Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75787536DC8E11EFB53E537B762E951A.roa
File: 75787536DC8E11EFB53E537B762E951A.roa (raw, json)
Hash identifier: 0xJT/8Oj+dzjQQHrvhOpS2Es9ghi2tferP9B1jcyVQ8=
Subject key identifier: F8:97:55:06:AF:3A:2D:BD:46:A4:F1:C8:13:CE:55:B0:0F:27:F6:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75787536DC8E11EFB53E537B762E951A.roa
Signing time: Mon 27 Jan 2025 09:09:49 +0000
ROA not before: Mon 27 Jan 2025 09:09:45 +0000
ROA not after: Sat 08 Feb 2025 09:09:45 +0000
asID: 5065
IP address blocks: 154.84.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84855 (0x14b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:09:45 2025 GMT
Not After : Feb 8 09:09:45 2025 GMT
Subject: CN=67974d5c-7ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:33:7f:05:e1:cc:53:fb:4e:ca:19:03:62:
db:6c:c8:08:71:af:4f:7e:ac:e6:b3:9a:68:93:f6:
6a:80:ee:13:8b:bd:fd:e6:fa:a8:85:b9:d8:67:d0:
19:e7:86:1d:5a:01:20:68:29:72:5a:6c:9f:b4:fd:
0f:08:0a:56:31:db:59:7d:d8:17:5b:0a:1e:a6:71:
51:56:27:ee:f3:96:09:3f:23:ca:8b:d5:37:b2:11:
1b:f9:7f:48:4d:2b:12:ea:03:18:39:d5:e8:31:6c:
8d:7f:76:53:06:f2:54:07:f8:5a:0e:ba:fd:6e:48:
c9:2e:bd:2d:cb:91:db:7d:3d:b4:9d:47:aa:4c:38:
73:26:ae:ac:3c:de:02:e0:ab:6a:39:22:76:0f:d8:
18:8f:ba:49:04:39:ac:1f:b8:cf:1a:f3:37:be:39:
f4:46:bf:79:83:4b:a5:19:bb:04:79:53:75:21:0f:
f8:b5:29:ce:27:ba:9e:23:44:cb:09:1e:fd:74:e5:
40:61:25:0b:a5:f0:5a:9b:cb:11:42:a6:75:72:b7:
fd:86:e9:66:b9:3c:c9:f1:e7:77:29:f7:d2:c7:d0:
14:db:0a:fc:b9:32:e0:a9:56:f7:58:cb:e1:de:72:
1d:b7:a1:c1:b7:5f:d0:f5:59:a2:3c:bc:21:95:54:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:55:06:AF:3A:2D:BD:46:A4:F1:C8:13:CE:55:B0:0F:27:F6:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75787536DC8E11EFB53E537B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:08:a1:c8:67:16:66:6e:3b:02:71:3e:bb:68:e2:84:56:0f:
80:a7:ce:5e:ef:d6:44:f8:86:3c:2b:9d:77:e6:ba:ea:ea:09:
d7:30:fa:c5:f6:35:0e:44:c4:1d:48:a0:94:de:95:ee:c0:3e:
31:6f:1a:ba:dc:51:e9:53:b9:b0:ce:c6:dd:9d:9a:ef:ac:e8:
df:69:41:51:3b:48:25:04:43:88:85:43:92:a3:e4:99:23:ba:
53:05:0a:17:7d:6b:4b:21:ec:ee:f1:c9:c6:3e:67:82:2a:04:
26:c2:4a:42:c3:97:68:e2:cc:ab:f5:74:1f:8d:ed:56:e0:40:
5b:46:81:0d:b7:db:f7:a2:61:ea:9c:73:3d:63:b8:a2:4d:b9:
2d:10:61:26:bf:63:40:9e:4b:05:a5:79:30:8d:89:00:03:4c:
c7:e0:6c:96:4b:69:2f:44:94:97:0c:a0:34:30:bc:e2:e1:bd:
e8:6f:b8:5e:f0:3e:1b:a0:04:73:2d:83:ef:3e:9f:87:3d:55:
b7:b3:b8:7b:08:e8:d3:48:39:90:ed:a8:b7:68:7a:6a:55:91:
97:67:27:75:6c:80:8e:25:5c:ca:42:82:3f:70:bc:0e:91:2c:
0f:7d:c5:4c:00:de:3a:91:22:94:43:9a:7b:fc:91:f4:b3:3e:
b7:83:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:34 2025 by rpki-client