Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6F3DCCF6111EFBC40145F762E951A.roa
File: D4F6F3DCCF6111EFBC40145F762E951A.roa (raw, json)
Hash identifier: 9wPTvVDWeBpzlE3hVxZIwi9QagnIgR/N6kSug75SeLg=
Subject key identifier: 35:43:36:79:C2:1C:DB:7C:C9:0D:61:07:4C:B5:BF:32:05:85:87:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6F3DCCF6111EFBC40145F762E951A.roa
Signing time: Fri 10 Jan 2025 14:47:36 +0000
ROA not before: Fri 10 Jan 2025 14:47:33 +0000
ROA not after: Sun 12 Dec 2027 14:47:33 +0000
asID: 17561
IP address blocks: 154.81.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80405 (0x13a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:47:33 2025 GMT
Not After : Dec 12 14:47:33 2027 GMT
Subject: CN=67813308-849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:3f:2f:84:78:80:ce:e5:b2:e7:ca:f9:a9:
e1:8c:46:bb:36:b2:a1:3d:e0:44:25:7b:12:91:20:
f5:8f:14:cf:68:c6:73:c4:fd:91:e8:ce:4a:62:63:
91:34:b0:34:e1:9b:7d:00:98:20:7e:f7:b7:e6:ee:
0f:2a:41:c7:5d:d8:62:ae:21:d0:a6:fd:0c:42:bd:
a9:01:13:7b:60:9f:54:67:2a:df:5e:07:23:20:d2:
90:bd:7b:3a:bb:fc:19:92:53:55:33:ff:2c:40:ac:
11:39:96:b7:8b:80:6f:af:2d:83:71:c9:dd:0c:35:
79:ab:e4:94:af:7a:97:40:73:99:2b:d9:12:37:74:
75:04:32:6e:e2:61:23:6f:43:8b:e4:64:59:0c:bf:
eb:65:9f:1f:d0:e5:66:6f:87:db:ba:f1:77:35:83:
5f:28:26:b3:09:15:17:81:1d:0a:45:70:b4:79:ee:
00:00:7e:7c:9b:1b:6e:f0:75:a4:1b:6b:8d:73:49:
f9:7e:ce:69:57:3a:13:5c:cc:92:31:4b:72:38:34:
8c:d9:a1:7e:ba:89:f6:f9:b3:bf:4c:a4:b8:7a:ec:
e4:0d:e4:52:b3:a2:ff:75:20:e0:35:77:d6:45:59:
0f:a7:30:6f:4c:02:da:2c:79:3b:49:bd:10:fe:b3:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:36:79:C2:1C:DB:7C:C9:0D:61:07:4C:B5:BF:32:05:85:87:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6F3DCCF6111EFBC40145F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.142.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f3:47:a1:ad:de:6e:a1:83:b8:4c:cb:d6:86:20:df:2d:ef:
19:9a:15:e3:f9:e6:4e:78:82:39:da:e1:ba:ae:ca:46:68:22:
34:03:9f:12:ec:bf:09:a3:d1:7e:d3:4f:fa:9b:ee:69:db:17:
c6:ad:83:3e:24:02:4f:e2:e1:9a:cc:5f:a1:0a:7d:f7:b1:d1:
b6:d4:94:ae:39:6f:40:c2:7e:55:0e:4f:be:5b:19:74:94:63:
76:30:b5:3d:75:c9:60:c2:e6:e0:4b:df:fd:3a:83:f5:3b:58:
fb:08:d4:a2:94:b7:0f:d0:c7:fe:bb:5b:2b:64:bf:1d:50:c6:
2c:09:b3:17:09:af:44:8f:2e:8b:9c:a8:18:2b:41:01:89:7d:
4f:8b:6d:25:1f:59:ab:bc:ec:dc:31:9e:aa:d0:fb:96:f0:f8:
0b:39:21:50:ff:a2:d3:ca:b8:b1:30:ba:38:26:f4:e1:8e:24:
40:73:17:68:02:0d:80:ec:6a:62:f4:f2:e9:e6:b6:c2:67:26:
2d:47:05:c4:7d:4b:9b:a2:c2:9a:3e:82:e7:23:80:8b:7d:98:
a4:13:05:91:81:2e:be:be:8c:3f:8f:40:32:68:12:cb:2a:ce:
99:e9:8c:87:f1:bb:b6:1b:40:ed:00:e3:c6:80:e9:14:78:52:
c0:15:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:33 2025 by rpki-client