Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC954BB2F35F11EFA7C32D46762E951A.roa
File: DC954BB2F35F11EFA7C32D46762E951A.roa (raw, json)
Hash identifier: On3JicS351nYV7Lj7uZnzEzCLLQQ9owsNfdRbTYmPMg=
Subject key identifier: 1E:61:8D:83:5D:23:03:D7:17:D1:9D:9E:38:79:85:FD:C4:C0:F7:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC954BB2F35F11EFA7C32D46762E951A.roa
Signing time: Tue 25 Feb 2025 10:04:12 +0000
ROA not before: Tue 25 Feb 2025 10:04:08 +0000
ROA not after: Sat 19 Feb 2028 10:04:08 +0000
asID: 17561
IP address blocks: 154.83.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89642 (0x15e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 10:04:08 2025 GMT
Not After : Feb 19 10:04:08 2028 GMT
Subject: CN=67bd959c-58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:27:94:4d:4a:ee:b8:e5:3c:fa:fe:d1:87:
f7:94:4d:80:2d:ec:b9:ac:8b:b3:2d:31:cf:d3:b4:
82:86:2b:3f:e4:9d:f2:da:87:8c:27:db:33:c6:98:
39:ab:19:2f:ad:8d:ff:a9:5c:9f:9b:7a:26:33:9e:
fa:df:6e:c3:41:7b:af:08:3b:be:9b:56:56:dd:54:
3d:ac:0d:fe:2b:c0:07:2e:4c:3f:63:85:b6:db:d0:
12:01:ab:c5:a5:4d:94:e4:4b:9b:9b:78:03:94:5d:
5b:e3:a7:71:d6:d4:4b:b1:ef:6c:7e:be:85:a3:50:
03:1a:63:5e:db:04:08:58:d4:ed:c3:b6:45:cc:05:
4a:d8:35:72:f9:c0:e7:f1:90:48:45:08:10:cc:78:
27:96:af:bb:61:37:20:19:a8:1f:32:ba:c9:95:80:
ed:08:6e:4c:7f:f9:50:2e:7e:91:35:71:17:15:d8:
f0:74:4e:03:ff:b5:69:03:61:19:7f:5b:36:df:af:
12:a7:55:e8:b5:83:25:f5:96:8d:df:73:e1:70:0d:
69:fb:62:0c:15:64:aa:0e:73:c5:86:90:25:85:28:
64:f2:65:90:69:a5:07:5a:43:db:f1:62:3a:eb:fe:
72:c8:9d:bf:97:6a:44:37:66:f3:06:d0:a2:24:b9:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:8D:83:5D:23:03:D7:17:D1:9D:9E:38:79:85:FD:C4:C0:F7:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC954BB2F35F11EFA7C32D46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a7:9f:ee:28:0a:5c:37:0a:25:c2:2c:70:3b:e9:ff:60:b6:
93:2f:73:b0:a7:24:3b:7e:f2:21:ad:e4:7d:c0:5e:ec:fd:fb:
d9:b2:6b:8b:10:a0:1f:a7:82:8f:27:ab:30:eb:52:ce:ab:2e:
18:82:c4:8a:18:48:47:49:83:55:32:1c:d3:8f:71:c3:4d:0c:
19:c1:3d:4c:5f:91:1c:7c:5f:ba:9b:26:98:75:90:f4:1d:da:
11:90:19:00:23:99:56:68:a8:5e:f9:b5:ef:54:a3:88:2a:2c:
84:84:00:57:8c:81:c0:1d:5d:2a:57:1e:6b:cd:bc:d7:54:f2:
50:45:e0:67:9a:77:64:36:7f:ab:13:86:84:92:72:f1:e5:81:
c6:92:5a:c5:3f:3e:a4:58:3a:83:ef:e9:4b:f6:ab:6a:43:88:
6f:5d:c7:0f:20:ad:c8:7f:bc:02:b9:9e:8b:80:4e:09:64:9c:
43:2e:aa:13:81:bd:30:8a:f9:70:10:7c:4d:66:2c:b0:3b:68:
13:4a:51:ac:68:4b:ca:3c:30:88:ec:8c:ae:9e:2b:49:73:6e:
0a:9f:fc:96:78:58:01:6a:c8:db:57:3f:42:99:91:21:43:c1:
84:cb:a9:16:c5:bf:f3:2a:dc:4b:25:05:30:dc:05:24:02:fe:
d9:ea:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:53 2025 by rpki-client