Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7D1B3C0A1111F09934C140762E951A.roa
File: DC7D1B3C0A1111F09934C140762E951A.roa (raw, json)
Hash identifier: Cx2ll8FlDU/axe50t6A9WLkpoaMkbKeHRMOjBeHTO84=
Subject key identifier: 06:47:B5:DB:3A:97:8C:36:0E:FA:D7:7A:76:2C:C4:FA:B3:0C:95:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01764F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7D1B3C0A1111F09934C140762E951A.roa
Signing time: Wed 26 Mar 2025 07:13:48 +0000
ROA not before: Wed 26 Mar 2025 07:13:44 +0000
ROA not after: Sat 05 Apr 2025 07:13:44 +0000
asID: 211392
IP address blocks: 154.83.22.0/24 maxlen: 24
154.83.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95823 (0x1764f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:13:44 2025 GMT
Not After : Apr 5 07:13:44 2025 GMT
Subject: CN=67e3a92c-20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:80:46:b7:a3:48:78:d4:57:cf:83:97:6e:
2c:61:99:72:e6:11:ad:88:2f:ad:27:a2:7a:a4:04:
43:05:9d:fb:2c:9d:90:ea:46:c9:6e:89:64:81:e6:
3c:3e:0f:26:c7:28:33:95:27:d6:78:d0:0c:93:52:
ac:37:87:45:a0:a1:a1:26:d0:1a:e8:2d:99:23:99:
e8:62:1b:94:e5:b6:74:a9:f4:4b:ac:a3:33:9f:4b:
f8:7c:d7:2f:32:f6:18:ad:0e:27:a1:de:e2:f8:46:
f8:6c:e0:62:c2:75:5a:2b:a0:2b:11:4d:bd:83:42:
55:ac:33:4d:4e:cd:9d:93:b9:85:8e:52:02:27:b0:
7f:e9:96:f9:ac:c6:b2:58:8a:b6:05:ce:27:bf:69:
b8:67:b7:16:be:f4:d2:2c:93:f8:9d:be:a8:97:e7:
27:7d:01:8e:20:d8:17:4f:4b:42:0b:41:55:84:ec:
22:10:65:d5:d9:75:c9:b9:92:b4:9a:c5:fc:35:f7:
21:01:b4:27:9a:c9:1b:f9:17:50:9d:46:79:c7:e4:
8d:4d:43:ef:49:2d:02:21:01:b0:fb:c1:aa:89:e6:
b0:f8:5b:c0:79:1b:87:51:38:7c:40:93:15:4a:04:
8e:ee:7c:b7:78:c9:5e:53:a7:1e:53:05:70:f6:bf:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:B5:DB:3A:97:8C:36:0E:FA:D7:7A:76:2C:C4:FA:B3:0C:95:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7D1B3C0A1111F09934C140762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/23
Signature Algorithm: sha256WithRSAEncryption
86:f3:c1:34:a1:28:74:91:1c:77:80:fa:f7:54:b3:39:76:2b:
49:5c:66:61:86:df:70:01:4d:1c:09:0c:62:a7:d8:92:67:2d:
34:ca:6e:a7:54:e0:39:d8:d3:33:76:fb:ec:38:b0:6b:be:b4:
8b:fb:25:89:96:81:98:cc:65:41:2b:a1:42:6f:fe:ab:4e:80:
49:b3:ee:67:3c:09:8a:3c:a8:8f:70:5b:75:02:d7:aa:2e:3a:
83:e9:f6:69:1f:38:41:ed:9f:0c:ae:8e:c3:a2:5e:05:ea:f2:
df:c4:70:14:a7:e8:99:26:fc:53:d9:6f:18:a5:6b:84:e9:e6:
7b:58:bc:3a:70:5c:d8:ef:71:b4:07:71:aa:e8:bd:75:69:8d:
e9:59:38:da:7f:c1:d5:11:15:f3:99:18:9c:cf:01:60:dc:87:
88:b5:48:d8:57:65:ab:81:08:fa:58:31:2f:37:4b:7a:76:04:
a5:1f:7a:15:50:c6:86:1b:0b:f0:fd:b1:fe:2e:e8:46:4e:c2:
bd:dc:9c:96:29:96:11:7c:bb:8d:b9:c3:90:f4:39:2e:ce:2b:
3f:df:d9:d9:85:82:f0:fd:19:38:f8:e3:c2:5c:2f:3e:0d:8a:
71:1b:de:c9:77:86:fa:79:bf:ec:1d:7a:4f:22:5d:a8:1f:5f:
e3:90:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:41 2025 by rpki-client