Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D98DED6C81511EFADD67F5D762E951A.roa
File: 3D98DED6C81511EFADD67F5D762E951A.roa (raw, json)
Hash identifier: ewSu8WsxqN8MSht+Iie6KKPaorMfUAOZTXO5awy9eSI=
Subject key identifier: 58:C8:E0:FA:A3:90:5C:4F:05:12:93:24:21:AE:51:09:44:06:F8:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01310C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D98DED6C81511EFADD67F5D762E951A.roa
Signing time: Wed 01 Jan 2025 07:51:42 +0000
ROA not before: Wed 01 Jan 2025 07:51:39 +0000
ROA not after: Tue 04 Feb 2025 07:51:39 +0000
asID: 42831
IP address blocks: 154.83.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78092 (0x1310c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 1 07:51:39 2025 GMT
Not After : Feb 4 07:51:39 2025 GMT
Subject: CN=6774f40e-62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:58:5c:23:a6:d6:a8:d5:b4:16:29:8f:f0:
59:33:3b:26:0a:2f:22:fa:a3:62:df:b3:8b:42:1a:
bb:56:1c:6c:3b:ad:07:b5:a4:a8:92:da:92:cb:7a:
63:5c:87:ff:a3:7d:e0:c2:e0:a8:b0:68:2b:98:2f:
f1:14:28:92:b4:49:82:a9:71:34:d6:fd:0a:8e:66:
f9:90:11:d8:3f:8a:c7:c4:05:40:2f:0a:d7:4c:01:
bf:a4:93:5f:7f:95:2b:3f:c9:a3:3d:04:8d:d5:21:
37:26:81:1c:41:bc:57:42:50:29:13:5d:2a:6d:b5:
cd:16:6d:c2:fb:90:ee:78:54:5c:1c:15:72:e0:e6:
35:72:aa:11:d2:ea:49:21:69:4f:47:96:cf:d3:60:
85:56:a4:bd:f3:25:a7:f7:4d:0d:70:8c:d3:34:00:
b4:c9:4e:91:ec:ba:bd:21:07:7e:38:9c:ac:54:7e:
2f:fa:ec:46:95:52:1d:11:05:5b:06:e9:50:7b:b8:
82:0b:5f:ad:cd:da:73:cd:c1:9d:95:5c:b3:3e:b3:
72:a7:59:15:41:a6:d9:c4:b2:ad:c6:52:c8:53:b9:
c6:54:35:af:c2:8b:1b:82:60:bd:6c:16:c7:84:15:
19:0d:b1:ea:78:c4:db:a3:26:d9:d7:53:79:82:8c:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C8:E0:FA:A3:90:5C:4F:05:12:93:24:21:AE:51:09:44:06:F8:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D98DED6C81511EFADD67F5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:90:63:da:40:cc:a0:43:3f:6f:8e:5c:d2:13:b4:46:85:79:
ca:94:92:9e:f3:07:10:52:a0:bb:11:d5:87:97:43:8b:c8:8f:
6b:4a:66:29:80:59:b8:f0:32:4f:aa:f8:6d:bc:6b:9e:d3:80:
f0:99:5e:f9:8e:2b:40:12:f4:bf:d0:8d:be:ae:46:ff:7b:ea:
b7:4f:9f:f4:c6:19:6c:b9:88:9d:56:96:95:c0:ad:64:cb:73:
65:0d:a6:82:3d:3d:e3:df:4b:5b:54:f0:f3:b6:74:b7:37:42:
4d:b3:df:ad:52:6f:3c:a2:f2:1b:5d:49:8f:66:38:a8:bd:0c:
15:24:4c:e4:26:72:65:a7:d8:8c:71:7c:ae:6d:d7:85:03:e3:
23:0e:b5:af:a8:b8:d1:e5:b0:8f:90:b9:8c:c0:d4:85:15:8f:
7c:d6:3e:ca:d4:97:b0:3d:55:2e:a3:2b:5f:d3:dd:b7:62:60:
b6:58:a6:24:91:2b:fa:ef:bd:79:6e:02:b3:44:7f:dc:18:10:
e9:c5:12:53:8a:07:93:8a:97:43:e1:62:9b:6d:19:42:27:ec:
96:6d:fb:31:13:d4:03:6f:a1:a3:bc:de:f2:18:5d:8e:e0:88:
b7:dd:ca:fc:fd:cf:2f:08:46:13:a3:b0:6a:ff:90:36:78:aa:
24:a4:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:03 2025 by rpki-client