Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35EB4212C29A11EF854B1498762E951A.roa
File: 35EB4212C29A11EF854B1498762E951A.roa (raw, json)
Hash identifier: V/tRYJfTJlSZgf+RQFA88DL+2U25K5oib75K0S5K584=
Subject key identifier: BC:A3:C6:0E:78:A4:DC:A4:66:61:1C:6B:C3:8D:C6:01:12:9B:89:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35EB4212C29A11EF854B1498762E951A.roa
Signing time: Wed 25 Dec 2024 08:28:26 +0000
ROA not before: Wed 25 Dec 2024 08:28:22 +0000
ROA not after: Mon 03 Feb 2025 08:28:22 +0000
asID: 5068
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75000 (0x124f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:28:22 2024 GMT
Not After : Feb 3 08:28:22 2025 GMT
Subject: CN=676bc22a-5177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:4e:a5:b6:dd:65:70:70:1d:eb:a5:94:44:
b3:a2:d0:af:b3:6d:5c:fc:a0:e2:10:b6:c2:3d:50:
a4:65:09:7a:ab:80:c5:6d:d9:cc:07:10:7b:6d:38:
03:5f:4d:4e:66:c4:57:4e:97:15:88:a3:97:75:40:
bb:6c:54:14:b8:61:bd:b4:8d:ba:3f:10:ad:fa:30:
d2:4f:91:42:6f:dd:57:f8:1d:b7:4b:9d:69:5e:b9:
4f:11:92:fb:70:27:56:ff:e4:d5:4d:3f:8c:2a:63:
76:ad:b7:eb:14:2b:6e:d1:1d:26:c5:24:01:20:e2:
60:53:ec:4a:9a:f3:4c:99:04:88:f8:63:47:1c:0d:
29:25:bc:e2:23:b0:ba:a7:ae:fe:eb:1c:28:5a:e3:
a5:7b:76:56:18:a6:97:cd:0e:26:3a:cd:e9:b2:25:
1d:de:e7:49:e1:f6:7d:63:75:75:1f:df:20:ef:62:
25:6c:3a:ae:03:81:70:d9:21:19:cf:55:b0:3a:d1:
37:09:f3:6f:90:b2:33:19:12:ea:6a:35:ed:8f:01:
02:04:0d:30:66:90:c9:f1:b4:ff:b6:8b:67:c5:8f:
79:ba:83:d6:c5:c4:29:e1:92:72:56:73:98:16:6b:
d5:19:a5:01:af:b1:4c:c2:12:30:a2:f5:ed:94:28:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:C6:0E:78:A4:DC:A4:66:61:1C:6B:C3:8D:C6:01:12:9B:89:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35EB4212C29A11EF854B1498762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6b:ef:41:49:28:2b:a4:a8:1b:7f:7f:38:41:ad:15:0a:67:
a1:e6:4c:12:d7:26:73:73:44:cf:de:27:12:42:6b:82:b7:8c:
56:8a:be:1d:3d:e8:e7:f8:76:68:99:dd:8b:55:9d:1a:22:bb:
84:3c:14:3f:84:5d:7c:a5:be:cb:dd:e0:20:23:d0:a5:15:82:
d0:b9:aa:56:50:ae:fa:a1:a3:b7:5c:d1:20:68:c1:15:8b:69:
0a:29:46:b0:fb:83:9c:c2:47:d2:82:96:81:8d:dd:2f:cf:ea:
6f:47:3c:26:06:a2:c2:1f:28:5e:26:52:f3:bb:ce:82:03:06:
ed:80:18:f2:3c:15:97:10:91:0b:91:86:36:18:c9:cf:b2:f9:
91:73:6b:9d:4a:96:a7:9e:bb:1c:c8:98:51:65:68:bd:a8:8b:
2e:54:72:2b:27:fa:0c:c8:5f:b8:d1:fa:4e:ed:b6:2a:3f:96:
64:79:c9:8f:f2:b7:82:d1:c5:93:3f:82:f5:94:aa:f8:6a:a6:
81:59:84:97:95:a7:e0:d1:d6:e9:3f:7e:10:76:30:17:e6:b3:
40:4e:10:2a:6b:2f:b6:00:bb:fd:00:18:06:cb:ac:ec:4c:85:
a8:26:4b:60:14:85:11:8d:15:6c:71:47:cb:b0:40:6f:e9:38:
5a:21:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:59:15 2025 by rpki-client