Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3257A08C3C811EF8FBEFB91762E951A.roa
File: F3257A08C3C811EF8FBEFB91762E951A.roa (raw, json)
Hash identifier: F/Dbd8SSn3TT7DsLVvZ+2q6RzRel6AntMYDPFzc21ao=
Subject key identifier: C1:BB:B8:2F:2A:0A:52:EF:8E:62:00:D4:F6:43:62:C6:5E:07:9A:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3257A08C3C811EF8FBEFB91762E951A.roa
Signing time: Thu 26 Dec 2024 20:35:31 +0000
ROA not before: Thu 26 Dec 2024 20:35:27 +0000
ROA not after: Sun 12 Dec 2027 20:35:27 +0000
asID: 17561
IP address blocks: 154.83.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75758 (0x127ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:35:27 2024 GMT
Not After : Dec 12 20:35:27 2027 GMT
Subject: CN=676dbe13-73b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:71:e5:60:d7:49:1a:ae:e6:1d:f6:7f:c5:
21:50:cc:b2:f9:27:83:74:5c:af:41:7d:63:9c:23:
fb:6a:0f:4f:dd:42:21:80:1d:3d:bc:cd:56:e0:34:
04:c5:05:90:f0:62:23:7d:58:cf:1e:b3:df:e1:f3:
c4:eb:3b:e6:99:f8:3d:0b:08:2c:f4:0d:6a:1e:38:
99:00:9c:a5:2b:f4:2b:4b:2a:30:a1:7b:cf:3f:6b:
0a:27:f2:ee:2a:e4:9f:b8:e1:1f:a5:a1:8b:50:62:
a2:9c:d6:45:40:b6:8e:8f:54:40:1b:aa:41:b2:49:
80:90:69:ad:a9:ce:7f:b6:ea:96:5f:81:31:31:f7:
de:cc:50:1e:d8:c1:de:2c:20:94:29:b6:6f:20:66:
55:8c:1b:f3:29:75:43:51:73:3c:c4:f6:ea:14:55:
87:cc:83:c4:3b:cd:f0:96:80:74:ac:fa:2d:02:40:
fb:b5:25:9b:3d:a9:29:3b:51:62:37:27:a1:ec:42:
3d:e1:c4:0f:e6:61:35:74:a6:0b:7c:6e:49:59:f5:
e2:1d:38:b7:f3:d5:f1:81:a0:da:c7:4f:91:53:1e:
a1:27:00:14:a7:f8:be:2d:81:00:95:46:96:e9:ad:
d6:55:f3:72:a6:a8:14:23:e1:2b:6e:e1:7e:80:96:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:B8:2F:2A:0A:52:EF:8E:62:00:D4:F6:43:62:C6:5E:07:9A:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3257A08C3C811EF8FBEFB91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:85:18:c7:73:e4:b3:61:e8:57:d5:d2:ef:48:9b:b7:02:a8:
77:14:e3:ff:8b:36:d0:92:8e:6c:31:92:23:97:79:96:6a:0e:
f9:2d:99:d0:5b:57:d6:f3:85:95:d8:d1:51:59:dd:ee:7b:ae:
9e:f5:af:9c:99:9f:68:75:dc:1e:23:99:74:2c:c9:75:60:e8:
28:52:4f:95:57:0a:b3:2a:69:ce:23:47:41:8a:21:0f:b7:40:
b4:76:d7:dd:08:8e:6c:b9:20:69:e2:bc:08:c0:a2:dd:74:d6:
ea:7c:b2:4a:2e:a5:f5:da:d3:6b:78:72:6c:12:5f:82:3d:03:
58:94:30:7c:a5:c0:b6:6c:b4:68:46:3d:52:7a:91:05:e3:e5:
6c:06:69:29:6e:78:bb:b7:c3:8d:6d:7c:55:fe:d9:1c:61:5b:
58:31:cd:c0:6a:65:d1:98:3a:57:1c:07:50:19:db:60:8f:c7:
01:0d:44:15:f2:13:7b:d3:a7:09:96:9a:80:3b:28:a4:50:fe:
2f:03:ee:3e:12:50:1e:c4:94:fb:00:71:8a:64:81:57:95:67:
ae:8d:1d:54:5c:57:62:20:51:e6:18:68:d8:bd:04:d4:3f:23:
f3:f3:a0:ea:59:6f:9d:0b:d9:e9:bd:ba:65:56:bb:d1:f7:c6:
52:f7:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:01 2025 by rpki-client