Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0009ED52C6C711EF83DEA093762E951A.roa
File: 0009ED52C6C711EF83DEA093762E951A.roa (raw, json)
Hash identifier: h7BGVT51lXMG1sU/Za/0cl3/cLzjEIw2jxM/CXTJgj4=
Subject key identifier: A0:06:66:D4:AC:DF:14:DE:95:85:4E:D6:0E:FF:EA:81:AB:32:31:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0009ED52C6C711EF83DEA093762E951A.roa
Signing time: Mon 30 Dec 2024 15:59:07 +0000
ROA not before: Mon 30 Dec 2024 15:59:04 +0000
ROA not after: Fri 14 Mar 2025 15:59:04 +0000
asID: 142002
IP address blocks: 154.83.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78032 (0x130d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 15:59:04 2024 GMT
Not After : Mar 14 15:59:04 2025 GMT
Subject: CN=6772c34b-463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:36:01:44:87:ed:d8:a2:07:58:cc:01:4e:
85:2a:7f:0e:02:2c:4a:75:48:45:f4:5b:3d:9d:cd:
df:39:15:c0:55:dd:e7:92:4a:97:e8:c0:9d:7a:30:
ea:bd:e6:23:97:50:e3:d5:82:92:2d:00:c2:d4:59:
ba:ab:c3:13:09:21:6f:72:72:b3:0e:07:3e:54:bc:
3e:60:e5:e1:bd:36:6d:32:f6:d8:75:1d:b9:24:dd:
7d:d1:dd:32:2d:9d:19:d8:d5:90:c5:e5:99:5a:af:
1b:cd:40:a3:fe:7e:b8:3c:3e:98:51:f5:24:71:0f:
c7:0a:49:aa:25:2e:96:1d:78:9f:e8:1f:b2:89:c4:
62:bd:2d:27:6c:35:d1:ad:92:0e:1e:b9:40:60:da:
2b:22:94:5e:b1:dc:cf:bf:87:46:0a:d5:48:7b:d4:
3c:a0:7e:c0:39:05:e4:fb:db:01:bd:ed:ac:f2:e0:
7b:58:8c:e5:f4:f7:96:ad:ec:08:cb:16:4f:46:d2:
b7:cf:61:0e:4e:7b:5f:2c:8f:e7:22:5a:57:07:99:
62:ad:09:5c:31:22:26:5d:86:b3:7d:0a:bf:dd:ed:
47:9b:54:ed:96:8c:8b:a7:9a:ad:5a:6c:26:8f:d5:
99:26:e6:28:0d:cf:10:dd:f8:8f:ac:30:60:af:12:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:06:66:D4:AC:DF:14:DE:95:85:4E:D6:0E:FF:EA:81:AB:32:31:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0009ED52C6C711EF83DEA093762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4b:50:67:e3:26:47:17:1e:2b:73:2d:4a:b5:e8:dc:72:dd:
d0:85:3f:70:34:b4:96:fe:f5:45:c7:91:3d:2b:05:ac:4e:2c:
f0:bc:87:af:9d:f5:4f:87:f0:a4:5c:ee:4e:a0:72:42:93:ad:
13:a9:8e:01:af:69:03:61:2e:1f:f7:cd:b5:85:9c:71:bf:6f:
f5:ec:71:1f:44:b5:8b:37:6a:e8:71:6b:ff:44:43:ad:86:58:
f2:03:85:90:ec:8c:dc:b2:ab:0c:03:02:ff:5e:f4:56:1d:57:
f0:01:aa:9d:1a:0c:7f:d3:48:36:00:29:3d:85:91:fe:54:a6:
f5:e9:a1:79:da:cf:14:81:51:a4:06:6b:54:27:e2:7c:a8:e8:
aa:df:3f:f5:c2:85:99:64:cf:a5:44:45:df:55:86:99:0e:a6:
d1:cb:0d:c1:b1:33:04:eb:17:8f:20:dc:3a:30:c0:b5:ed:6a:
eb:4d:d3:1f:7c:4f:37:46:0d:56:19:1e:e7:09:64:eb:6e:80:
43:e5:89:47:fd:19:35:39:76:73:a0:35:f1:a0:be:0f:5a:e2:
59:ce:d7:e4:5e:57:9a:54:cc:12:59:89:d9:ef:89:a8:44:3d:
47:fb:30:c4:cd:98:11:9b:90:94:65:80:5b:3e:19:96:74:e6:
a9:8b:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:11 2025 by rpki-client