Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F9D12CEF911EF9CB99E45762E951A.roa
File: 384F9D12CEF911EF9CB99E45762E951A.roa (raw, json)
Hash identifier: f64FmrYuuHiNimbOa5wXSpX89xOHR9FNMx/ep/EUIqg=
Subject key identifier: 92:B0:BC:2C:67:04:34:B1:5A:6E:10:C2:A1:8D:07:E2:19:15:B6:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01398B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F9D12CEF911EF9CB99E45762E951A.roa
Signing time: Fri 10 Jan 2025 02:18:46 +0000
ROA not before: Fri 10 Jan 2025 02:18:42 +0000
ROA not after: Fri 14 Feb 2025 02:18:42 +0000
asID: 395793
IP address blocks: 154.83.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80267 (0x1398b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 02:18:42 2025 GMT
Not After : Feb 14 02:18:42 2025 GMT
Subject: CN=67808386-2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:4e:f1:36:6e:ca:fa:b2:27:6c:be:25:ae:
40:5c:7c:bb:3a:36:0e:85:28:02:d1:3b:9e:94:84:
e0:69:76:fa:63:35:28:fa:cc:15:3c:3c:5e:b3:3f:
21:95:9a:6d:58:2b:bc:85:58:87:e0:c9:97:d2:af:
62:95:10:8a:32:3f:c0:9e:8a:db:c7:fe:4f:15:42:
78:86:d7:f8:8f:52:c8:dc:f6:45:7c:1a:19:c8:01:
af:4f:49:54:c4:d1:ce:8e:36:22:9a:bb:d4:c3:e5:
d2:a7:ed:04:28:65:58:53:c7:7b:83:1d:a2:ae:55:
6b:b9:30:50:18:e0:fb:be:e9:7f:c8:14:30:bd:4d:
e7:a5:01:19:35:6b:f9:a8:68:df:e4:b0:08:b9:d4:
16:00:00:98:8e:48:24:70:79:58:3a:be:c8:8b:35:
c2:9b:87:12:ce:7f:ee:7e:5f:28:47:9c:cb:84:43:
8a:a8:7e:67:77:b0:e8:3f:e0:47:30:65:51:61:6c:
1b:53:c7:5d:f3:4c:8f:9d:50:41:83:55:e4:81:27:
85:44:a7:27:53:2a:84:37:59:15:c8:55:0e:77:87:
49:27:07:c2:28:8f:43:9f:95:03:81:21:8b:2a:37:
fb:52:e7:0c:f6:df:a3:5a:45:61:1c:44:20:57:b8:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:BC:2C:67:04:34:B1:5A:6E:10:C2:A1:8D:07:E2:19:15:B6:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F9D12CEF911EF9CB99E45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cf:d1:a2:7e:d5:49:fc:81:67:27:88:81:bf:6c:01:5f:66:
9b:c0:f1:c1:ce:5c:9a:f2:2d:23:5c:53:cf:7e:08:fe:ce:a1:
f0:47:41:e8:66:cb:1d:c5:8c:c5:04:e5:67:a3:d3:2c:a5:3b:
69:a5:c9:c5:59:c5:62:a3:f7:2c:c0:48:d0:57:9b:61:ba:e5:
0b:0f:77:65:96:29:96:f3:e9:51:50:ce:7b:39:49:ed:2d:d3:
38:c3:6d:eb:d7:67:36:04:20:98:ea:eb:23:97:bf:0c:17:a3:
48:f6:cd:34:f8:a1:ce:23:3a:07:c2:8a:bc:e6:99:37:a8:1b:
6c:1b:c3:dc:12:c8:24:a9:7a:a0:67:1a:00:9a:1f:a7:e1:54:
9f:2e:a8:91:5c:18:ac:c6:21:1a:9e:fd:14:91:76:4f:e9:4e:
a6:96:ee:57:54:7c:a3:69:52:26:f8:a5:a4:2f:86:7a:b9:ec:
9f:7f:11:77:e6:e9:a4:44:b5:91:37:3e:92:c3:6c:78:ae:b7:
b3:30:24:4e:10:78:8f:8d:e6:88:25:4e:d6:dd:cf:dd:5e:01:
a9:5e:2a:b7:3c:02:22:5c:dc:80:fb:43:15:77:f6:b9:d3:9b:
46:c1:8a:83:8e:7e:a2:28:02:7f:6c:36:4f:53:25:87:23:75:
41:ac:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:55 2025 by rpki-client