Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F24620D15711EFBE2EA1B9762E951A.roa
File: 82F24620D15711EFBE2EA1B9762E951A.roa (raw, json)
Hash identifier: MpgK6EzpxSA6pzwKAiIzj3QKMJc6h0ksBj4QQAeIe8A=
Subject key identifier: 8F:67:57:89:93:17:15:AA:F8:D2:F2:62:06:4B:6B:7A:59:85:ED:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F24620D15711EFBE2EA1B9762E951A.roa
Signing time: Mon 13 Jan 2025 02:38:46 +0000
ROA not before: Mon 13 Jan 2025 02:38:42 +0000
ROA not after: Thu 13 Mar 2025 02:38:42 +0000
asID: 17561
IP address blocks: 154.213.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80594 (0x13ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:38:42 2025 GMT
Not After : Mar 13 02:38:42 2025 GMT
Subject: CN=67847cb6-363d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:8b:26:51:57:5f:09:39:02:c0:f1:ea:fd:
30:f9:8b:e4:df:82:49:a6:78:37:70:f9:ae:1e:9b:
9d:ea:50:c3:03:f8:84:46:90:22:46:c1:20:2e:39:
04:2b:d9:34:de:b7:a1:a7:f6:85:22:69:09:61:56:
2c:15:44:a2:b5:87:fd:94:63:d8:54:d8:97:4a:ab:
15:28:d4:3c:4e:d3:35:6f:fd:2c:54:b2:34:bf:f0:
a5:10:6f:5d:9c:3b:4a:2f:1e:d6:ac:9c:db:eb:f1:
fd:ec:2d:a6:56:42:ae:39:6d:3a:ae:49:4c:26:6c:
53:6e:79:fc:73:84:cd:77:5a:e5:bf:1a:35:51:05:
ba:e9:55:cc:1c:01:56:8b:f2:c0:2c:51:12:55:e9:
04:51:b0:2f:bf:66:2b:9d:40:23:55:ec:43:78:59:
a8:b7:73:f5:16:eb:52:7f:cf:11:6d:f6:60:f7:22:
31:b6:e1:e4:ce:e8:eb:46:10:b1:d3:cf:82:63:bf:
8b:c5:d4:29:4a:62:50:ec:8b:f0:11:f9:6c:bb:30:
77:89:63:e1:75:37:f2:39:4f:17:d6:b5:11:ef:8d:
c3:43:46:d3:bb:98:d5:81:8a:7e:b1:12:45:a5:9e:
fd:f2:6f:cd:a0:6e:0c:e8:35:10:a7:6e:e7:b5:b3:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:57:89:93:17:15:AA:F8:D2:F2:62:06:4B:6B:7A:59:85:ED:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F24620D15711EFBE2EA1B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.184.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:dc:df:69:7d:22:cd:e2:b4:ed:c5:23:1c:28:47:52:c1:01:
4d:b3:bc:35:61:97:24:7f:ee:7d:19:48:6b:18:7f:77:4c:c3:
89:2b:4e:41:40:1d:99:fe:f6:16:6d:bb:72:77:91:a6:a2:e3:
e8:d2:46:4e:5a:88:b6:a0:24:1b:b4:1a:d2:8b:36:71:d8:48:
7c:c9:79:8e:f0:d5:e1:cb:42:b7:d8:2d:fe:77:35:de:4d:ac:
f8:44:b7:29:de:2b:e3:db:85:d1:5c:c4:c0:31:cf:10:f0:63:
82:d3:e6:1a:65:84:0d:61:c7:ac:eb:5b:a8:14:de:94:92:ac:
3a:8e:6f:6f:46:f0:7c:a1:2f:46:43:fe:e6:e5:2f:c9:0f:29:
d7:e3:0d:f7:63:0c:41:e2:b6:4d:11:1c:ed:94:8f:54:95:a6:
bc:3c:a1:c2:4d:f5:db:ab:f3:93:fd:53:e4:16:c1:e0:ce:a3:
5c:cb:11:6a:e7:fe:58:66:d0:ab:bc:7f:5a:ea:4e:37:19:3f:
78:87:3d:4e:7d:6e:49:e5:12:01:7c:de:2f:4d:97:2a:3c:94:
61:34:d2:21:e8:f3:93:e5:27:fb:b5:c6:74:9d:1c:1b:b6:23:
9f:b8:5a:e4:59:f0:ba:c5:0f:ce:2b:cb:49:8c:fe:c1:a9:9d:
46:3f:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:53 2025 by rpki-client