Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F0E034C0D111EFAD9FF7B3762E951A.roa
File: E4F0E034C0D111EFAD9FF7B3762E951A.roa (raw, json)
Hash identifier: mcqyv1bCeZKwQgl6OWB+YF1Vj1sJ6JSrPqgDX66Gza0=
Subject key identifier: 8D:28:C2:D3:5A:62:E9:72:CF:6C:E8:8E:2E:C7:95:13:14:BA:33:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F0E034C0D111EFAD9FF7B3762E951A.roa
Signing time: Mon 23 Dec 2024 02:01:59 +0000
ROA not before: Mon 23 Dec 2024 02:01:56 +0000
ROA not after: Fri 10 Dec 2027 02:01:56 +0000
asID: 17561
IP address blocks: 154.83.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73280 (0x11e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:01:56 2024 GMT
Not After : Dec 10 02:01:56 2027 GMT
Subject: CN=6768c497-c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:b5:7b:34:0a:07:e3:56:cc:4f:51:96:ec:
cf:fc:e1:7c:2f:c8:75:ab:eb:6d:d1:81:23:b5:20:
ea:b1:32:ad:e6:0a:67:a0:1b:69:7b:87:f4:70:ae:
09:68:31:66:6c:26:d6:8c:14:55:ab:47:7d:7a:fb:
f6:4c:cb:ae:ab:ec:23:21:9b:94:66:ae:eb:dd:ca:
5a:94:81:1c:8a:62:23:04:16:75:4f:ce:21:34:07:
14:b6:79:30:ec:49:70:cd:0d:f9:06:ec:36:ed:01:
d8:83:a6:83:79:a2:4a:19:40:40:37:e0:d2:f4:7f:
48:0a:df:00:4b:1c:a9:e8:25:c2:9e:b0:fe:dd:59:
91:cf:15:82:13:41:69:8c:27:90:04:82:8a:75:88:
88:ab:19:97:a2:69:9e:a6:81:56:87:7c:4b:3a:b3:
97:c5:c9:63:86:1e:88:6e:41:9a:57:74:76:f8:4d:
2f:c8:58:9c:8e:97:de:8f:30:73:57:a4:7b:b0:90:
a8:b8:7b:95:5d:fe:bc:8e:de:87:19:46:21:48:c3:
f0:f8:f7:f6:44:2a:b4:bf:65:d2:e2:8b:44:ca:fa:
93:22:88:7a:ee:9b:87:22:94:70:a5:0d:76:f5:bf:
80:64:3f:7a:61:c2:d0:59:d1:7d:d7:32:08:0d:be:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:C2:D3:5A:62:E9:72:CF:6C:E8:8E:2E:C7:95:13:14:BA:33:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F0E034C0D111EFAD9FF7B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.108.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:98:50:b4:8f:f8:ae:26:df:ad:ba:58:0c:ea:45:5f:2e:07:
53:76:aa:d7:40:c4:df:12:d4:10:59:1e:5d:6b:1a:b2:9f:30:
f8:e0:72:43:ea:b9:be:6c:55:86:b8:d0:ff:6a:4c:7c:71:1d:
19:27:28:92:b9:ee:3f:06:1e:e8:2c:e6:31:ba:49:2a:41:1d:
c1:0c:38:19:6b:92:98:70:13:f5:f9:55:3e:dd:96:b1:98:94:
24:75:09:dd:76:be:a4:66:88:83:5b:15:61:67:1b:61:8c:42:
e5:90:83:ec:42:28:8a:c7:ca:25:a7:ad:f6:18:46:d2:9c:33:
48:73:7c:b7:bb:d4:54:85:4c:16:79:bf:ae:71:87:76:b5:ef:
02:e4:f4:7e:fa:9d:9c:75:b5:e4:a9:09:f6:71:ae:b2:88:c5:
6e:58:0e:c1:cc:65:03:a2:9a:f3:7f:11:fb:50:ee:53:22:66:
ae:6a:ca:24:cc:32:25:2d:b0:e6:18:a5:d0:85:48:52:a3:83:
e9:27:48:d6:89:d9:c8:d2:5f:b8:b4:01:8b:43:ea:0a:79:34:
1d:75:5a:a7:70:7c:72:af:b6:8f:80:62:16:64:01:78:4b:e0:
06:ad:b0:a5:c7:6f:46:94:f5:50:35:72:08:4e:00:c8:fe:c5:
c2:9e:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:44 2025 by rpki-client