Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED1DA16EC0C911EF8CE7AD7A762E951A.roa
File: ED1DA16EC0C911EF8CE7AD7A762E951A.roa (raw, json)
Hash identifier: zOXIAg6YznjO5imziNlDGwGhcR24rXbsQNlkoz6Oo1E=
Subject key identifier: 44:A3:21:16:0E:51:60:58:9F:B5:11:9B:61:8B:34:17:5E:AA:C1:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED1DA16EC0C911EF8CE7AD7A762E951A.roa
Signing time: Mon 23 Dec 2024 01:04:57 +0000
ROA not before: Mon 23 Dec 2024 01:04:53 +0000
ROA not after: Wed 10 Dec 2025 01:04:53 +0000
asID: 984
IP address blocks: 154.82.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73194 (0x11dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:04:53 2024 GMT
Not After : Dec 10 01:04:53 2025 GMT
Subject: CN=6768b739-1274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:a5:7e:19:bf:f5:99:a3:fd:cf:5a:29:e1:
d0:a3:db:7b:2e:fb:2b:53:3d:d4:95:d6:69:14:65:
ff:da:4d:20:00:e2:5c:49:49:fd:29:cb:15:91:22:
89:d0:ab:13:fd:3e:87:cb:4b:29:23:91:15:4f:62:
e7:86:9c:71:00:32:e6:7b:8e:f6:52:00:b6:9f:b4:
02:ba:e9:75:16:a9:de:c1:30:e7:0e:62:8d:85:a0:
22:47:87:2d:15:93:38:54:6f:1e:c6:a6:d9:37:b0:
f6:42:a3:d9:7d:49:47:51:27:53:6c:31:93:e1:1b:
ff:72:9e:6a:32:cb:87:46:80:50:b5:33:c0:cc:65:
74:d8:92:ac:d9:e5:31:a1:a4:17:20:5d:a3:51:d9:
7f:63:14:47:7b:e6:f0:d6:65:e2:77:aa:dc:20:37:
b2:9e:17:b3:e4:82:d7:87:e2:81:34:07:37:62:6f:
99:1d:71:3c:49:33:e8:89:31:ec:80:89:60:dc:27:
42:51:5d:84:7f:51:fc:26:03:ab:1f:9c:6e:e7:da:
a4:a2:b8:bc:17:25:ec:ab:a6:e1:a2:3e:2d:a2:c0:
87:b1:96:46:4f:c8:77:d8:56:55:bc:89:e9:28:96:
09:18:08:d6:e9:67:47:34:58:81:58:92:20:71:fc:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:21:16:0E:51:60:58:9F:B5:11:9B:61:8B:34:17:5E:AA:C1:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED1DA16EC0C911EF8CE7AD7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.232.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:c4:f8:ef:a8:1d:18:c0:f4:63:c5:d7:f3:2e:a1:8d:ac:
53:ca:52:52:86:43:07:90:84:c5:8d:1e:6c:65:7b:0f:3c:25:
8c:fb:8e:03:77:5b:10:34:7b:e7:a5:6a:f5:5b:6c:01:3d:09:
95:f2:99:31:27:c3:cc:79:e1:b6:95:e9:b0:dd:88:3b:93:3d:
3a:bc:f6:34:2b:5c:57:b8:aa:28:99:0a:bf:a9:ca:4a:6c:d3:
7f:8b:25:7e:51:5f:ba:8a:e1:7f:f7:8e:23:ba:b0:6b:7d:22:
4e:30:13:7f:d9:c1:06:26:6e:39:2c:68:fa:d5:fa:7e:a9:03:
5c:be:77:a0:8f:9d:5d:0a:8e:08:41:e6:e4:5f:f3:0d:50:2b:
cc:33:7f:45:13:7e:2a:b6:de:c7:ce:97:e7:d7:0e:47:2f:87:
cf:9d:48:6b:df:a1:14:0b:ae:c4:e0:95:30:65:5e:e9:6b:ea:
1e:46:d3:85:8e:b3:8e:d3:9e:58:55:4f:ac:36:b0:4a:8c:3c:
c4:4c:60:8d:73:f5:49:12:36:28:57:48:f8:ce:aa:38:7c:75:
e9:59:bd:cd:fa:ad:d9:6d:7e:94:02:14:d0:f0:ef:7c:e5:a6:
07:23:5a:bf:26:dc:7e:64:49:d8:75:3f:c7:77:43:41:0e:41:
a6:b2:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:43 2025 by rpki-client