Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65CDB44F81111EF81EE056E762E951A.roa
File: F65CDB44F81111EF81EE056E762E951A.roa (raw, json)
Hash identifier: KcIAfK0HiK1R+h6OU8guFs0XE/grmMI09Sw5xnNJg7Y=
Subject key identifier: 1C:F4:3F:4A:9F:8B:97:80:CD:88:3A:3D:4C:E2:EA:EB:AB:1A:54:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65CDB44F81111EF81EE056E762E951A.roa
Signing time: Mon 03 Mar 2025 09:29:10 +0000
ROA not before: Mon 03 Mar 2025 09:29:06 +0000
ROA not after: Fri 04 Apr 2025 09:29:06 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94139 (0x16fbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:29:06 2025 GMT
Not After : Apr 4 09:29:06 2025 GMT
Subject: CN=67c57666-2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:70:16:b9:0d:6e:e9:0a:2e:20:ed:e5:0d:
46:88:f9:81:6d:5e:5c:02:3a:86:36:26:ce:4d:3e:
be:99:48:ac:4a:61:a2:a1:8f:79:04:5c:2a:3d:44:
69:ac:28:ef:0d:29:ae:69:e2:fe:5b:8a:de:2d:09:
f8:e0:80:3d:e0:61:63:a6:d2:74:1c:f6:b9:de:5e:
f4:02:a1:4e:9f:11:33:44:ea:2a:25:81:66:98:a8:
9c:4b:ad:f9:aa:2a:5f:9b:6b:46:c9:31:d6:13:0e:
f0:d5:a6:16:64:3c:1f:45:7e:c0:31:1b:63:06:a3:
4b:d5:bf:ad:a1:ea:9f:50:ea:fd:e3:c0:fd:32:7e:
21:a5:30:e4:f3:45:d1:22:f2:4d:79:ef:8c:d3:c4:
dc:fe:a5:b7:33:00:15:38:6c:3e:00:60:06:cf:ae:
de:c5:6a:00:38:75:da:7d:b5:e8:70:51:3f:0f:a2:
d8:da:5a:8b:d5:fd:6d:d2:43:1d:a6:f3:d5:39:c8:
0f:af:77:3e:f6:2b:96:f8:61:fa:e2:2d:3d:a4:ed:
c0:75:6b:9a:cb:98:2c:e7:2f:62:ff:f2:54:d4:e6:
3a:ae:ba:67:07:aa:02:05:92:0a:8c:85:cf:b4:a6:
81:10:a1:e5:24:5f:26:7f:19:41:74:cd:93:1e:22:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:3F:4A:9F:8B:97:80:CD:88:3A:3D:4C:E2:EA:EB:AB:1A:54:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65CDB44F81111EF81EE056E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9b:1b:68:3b:d9:99:15:28:1f:ce:0a:a1:a9:ae:8c:0b:b0:
a9:d6:8d:96:dc:f9:46:f5:b0:ed:d9:11:29:58:08:4b:a1:68:
8e:4e:34:43:8f:f2:e8:3f:d8:47:a2:5f:aa:9b:a0:dc:fd:0d:
c5:46:82:82:9d:c4:bb:2b:39:bb:d1:d5:ef:03:fa:75:7c:78:
21:20:e7:c9:da:58:e4:47:f5:90:b8:19:29:60:62:16:6b:ab:
37:95:13:d2:8a:38:ea:ed:86:61:b4:89:ed:ea:c1:6f:06:55:
59:1b:a8:cf:51:11:bb:f8:97:ca:07:a1:6e:84:90:b7:bc:f9:
84:5c:c9:dc:be:73:b2:a4:2b:a6:c9:34:ba:01:fd:6e:dd:da:
24:04:c0:28:7c:ba:9c:b7:4e:70:0f:b4:e8:59:de:cb:b5:47:
33:a6:5a:dc:5b:19:db:7f:02:06:0f:94:08:22:f5:05:b1:36:
29:96:d7:73:e8:50:8b:2d:46:d1:68:84:6e:90:2c:93:56:2a:
32:aa:f9:8b:33:29:c3:6c:ab:dd:a2:ab:30:00:27:7d:1f:c5:
6d:ad:71:4c:7c:93:74:50:03:c0:94:f1:b0:ec:fe:b4:99:ba:
cf:cf:a0:07:35:e6:4b:cc:4f:21:6e:c7:a2:21:e6:ee:0b:c2:
8e:52:ee:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:10 2025 by rpki-client