Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187C8582C8EF11EF853E2F56762E951A.roa
File: 187C8582C8EF11EF853E2F56762E951A.roa (raw, json)
Hash identifier: ID35K7WfPjPK8/vp14YDGxCkpHdxPLkohzpu2B3Dp6A=
Subject key identifier: B7:C7:04:28:2E:B6:6B:1E:AE:9A:E9:42:04:7B:26:0E:A6:DB:C2:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013263
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187C8582C8EF11EF853E2F56762E951A.roa
Signing time: Thu 02 Jan 2025 09:51:11 +0000
ROA not before: Thu 02 Jan 2025 09:51:07 +0000
ROA not after: Thu 06 Feb 2025 09:51:07 +0000
asID: 61112
IP address blocks: 154.83.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78435 (0x13263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:51:07 2025 GMT
Not After : Feb 6 09:51:07 2025 GMT
Subject: CN=6776618e-f3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:7c:30:c4:07:7d:27:52:2b:71:ce:1d:c2:
aa:17:df:6c:53:a5:fc:43:1b:02:f9:7a:d1:0c:48:
49:e0:d2:57:ac:fc:83:1e:ea:67:ac:4b:86:60:6f:
fd:10:5b:dc:77:20:28:45:72:e8:3b:7d:53:37:e3:
20:8e:f9:0a:28:39:24:0d:1f:bd:a4:a0:2d:05:52:
e5:7a:e8:1b:d0:de:f2:85:b7:27:4f:69:ef:50:24:
ee:19:3f:4e:75:2d:1e:42:e9:80:57:c4:97:f2:16:
5d:fc:92:c2:97:82:e7:14:4d:b2:eb:b7:45:6a:d5:
64:0f:9d:25:99:37:a8:5a:ea:e2:77:99:09:37:36:
a7:4a:cb:1e:73:09:4e:7a:ae:43:fc:4f:f6:51:89:
c5:91:20:34:92:e2:19:c8:48:6e:70:b7:0b:eb:6a:
4a:66:bb:e6:fd:70:e7:c6:fe:15:b3:be:1e:08:94:
e3:c5:74:bf:9d:ca:8d:e1:9a:4d:fb:5e:9b:0c:04:
b4:c0:97:58:ef:61:b8:02:f8:94:3a:65:65:09:41:
a1:25:a0:34:40:04:ab:92:ff:cf:79:68:4d:0e:72:
8f:fd:c0:58:4f:ca:23:1e:59:9d:91:7d:b8:14:9f:
3a:db:7c:29:5d:18:d1:0a:6b:95:e9:f7:2a:d4:44:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:04:28:2E:B6:6B:1E:AE:9A:E9:42:04:7B:26:0E:A6:DB:C2:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187C8582C8EF11EF853E2F56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/21
Signature Algorithm: sha256WithRSAEncryption
95:7d:ec:75:06:e9:be:c4:74:b2:b0:d4:ae:49:e8:15:f5:38:
75:ce:87:b2:61:fa:56:b2:8d:d5:3c:8d:fb:0c:a1:b3:a9:7d:
40:a9:0d:92:a7:24:02:77:0a:07:40:62:fe:6f:d1:75:89:50:
7c:9b:26:e3:aa:95:c8:a4:61:ef:39:c8:a0:50:52:5a:d6:16:
9b:6e:37:be:08:ce:3c:fe:b0:24:27:27:aa:82:72:4d:39:05:
7b:f5:a5:df:38:eb:b2:c5:5a:6c:8a:d2:15:b2:86:0d:de:35:
01:1b:c7:3b:9a:3c:30:1d:d6:76:3a:55:31:9a:6b:e0:26:0a:
fe:94:f5:2c:56:1c:af:ee:53:0d:bc:8b:1e:82:2e:ac:d1:83:
89:ea:be:87:bc:b1:d4:51:26:15:73:be:23:eb:a6:c9:95:53:
0e:68:ae:e3:bf:27:f0:ec:91:fb:51:e3:36:88:04:b4:8c:55:
28:92:3b:ab:a0:e9:2b:72:9d:b9:ab:bc:77:cb:34:cf:f3:13:
f3:8d:9b:67:25:f0:51:28:ac:42:60:a6:6c:c6:5f:f9:27:08:
fa:88:0d:e3:9e:40:1d:b7:05:9a:ea:3c:13:13:16:46:ea:23:
b0:20:da:c8:8b:fe:29:f3:22:6b:30:b4:f1:50:fd:8c:b9:16:
a5:47:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:29 2025 by rpki-client