Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE6B118ADA4F11EF9B852F51762E951A.roa
File: CE6B118ADA4F11EF9B852F51762E951A.roa (raw, json)
Hash identifier: lyWHRwUkwCtutBnKnRIitAySo7t8/1soZqMb9pm5l2E=
Subject key identifier: 0D:49:CE:43:B2:89:EB:AA:26:12:B5:1E:A1:91:87:54:58:39:D9:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE6B118ADA4F11EF9B852F51762E951A.roa
Signing time: Fri 24 Jan 2025 12:36:17 +0000
ROA not before: Fri 24 Jan 2025 12:36:14 +0000
ROA not after: Thu 06 Mar 2025 12:36:14 +0000
asID: 5068
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83682 (0x146e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:36:14 2025 GMT
Not After : Mar 6 12:36:14 2025 GMT
Subject: CN=67938941-27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:89:f8:4e:2b:98:dc:8c:ed:47:35:c2:b3:
0f:0e:4d:50:df:b3:06:ab:4e:43:1d:5c:2b:04:d9:
fb:25:76:8e:66:fd:b4:92:af:d7:d8:f2:d7:7f:2b:
ed:37:76:d2:92:a3:a2:39:7e:74:aa:4a:0e:96:ba:
3e:a8:60:03:31:7c:d2:23:b9:72:d8:d5:56:e2:d8:
c4:2c:e9:53:83:a4:56:2d:63:e0:35:96:38:fa:08:
56:6b:86:f0:93:01:3e:71:2d:ad:1d:fc:10:78:6a:
c2:69:8e:42:22:64:c6:ce:43:51:61:3c:ee:36:ce:
1f:f6:32:e7:df:d1:02:76:5b:d2:82:24:15:36:bc:
e4:59:0c:52:5a:bc:5b:28:22:37:27:37:45:3d:20:
57:ad:81:3c:ae:d3:ed:64:9e:e9:f1:8a:78:6e:ba:
b7:45:56:93:6d:5e:08:5d:5a:11:b1:28:56:5d:d5:
2d:4c:e1:e5:00:d1:ed:b2:9a:21:ad:1a:7a:a1:8d:
08:33:bc:75:f2:9e:43:f2:56:f7:b9:26:04:3f:31:
cc:ef:e9:e1:18:22:97:dc:2c:4c:81:41:91:b2:c0:
53:8b:ed:81:5f:7c:7b:7c:51:45:f0:a4:cd:9d:6c:
f5:1a:b4:83:83:8c:0e:d8:20:30:49:58:b0:bd:1c:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:CE:43:B2:89:EB:AA:26:12:B5:1E:A1:91:87:54:58:39:D9:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE6B118ADA4F11EF9B852F51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b5:3d:a1:8b:81:28:14:25:ed:75:4c:6a:e8:1b:fe:10:80:
71:85:8a:6d:a2:78:04:23:6e:4a:18:34:19:02:6c:67:e2:1b:
86:f4:2a:fc:d2:c4:55:a5:36:d5:de:8e:e2:75:76:d1:00:3f:
41:57:66:ac:ff:8b:d7:47:ab:a8:86:e9:e5:94:de:8f:94:2b:
33:09:e0:37:51:39:f0:e7:35:1e:e5:05:f5:12:fe:e2:b8:4b:
7c:24:1d:31:50:d5:d2:a8:42:2a:84:22:b3:ef:72:ce:52:da:
14:a0:54:e1:0f:8e:d7:64:58:af:8d:f9:b5:09:3d:fb:16:8f:
33:07:69:68:98:8f:da:3c:d5:89:4d:97:fb:9f:ce:26:7f:38:
72:e4:c5:63:aa:77:c3:b5:20:80:9e:41:36:32:08:bd:e9:e7:
23:a0:12:d3:94:1e:19:c5:57:d3:68:d5:1b:91:59:d0:12:4e:
88:cf:7b:d3:95:26:f0:cf:32:9b:d1:d6:9c:d2:df:13:8a:2a:
fb:b0:9b:a3:1c:48:3a:c5:c7:08:c9:67:a9:26:7a:fc:7c:6d:
45:44:8e:fc:c8:3b:28:7c:39:c6:2f:2c:72:91:9f:8a:38:ea:
9d:27:db:72:c4:70:45:91:18:6c:2c:01:4c:e2:6d:a9:28:57:
c3:06:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:13 2025 by rpki-client