Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F8013CCEEC11EFAA19B266762E951A.roa
File: 77F8013CCEEC11EFAA19B266762E951A.roa (raw, json)
Hash identifier: sRit2Rg6rFlR/flOIEnL+Rfiyt/awx9Q1hFAoMAr+0A=
Subject key identifier: 79:16:83:BA:D4:A0:A2:F7:22:0F:5B:6E:B3:7C:F2:FE:C1:01:80:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013964
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F8013CCEEC11EFAA19B266762E951A.roa
Signing time: Fri 10 Jan 2025 00:47:29 +0000
ROA not before: Fri 10 Jan 2025 00:00:26 +0000
ROA not after: Thu 13 Feb 2025 00:00:26 +0000
asID: 54801
IP address blocks: 154.83.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80228 (0x13964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:26 2025 GMT
Not After : Feb 13 00:00:26 2025 GMT
Subject: CN=67806e21-3f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:dc:c0:e3:9a:65:ae:7f:4c:31:fa:58:83:
95:2d:c8:51:b7:6e:1b:2a:04:1a:60:b1:c8:1c:96:
e3:42:72:ca:fd:1f:be:af:bd:b3:de:f1:2f:06:0c:
59:f2:23:22:fb:04:15:2e:0a:0a:b5:d2:e9:52:7b:
d9:55:dc:b6:b5:84:4c:72:ec:ff:51:1e:20:43:81:
b1:92:d5:ef:a9:e0:b3:c7:18:0a:0e:36:e7:df:f0:
a5:0b:a5:b9:24:25:ba:a4:07:04:0b:d8:07:89:f3:
15:b1:96:9c:5a:d4:f7:29:bf:25:ea:f7:12:1a:2d:
2b:8a:ea:4d:4b:66:ed:41:d8:f8:ac:be:f3:b3:56:
e9:aa:ea:16:39:06:59:7d:f8:41:94:36:df:21:e8:
f8:cb:c2:05:fa:ba:79:f3:af:29:55:ac:67:94:55:
3c:b4:48:02:5a:c3:68:46:e1:9e:58:75:4b:28:63:
9b:d3:f6:96:6e:a6:df:d2:ec:93:18:2a:29:69:70:
1e:97:eb:54:12:5b:89:c2:14:08:df:3a:57:f6:c7:
ce:8f:e2:c0:a3:0f:48:16:3f:e9:31:19:ab:bd:66:
7d:6c:d4:ee:4b:37:62:de:45:5e:db:10:0d:dc:2c:
73:e9:e3:7c:9c:ee:4e:51:7d:db:4c:0e:ca:57:d7:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:83:BA:D4:A0:A2:F7:22:0F:5B:6E:B3:7C:F2:FE:C1:01:80:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F8013CCEEC11EFAA19B266762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:4c:7c:57:9c:23:b1:73:21:60:c6:d3:3f:a1:29:b5:d4:
5b:f7:45:9a:ec:a8:c4:ab:dc:09:47:35:9d:62:d0:4b:c5:2e:
05:12:74:8c:b6:98:a5:c2:7e:7b:2a:b6:a0:8c:a5:af:2c:26:
98:5f:85:28:d2:17:83:5f:91:7f:45:4b:15:19:c3:f5:26:94:
a0:bd:37:17:68:8a:2b:df:5e:fe:35:9c:b0:76:c7:3a:dc:f7:
90:dd:99:0e:a3:8c:c4:22:83:a8:35:2d:f2:ca:48:60:ed:de:
06:2c:55:ef:a0:48:af:5f:7e:b9:66:16:d8:cd:6d:2a:91:46:
ed:5f:d2:1f:75:4c:51:5e:d7:03:24:53:19:27:52:f7:49:31:
13:3f:06:26:68:32:8e:92:de:9a:a5:b1:ea:51:fa:e4:58:e1:
d7:bb:19:cd:2d:3b:f5:35:3e:99:92:f5:af:5d:ae:e7:29:cc:
60:04:3e:fb:73:c1:e2:cc:0e:ed:45:e7:de:61:ba:cd:86:f3:
7d:6c:56:75:f7:92:3f:7d:1f:4c:f1:43:db:84:b4:0e:ce:4c:
bc:68:f2:90:b8:33:03:8f:1e:36:ef:cf:34:15:b6:16:0c:d0:
96:fc:38:d7:df:d1:98:86:ef:6d:95:6f:ef:61:e8:12:56:30:
8d:d1:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:20 2025 by rpki-client