Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F4309CDBE911EF9D268AA1762E951A.roa
File: 82F4309CDBE911EF9D268AA1762E951A.roa (raw, json)
Hash identifier: DsLlI7v23CrDp71S4DX5XhAfTFl0pu4A0KTpLgL40F8=
Subject key identifier: 57:16:5E:D7:67:5D:82:AA:B5:16:DE:8F:96:C8:22:F1:77:D0:DF:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F4309CDBE911EF9D268AA1762E951A.roa
Signing time: Sun 26 Jan 2025 13:29:04 +0000
ROA not before: Sun 26 Jan 2025 13:29:00 +0000
ROA not after: Wed 05 Mar 2025 13:29:00 +0000
asID: 202656
IP address blocks: 154.221.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84640 (0x14aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:29:00 2025 GMT
Not After : Mar 5 13:29:00 2025 GMT
Subject: CN=679638a0-8dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:e6:f4:74:9d:40:21:c8:f1:67:aa:b5:b2:
2d:85:37:68:dc:8b:00:7e:0b:d8:70:50:70:f6:31:
38:0a:c6:f0:2f:13:62:c1:c8:0c:4a:8d:61:f0:11:
ac:de:30:e5:e2:95:90:3d:f8:b3:43:e0:a8:b3:b2:
62:90:54:cd:72:de:91:e7:64:4d:90:47:41:70:91:
f7:bb:52:00:ed:05:d3:44:c8:65:2a:49:37:6a:b7:
d8:53:d2:58:02:f6:df:b4:bb:f9:66:d4:0c:44:71:
61:59:74:98:85:4c:78:0c:e4:92:b7:94:23:26:29:
f1:2a:5b:ee:d9:f4:7a:cf:a2:cf:3c:83:c7:72:ed:
25:b6:b0:c0:2f:9b:2a:63:37:4e:71:80:99:91:16:
71:74:1c:c7:88:15:ad:7c:71:b5:2a:e0:20:9b:b8:
f0:27:cc:44:a6:be:31:dd:2d:e1:00:88:6d:ef:44:
0b:fc:d9:be:94:ab:83:b4:1d:89:79:f6:8a:a4:c1:
50:55:45:bb:b5:e5:de:e8:fa:2e:65:a8:51:4a:12:
1b:85:14:06:d4:e8:d2:64:ef:16:89:f1:f2:9f:27:
0a:1a:bf:e9:e6:d6:59:18:4c:b9:0e:ec:54:38:17:
36:db:3a:47:0e:6a:fe:7f:63:48:b8:f7:aa:73:e3:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:5E:D7:67:5D:82:AA:B5:16:DE:8F:96:C8:22:F1:77:D0:DF:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F4309CDBE911EF9D268AA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.51.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e1:e8:06:51:9e:14:f1:45:93:cc:03:cb:e6:c4:a1:39:e6:
ea:81:94:bf:4c:53:0a:02:25:44:f8:d3:32:19:bd:8c:04:85:
f3:0d:a3:4c:46:1c:67:28:0f:0e:28:3f:02:65:5a:28:09:08:
c0:97:02:d7:5b:9f:39:8a:96:c8:c4:0a:85:80:17:d4:41:42:
d2:c7:79:8d:74:04:8a:5b:5f:f8:65:b9:53:53:b3:8b:50:5f:
c3:6d:7c:bd:b8:ed:01:81:57:21:e0:4a:38:6c:3c:19:64:77:
b3:a1:64:a4:08:a5:55:0b:7a:45:46:08:46:4e:ef:d0:11:53:
b1:8e:29:63:50:3b:d4:88:96:8b:53:25:4d:98:42:c6:8c:47:
ed:c1:1f:5c:75:47:bb:3c:fb:66:0a:7a:2e:65:de:27:a3:d6:
d4:b4:1c:23:d0:e2:8b:11:9b:bc:45:7a:d0:fe:80:e1:cc:68:
43:c6:e2:c7:27:fe:1e:0c:e0:a3:25:f7:e9:98:ed:b2:ae:1d:
d4:64:fd:8e:bc:95:ed:8c:b4:a1:1e:b1:7b:88:88:e1:0a:14:
e2:48:0d:4c:f6:84:7f:b6:79:35:a9:c9:42:14:d2:dd:3a:9c:
eb:2d:f0:02:81:99:2d:d7:35:17:35:47:aa:67:6d:44:81:f5:
89:d4:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:30 2025 by rpki-client