Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82DF3BCF47511EFBD44BCBC762E951A.roa
File: F82DF3BCF47511EFBD44BCBC762E951A.roa (raw, json)
Hash identifier: EoyhlhsYWvm7RKtW/UFB4qQ3Rwnz78dKsRk2Z0RtIgw=
Subject key identifier: CC:8D:24:AE:BA:03:CD:58:36:7B:B4:E4:CE:0E:86:88:A7:3C:1E:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016585
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82DF3BCF47511EFBD44BCBC762E951A.roa
Signing time: Wed 26 Feb 2025 19:14:58 +0000
ROA not before: Wed 26 Feb 2025 19:14:55 +0000
ROA not after: Sat 19 Feb 2028 19:14:55 +0000
asID: 17561
IP address blocks: 154.82.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91525 (0x16585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:14:55 2025 GMT
Not After : Feb 19 19:14:55 2028 GMT
Subject: CN=67bf6832-0396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:da:51:f4:49:36:00:4f:81:4c:7b:52:60:
a7:23:d3:09:62:17:7b:0b:1f:c4:25:8a:5d:20:70:
bb:f9:dd:a7:04:53:a2:13:a9:e6:ea:3c:6c:46:b3:
11:73:9c:70:2f:49:08:6e:8d:5e:0e:4d:f5:a3:ad:
7b:e0:8b:45:d6:27:a9:3e:e2:8c:0d:08:20:23:8f:
ee:0f:ed:5b:ac:a3:a0:10:fd:9a:0d:12:ee:53:2d:
e3:20:04:bc:2d:1f:51:a3:c5:17:4d:70:2c:27:93:
e1:da:70:d2:ae:92:7a:1a:c4:3e:72:f7:05:63:66:
41:89:67:37:4d:9f:f5:de:0f:4e:f0:a0:1c:18:f3:
aa:29:bb:db:5c:d1:8f:53:21:c3:5d:91:01:fa:80:
01:34:f5:95:4d:25:3d:a6:04:da:a2:5a:53:63:e5:
5a:ac:a8:9a:fe:c9:c8:e3:a3:3f:46:68:a7:b6:b9:
17:f1:9b:30:a5:11:30:23:ff:ba:bd:b5:c2:98:df:
f3:60:7b:da:d5:0b:b5:4a:18:bc:4b:ba:3f:58:1c:
4b:c4:30:b6:33:42:83:c3:8e:0f:dc:c7:06:73:21:
70:b3:5d:c4:7b:46:15:9a:0a:2b:be:38:7e:31:c9:
32:75:41:09:2b:e0:db:42:08:45:26:21:16:e5:c3:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:24:AE:BA:03:CD:58:36:7B:B4:E4:CE:0E:86:88:A7:3C:1E:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82DF3BCF47511EFBD44BCBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/24
Signature Algorithm: sha256WithRSAEncryption
42:15:c6:e5:8a:09:1a:92:6a:c3:9e:c7:67:af:2d:27:1d:2a:
63:3b:af:ce:bf:d5:69:66:2b:b1:2a:3f:35:68:99:d3:74:b1:
c4:89:a6:fc:c8:0f:54:64:ce:bf:2a:0f:67:d4:f2:eb:11:fa:
52:fc:8a:21:f6:2b:f9:07:31:cc:05:5e:65:6f:f0:22:76:0d:
3a:6e:66:de:77:f0:7f:ad:41:95:da:9c:11:81:72:06:5e:45:
bd:7a:a2:7c:20:8e:47:c2:71:ff:0d:47:36:fe:1a:09:52:ed:
9c:a0:c7:ee:97:b5:d9:74:6f:35:00:fd:0d:7b:40:da:81:46:
f0:97:f0:4a:7e:d4:ff:c8:26:39:f0:01:d9:07:3e:75:dc:97:
7d:4c:86:f5:06:4f:90:19:1f:ac:20:96:a0:12:d3:d8:20:01:
b1:9d:ed:a8:f5:81:7d:91:54:0c:62:c5:7c:90:ee:a2:b8:71:
53:de:df:e3:10:6d:8a:56:46:7a:a2:86:0f:00:9a:aa:ed:df:
61:66:2e:16:89:76:e8:23:50:39:a1:4d:aa:d6:ef:5b:67:63:
d5:03:04:d8:07:b9:ae:fd:66:38:8e:94:47:25:26:d8:0b:a8:
4b:35:ed:70:de:1f:ee:35:3a:6c:09:c2:b3:02:83:aa:a0:bd:
02:16:03:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:17 2025 by rpki-client