Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F04338C32111EFBC51A15C762E951A.roa
File: 86F04338C32111EFBC51A15C762E951A.roa (raw, json)
Hash identifier: LAl5ItYXUk/hf4bD9GKfn/2e/2FBJl8lMMOLpuFYJUI=
Subject key identifier: 70:CD:45:00:12:89:BA:4F:4D:67:95:CF:7F:CF:E0:A7:6E:22:5D:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01256E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F04338C32111EFBC51A15C762E951A.roa
Signing time: Thu 26 Dec 2024 00:37:04 +0000
ROA not before: Thu 26 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 00:00:00 +0000
asID: 984
IP address blocks: 154.83.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75118 (0x1256e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:00 2024 GMT
Not After : Mar 1 00:00:00 2025 GMT
Subject: CN=676ca530-ada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:e9:e7:2f:f0:b3:94:35:a2:89:0d:09:dd:
7f:2e:ca:23:55:65:71:9e:a5:ec:19:99:f8:15:ce:
fc:dd:eb:ad:17:40:f5:48:3d:dd:0f:74:12:b4:6b:
f9:ec:63:6e:d7:78:85:98:2d:87:ac:1e:6a:14:cc:
44:0e:76:dd:36:0d:7f:4a:8d:fa:48:dd:1a:18:d2:
f9:7e:6c:d0:0c:78:2c:ee:23:40:13:99:70:7c:e8:
8b:68:ae:ab:7b:86:42:7a:98:23:5b:4c:c8:91:b1:
58:6d:00:c3:f5:83:00:5b:38:ca:ff:bc:fa:d2:6f:
8e:f9:b2:dc:af:6a:21:34:a5:f5:2d:c2:a1:12:67:
0b:d2:d5:4d:ce:17:74:90:bf:aa:ec:5b:1a:a4:3a:
05:fc:48:df:a9:e2:39:79:ba:67:c7:e6:fb:bb:a2:
7e:d3:9d:1d:9c:a0:63:c2:23:b8:05:57:9d:fb:f4:
60:de:bc:ed:75:1e:e1:3b:cd:27:66:55:84:b1:0a:
41:7b:d0:79:c9:2e:a6:89:24:40:d7:fc:a9:b0:f7:
8d:9e:06:a1:bf:15:66:73:8b:8f:4b:f4:5b:3c:1f:
21:56:6a:97:b2:b9:35:cd:bc:63:3d:be:c4:30:24:
31:02:f1:99:9f:fa:8e:e6:8e:91:6d:c3:f6:aa:c1:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:45:00:12:89:BA:4F:4D:67:95:CF:7F:CF:E0:A7:6E:22:5D:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86F04338C32111EFBC51A15C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:82:3e:64:8e:f4:01:04:fb:87:bc:26:72:d1:68:2d:b3:10:
3c:68:0c:74:51:f7:9e:b2:4e:13:6d:b6:bf:77:9b:05:7e:cf:
9b:23:22:cd:21:09:75:cd:bd:23:e3:70:d4:9c:bd:89:9e:66:
ab:2b:46:08:7f:fa:8a:47:5f:00:f3:79:f4:73:1f:e5:87:f7:
9c:35:9f:07:b1:1e:7a:32:b7:4e:ae:55:c8:a8:7e:1c:73:51:
ef:b9:11:52:6e:b8:70:4e:82:b1:02:07:89:be:75:50:05:93:
04:3d:f2:e3:00:94:20:1b:a2:d9:0c:4c:77:27:a6:bd:39:22:
c5:f4:f5:75:f9:37:34:6c:87:46:92:77:24:e5:d6:dd:0f:26:
47:2d:2c:86:c9:b1:a5:77:34:0d:5f:ee:4d:64:c8:df:8f:a2:
a2:f2:2a:ed:fd:3b:1f:b4:f5:3f:8b:52:c3:08:9e:3c:34:05:
6a:45:e5:9b:2f:b1:5c:5b:44:0d:fc:04:ea:4c:62:d0:f2:75:
36:cf:77:09:38:35:d5:f6:9f:ca:df:e4:ed:d2:74:2a:34:b3:
b9:f7:55:fe:ff:4d:42:b0:16:d3:97:18:d3:52:0b:82:c0:58:
ae:47:82:95:22:03:90:ba:d2:56:73:ee:39:cf:b3:bd:d2:b1:
b7:0d:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:40:42 2025 by rpki-client