Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E187DC44C3CF11EF875CE0BD762E951A.roa
File: E187DC44C3CF11EF875CE0BD762E951A.roa (raw, json)
Hash identifier: u9tKzuBt4ewQMvWGuv/TL5VpQsJWd+4ODHiEyi3A5uE=
Subject key identifier: AB:64:91:93:C4:06:15:45:48:8E:C5:2E:37:31:93:49:E4:85:13:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012834
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E187DC44C3CF11EF875CE0BD762E951A.roa
Signing time: Thu 26 Dec 2024 21:25:08 +0000
ROA not before: Thu 26 Dec 2024 21:25:04 +0000
ROA not after: Fri 12 Dec 2025 21:25:04 +0000
asID: 984
IP address blocks: 154.83.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75828 (0x12834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:25:04 2024 GMT
Not After : Dec 12 21:25:04 2025 GMT
Subject: CN=676dc9b4-765c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:52:dd:2f:a9:b4:00:96:a1:00:52:19:43:
52:27:61:35:e6:01:97:99:1e:e3:73:4b:97:5f:05:
d2:66:9c:29:cc:ac:19:0d:62:18:53:d7:a7:78:a0:
ba:4b:77:7f:9a:1c:2f:e8:0c:32:54:92:76:80:e1:
d2:00:4e:62:82:c2:19:78:47:5f:e8:2e:ec:ce:3a:
67:1d:66:00:a1:17:09:1a:02:5e:9d:c3:fa:c0:16:
ac:35:55:73:7c:aa:24:25:5b:bf:5f:eb:1e:2a:11:
7c:60:78:a2:9e:bb:b9:3a:32:5b:f2:8d:d4:04:27:
94:0f:ad:a2:4a:b5:7b:8a:37:46:18:d8:24:36:15:
c6:2e:99:ac:31:7f:cd:28:15:42:42:2e:d3:3c:44:
96:a1:b4:af:5a:68:c0:a1:4b:e0:cc:1b:f4:64:a1:
37:7d:21:82:91:fc:53:79:89:86:6a:18:1f:ae:61:
21:0d:15:b4:00:f2:6a:cb:b5:6b:2c:70:13:a8:0f:
eb:85:62:24:a4:e4:ea:32:85:6d:33:bf:19:48:5f:
20:53:4b:2f:db:5b:4b:39:c5:24:4b:2e:92:b8:00:
85:5a:66:65:04:41:33:15:60:00:0a:37:7c:3a:4b:
09:3d:f4:0d:f4:c9:41:61:b1:6a:47:93:6b:43:9f:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:91:93:C4:06:15:45:48:8E:C5:2E:37:31:93:49:E4:85:13:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E187DC44C3CF11EF875CE0BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:34:50:2c:96:96:c4:d0:0f:67:55:53:06:a6:34:0e:aa:68:
7c:5d:26:5d:fe:6c:46:3b:35:eb:0a:ae:ae:89:a2:b1:b0:a7:
5e:95:11:76:7e:96:2b:36:93:7f:9d:9e:b1:8f:cc:45:c6:de:
25:22:be:3d:eb:86:ee:b5:3e:87:e0:b4:5a:5c:2b:35:ed:66:
fb:19:3e:1b:56:07:db:31:d3:85:88:11:a0:7c:fb:cf:b4:d2:
04:6e:e8:b0:cd:be:ef:68:47:33:61:f6:43:34:fa:85:4e:42:
ff:ee:f8:22:11:ef:8d:ef:21:3d:17:1c:7b:7c:d1:38:b4:32:
c0:75:31:3d:4b:90:0f:f4:47:69:f6:e3:4e:32:58:e6:3b:34:
fc:15:e7:c0:fc:86:bf:a7:9c:25:08:3c:10:16:e9:df:eb:c1:
d1:19:f6:2d:91:49:62:76:9a:b6:b7:04:48:7e:ee:bf:18:db:
8c:39:1e:ac:84:56:4c:50:fb:eb:db:76:28:57:b6:e4:82:ef:
28:06:78:a8:84:47:ef:67:26:a4:11:89:37:bc:2c:50:a4:35:
8c:14:8a:69:d2:15:d6:e6:88:46:72:f2:b0:a4:36:17:dd:39:
5b:7c:62:58:9e:51:49:6f:7d:01:0a:56:68:7c:d8:33:4f:3b:
db:c2:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:11 2025 by rpki-client