
77:82:5a:6b:b1:5c:8f:db:5c:b7:74:a7:3d:df:04:e7:ab:04:
a8:91:2b:94:54:14:d3:de:a0:8d:99:cb:4e:99:19:7e:87:88:
c4:a3:84:78:69:f6:0c:ee:5c:5b:c4:6f:2f:ff:4d:62:f1:db:
7f:61:f8:48:86:57:7c:51:bf:29:d6:fa:44:fc:72:f3:4a:f0:
92:62:15:c6:38:8c:c6:f5:cc:1c:fc:95:b4:22:98:1f:5d:da:
55:d6:7d:f8:5e:9d:cf:b5:56:e5:4e:b7:83:2d:52:b5:34:9a:
92:f0:70:ac:4d:65:76:54:88:1c:9a:21:56:fa:14:6a:7b:e9:
4e:dc:f2:8c:e5:d5:e0:21:10:f1:63:ad:95:e3:c7:68:03:15:
60:d9:79:84:48:af:16:a6:a3:2f:6c:cd:66:22:fe:56:ed:cf:
4a:92:f2:05:26:5c:60:da:d5:65:12:8f:8c:58:4e:63:fa:be:
eb:c5:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:14 2025 by rpki-client