Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3181F0E6DC9811EF8997DABB762E951A.roa
File: 3181F0E6DC9811EF8997DABB762E951A.roa (raw, json)
Hash identifier: 3t2qgl1WffCwn+S379mtKdzAU3A7KfKtFGHFTjZerbc=
Subject key identifier: 55:22:BB:EB:3B:D3:73:3B:B0:DA:78:0A:AB:69:7C:99:DD:98:C1:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3181F0E6DC9811EF8997DABB762E951A.roa
Signing time: Mon 27 Jan 2025 10:19:30 +0000
ROA not before: Mon 27 Jan 2025 10:19:26 +0000
ROA not after: Sat 08 Feb 2025 10:19:26 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84893 (0x14b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:19:26 2025 GMT
Not After : Feb 8 10:19:26 2025 GMT
Subject: CN=67975db1-0da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:cc:2d:e1:47:c8:28:23:b9:7f:06:60:c1:
be:60:45:db:95:34:fe:a6:1f:5d:6c:21:f9:fa:1a:
5b:47:e5:e0:b1:3c:d6:42:1f:67:44:c8:e8:16:8b:
f1:dd:c5:b3:39:c0:b1:ea:aa:83:86:03:0c:f5:c3:
91:57:ee:70:71:c8:77:13:27:2a:6e:74:47:6f:02:
f7:6f:b3:d1:a5:a0:bb:86:04:21:6e:5a:c2:36:e4:
5f:79:de:7a:54:14:ca:ed:bf:32:e8:7a:7c:b0:7c:
a6:1e:44:d8:b1:42:80:84:22:a4:81:8b:3d:fd:6a:
5c:f1:33:ae:1a:16:69:21:cb:98:8b:f8:7c:c4:5e:
b4:6a:a6:44:86:ef:0b:00:b8:58:27:9e:47:5a:1d:
4f:c0:e5:fa:a8:83:75:c4:2d:2c:b8:e2:21:f1:f9:
ea:d3:34:ee:6d:53:5f:2d:36:e1:bb:0a:92:1f:20:
97:2b:5d:ce:53:13:6a:ed:17:66:4f:53:a1:0b:b3:
7e:c0:46:7b:75:4b:ca:ba:7e:50:a7:ff:b1:5e:96:
99:6e:a3:94:9f:0f:25:84:d0:16:30:f9:bc:3e:82:
23:fd:d9:26:47:3c:71:75:e3:8f:c6:eb:56:f1:d8:
73:f3:45:7a:72:c7:73:e8:5b:5f:87:63:bb:c2:f7:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:BB:EB:3B:D3:73:3B:B0:DA:78:0A:AB:69:7C:99:DD:98:C1:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3181F0E6DC9811EF8997DABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:88:2b:58:ef:7f:63:dd:8b:9b:5c:9e:7c:5d:29:fa:a8:0f:
17:05:46:15:db:75:2a:a8:43:84:99:0d:f7:43:89:80:da:6b:
16:96:a0:10:d8:de:d6:06:84:33:67:8a:5a:13:a1:9a:e7:55:
9a:9a:a9:8b:07:51:30:73:ff:dd:d0:35:43:67:a7:b2:be:43:
9a:15:e0:60:08:34:32:c0:9a:9e:27:3b:b8:fe:b1:50:10:d8:
42:2d:83:bb:d0:15:ee:38:09:d6:8a:5f:a5:b3:c0:86:02:ea:
23:6a:d4:7a:14:cd:63:03:70:8d:09:86:0c:7a:97:44:c2:9b:
91:41:16:25:cc:97:7d:46:46:bb:5d:cc:1b:ff:11:38:d5:38:
b2:66:df:63:5a:14:0a:46:dd:00:8f:48:c9:44:4e:28:2d:fa:
e8:d1:51:24:9b:67:c8:b1:99:97:20:fd:13:53:0d:8e:64:5f:
78:82:16:42:bf:d8:3a:51:85:a7:6b:f0:cd:ee:b3:24:b2:b4:
2f:6c:b5:bf:5e:35:47:7e:87:0e:ad:02:57:36:01:da:10:1a:
ae:ab:71:79:a8:aa:6e:44:62:d4:3e:75:cd:66:de:02:38:dc:
36:c5:86:4d:34:ec:0b:f8:0e:85:c2:18:c6:28:99:2c:5a:ba:
25:60:4f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:51 2025 by rpki-client