Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F22FAC5DC11EFA576E64A762E951A.roa
File: CE8F22FAC5DC11EFA576E64A762E951A.roa (raw, json)
Hash identifier: VPVL8kbfD5H5za8bJACptXsUMB0juV3niU4cVz43dq4=
Subject key identifier: 23:C7:5B:47:50:F5:C8:68:A3:7D:EB:8F:96:19:95:EF:61:DA:85:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F22FAC5DC11EFA576E64A762E951A.roa
Signing time: Sun 29 Dec 2024 12:02:42 +0000
ROA not before: Sun 29 Dec 2024 12:02:38 +0000
ROA not after: Sun 12 Dec 2027 12:02:38 +0000
asID: 17561
IP address blocks: 154.210.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77096 (0x12d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:02:38 2024 GMT
Not After : Dec 12 12:02:38 2027 GMT
Subject: CN=67713a62-b967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:97:51:80:03:7d:97:8b:92:23:e4:c1:64:
56:cf:d2:02:c7:ab:27:93:28:ed:6c:97:53:e6:f5:
41:84:cf:a2:fd:5a:de:b8:6d:fd:c1:68:fd:66:ec:
28:38:43:58:d5:37:ff:c3:8c:74:f1:39:de:df:5e:
5a:22:de:2f:41:52:35:60:fc:af:33:7c:4e:81:23:
9c:f4:44:f1:c9:27:55:05:46:f8:ce:89:02:95:58:
1b:3d:27:d5:54:74:10:8c:ad:a7:c7:ca:77:74:cc:
df:08:9f:cc:c1:c4:a7:e5:42:c5:36:37:80:c7:f9:
76:34:dc:a7:bc:48:61:38:8a:88:b0:02:7b:72:40:
54:c1:c8:17:0a:ad:37:ec:7d:5f:a8:f7:fc:51:1e:
2c:fd:90:f9:86:51:44:38:cc:43:e7:2a:69:57:05:
65:51:b7:bc:dd:3e:b7:ab:3a:61:d9:02:53:05:77:
91:16:2c:18:f5:ca:e1:c1:40:a6:61:84:7a:cb:40:
59:be:e1:84:1f:65:c1:4d:c0:31:43:c5:11:3a:b9:
d7:6d:79:53:29:da:1f:37:f4:5b:f3:cc:90:07:03:
89:45:bd:d3:30:98:84:fe:82:0e:89:12:ca:9b:e1:
34:44:02:d4:f2:9c:db:9e:16:ca:75:b5:33:9c:75:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:5B:47:50:F5:C8:68:A3:7D:EB:8F:96:19:95:EF:61:DA:85:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE8F22FAC5DC11EFA576E64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5c:7d:7c:d5:27:36:72:87:0f:b3:97:d1:03:4a:5a:26:05:
96:fa:e5:8c:d9:2c:0c:f2:27:d6:f1:fc:0c:06:51:6d:3b:bd:
97:b1:09:dc:b7:3a:63:92:d6:6a:c4:9e:0c:9a:88:28:99:4c:
4d:c3:20:0a:ee:dc:1e:8a:cb:7b:3d:9e:64:aa:c8:d2:92:40:
7a:c1:cc:47:f6:c2:d4:27:bf:f3:b2:21:46:61:e0:ee:6d:1f:
14:5d:e2:de:1e:75:26:8d:41:2b:ee:da:b1:6f:a5:da:8c:97:
c5:ad:ff:51:60:c3:2c:a0:09:7d:76:8b:8b:b4:b4:f7:49:fd:
2c:62:67:ac:3c:10:ce:66:68:63:0b:b2:55:eb:6b:f8:44:17:
17:dd:16:d9:a2:c2:8a:35:e0:87:ef:17:8d:dc:a7:0d:89:49:
91:6e:af:01:4d:9d:5a:11:4c:f5:21:83:96:63:a4:d3:3c:b5:
27:68:60:a9:31:c8:50:56:78:fc:c3:b4:4f:10:4f:92:6e:b9:
51:72:73:dd:38:2e:fd:7f:a2:7a:bb:c7:64:29:cc:c6:af:ad:
6c:f6:34:9a:a9:6d:b1:95:22:08:e7:12:6c:13:21:c1:e7:da:
5a:fa:57:da:97:81:09:a3:94:ae:1b:d4:28:fc:08:e5:2d:4c:
d2:e0:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:43 2025 by rpki-client