Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77F7CB2DCB811EFBEF90A97762E951A.roa
File: F77F7CB2DCB811EFBEF90A97762E951A.roa (raw, json)
Hash identifier: +EBu98sSTvkqPZIXUhAXgnt0gWC+3uycXhXOeq1q2oM=
Subject key identifier: 0D:14:93:DD:65:C1:7B:4A:ED:E2:A3:9F:FB:62:A3:B8:6B:2A:1E:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77F7CB2DCB811EFBEF90A97762E951A.roa
Signing time: Mon 27 Jan 2025 14:14:06 +0000
ROA not before: Mon 27 Jan 2025 14:14:00 +0000
ROA not after: Sat 08 Feb 2025 14:14:00 +0000
asID: 7018
IP address blocks: 154.83.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85003 (0x14c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:14:00 2025 GMT
Not After : Feb 8 14:14:00 2025 GMT
Subject: CN=679794ae-5e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:08:68:66:0c:37:dd:4a:f2:f0:d8:ad:d5:
a7:47:f5:07:6d:38:f9:13:2b:13:24:c9:c3:a2:e3:
f9:99:04:79:dd:47:92:f0:90:2e:f2:84:2c:9c:db:
22:f8:4a:db:f9:6b:cf:ee:ab:ce:d6:71:ca:bf:db:
32:4a:37:a6:a4:d6:c5:f7:20:d1:fc:ed:79:49:95:
6c:1d:ac:8c:e7:b0:9d:57:2d:79:8b:b3:15:55:a8:
1b:06:d5:e4:91:96:05:b1:5c:4b:43:e2:16:cd:33:
ab:b3:2d:a5:d8:e4:4b:35:68:28:c6:24:aa:7e:99:
3a:64:56:26:93:4a:70:2f:92:78:1c:99:4f:3b:0f:
42:6e:b7:e8:2c:c1:02:58:47:73:d1:a9:06:93:f1:
20:d2:a6:dd:2c:3f:d7:15:56:7b:16:8b:1c:92:8c:
2f:4b:7a:80:c9:84:3a:d9:71:8e:41:01:df:52:04:
c2:b1:34:0d:5f:f4:27:18:d2:49:6e:d5:db:8c:3f:
3e:52:50:1b:2c:1c:ad:bd:c0:9e:d1:db:9a:9a:4d:
50:77:ec:f2:e9:b4:d0:d7:82:50:04:27:eb:68:93:
40:cc:0b:4b:d8:01:33:18:55:b0:c1:9f:e9:69:ff:
fc:16:2c:c0:83:87:23:96:16:75:84:39:b5:af:da:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:93:DD:65:C1:7B:4A:ED:E2:A3:9F:FB:62:A3:B8:6B:2A:1E:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77F7CB2DCB811EFBEF90A97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:95:dc:8d:0a:f6:93:06:53:bc:93:68:c6:ab:de:26:a0:95:
49:dd:3c:65:3c:a7:ec:9c:0a:db:c4:7c:b8:4a:ba:c4:b4:45:
c5:f2:b5:a5:7c:af:11:86:83:da:35:b0:a5:0f:83:29:9f:a0:
37:39:32:ef:ed:a5:77:a5:1e:28:a7:11:ee:ba:99:ac:39:ad:
d9:3f:11:d4:20:a2:dd:33:c1:58:6b:11:4d:8d:81:83:7b:2c:
85:ed:81:1b:25:24:e5:82:c4:3c:04:68:87:ad:80:e1:89:4b:
c7:9f:11:ae:3c:1f:7b:15:b8:77:74:6d:bd:74:39:ee:91:4c:
61:cf:57:10:72:ae:22:bd:dc:e1:80:08:7a:87:1e:b8:94:62:
ee:96:66:70:49:d1:99:7a:11:c0:26:a1:4b:24:67:91:9d:1b:
47:3d:39:64:05:ba:a6:f6:09:f3:b5:a9:90:d9:0a:69:5b:67:
5f:8e:a4:ac:7b:1b:cd:d9:2d:3d:a6:02:3f:02:3a:ab:44:97:
fa:f3:ce:8d:ca:ee:67:31:91:2f:b9:58:f7:6c:2f:3b:e6:8c:
74:f2:d5:4a:ba:06:62:90:bc:7d:cc:6a:d3:a8:52:e4:b0:50:
2d:72:c3:c5:7f:7e:d6:ab:0e:a0:f8:89:fe:fa:f0:3c:31:66:
bd:67:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:52 2025 by rpki-client