Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A223C7EC8F011EFA6C0865C762E951A.roa
File: 0A223C7EC8F011EFA6C0865C762E951A.roa (raw, json)
Hash identifier: dacY0vdHPSri+zYEsLuuH3MpF73ZhSblBe9QDRjT85U=
Subject key identifier: 0A:04:2C:9C:DD:4B:37:1D:DF:33:22:06:C0:A9:FC:BA:B4:E9:83:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01326B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A223C7EC8F011EFA6C0865C762E951A.roa
Signing time: Thu 02 Jan 2025 09:57:56 +0000
ROA not before: Thu 02 Jan 2025 09:57:52 +0000
ROA not after: Thu 06 Feb 2025 09:57:52 +0000
asID: 61112
IP address blocks: 154.83.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78443 (0x1326b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:57:52 2025 GMT
Not After : Feb 6 09:57:52 2025 GMT
Subject: CN=67766324-c759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:b0:55:f0:ff:02:68:06:b5:a8:16:6c:b3:
6b:a6:0d:b6:6f:13:be:75:72:58:c7:65:1d:5b:ef:
e9:c7:ca:01:30:03:e0:23:c4:cb:c0:c8:dd:b7:f6:
38:91:83:db:46:ff:22:11:79:e5:2d:39:34:e8:38:
23:1a:7b:bf:7f:96:25:e8:47:82:36:40:e5:51:4a:
ba:83:b3:5e:67:54:92:22:cc:ea:a9:8a:8b:dd:04:
74:91:7e:76:77:09:5a:5c:a7:28:78:64:30:4a:b7:
fa:9d:1c:c0:95:f0:48:0f:71:0c:05:dd:2c:39:94:
2d:5e:49:53:44:f3:98:7a:14:d9:46:ca:09:b5:bf:
1f:de:7a:1e:53:64:07:dc:cb:e2:36:67:b9:2a:0e:
8a:8c:69:02:57:9c:b3:14:01:4d:3d:a9:6c:f1:9b:
f8:91:89:d3:da:9b:07:ea:0d:4d:5e:92:22:04:36:
18:76:ed:4b:de:d1:9e:88:b5:ec:e4:6d:dd:37:f6:
0e:bd:8c:f6:bc:4d:31:df:25:5a:1a:9c:bc:ee:62:
86:ca:6f:52:c9:15:36:2b:c6:19:90:a0:d4:36:23:
e8:0c:fb:78:b1:7b:4f:bb:af:f6:f8:bc:0d:bc:c8:
76:4c:86:de:65:ac:b6:8e:c7:19:6f:ed:26:ff:a0:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:2C:9C:DD:4B:37:1D:DF:33:22:06:C0:A9:FC:BA:B4:E9:83:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A223C7EC8F011EFA6C0865C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.84.0/22
Signature Algorithm: sha256WithRSAEncryption
58:53:96:07:6b:77:f9:84:85:d2:72:f8:48:ed:1a:c7:f7:c3:
e8:24:5a:5f:2e:ca:4b:ef:55:96:3c:ff:f8:55:c7:19:56:3e:
8a:6b:b6:b2:0a:c4:db:13:39:5a:73:38:2f:3d:a9:78:49:8a:
82:32:cf:5e:33:d1:a3:a3:c8:0a:d4:78:56:1c:55:51:04:40:
73:91:e3:bf:f9:0d:9c:71:ea:aa:dc:bc:2a:30:77:d2:65:31:
0a:40:47:99:dc:3e:b6:c9:9b:6e:f6:ef:3b:5b:5a:5e:dd:15:
6d:63:1d:53:4a:34:04:67:0c:d8:b6:44:c3:ed:c9:c7:01:83:
31:ac:35:07:7a:06:37:53:2c:eb:04:e9:6b:0c:b2:b2:31:7c:
bb:09:30:83:f7:bc:e5:99:63:e1:78:b4:c6:99:43:52:c8:0f:
c0:32:ed:bf:ea:84:a5:9f:00:09:6c:41:50:7b:e6:4f:9e:95:
db:96:ff:d9:63:54:ce:94:f2:10:e4:b5:b9:14:54:e2:23:59:
1d:ce:8d:48:eb:a0:bd:a4:ae:66:fb:32:b9:3b:15:a5:08:1d:
bb:60:e8:b4:8a:ac:0f:70:1e:5b:91:05:cc:e5:cb:e6:c0:4f:
88:ad:c6:4e:c5:2e:50:ca:92:44:6f:4c:c2:9d:40:c4:3b:48:
52:3d:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:15 2025 by rpki-client