Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49E5CDC9A11EF8648E64A762E951A.roa
File: 11F49E5CDC9A11EF8648E64A762E951A.roa (raw, json)
Hash identifier: oXsq8tWN1rRUb7wvCfYRFU7eYbXZLfNsjNbJtpL218k=
Subject key identifier: FD:8A:E1:6B:25:5B:12:86:30:0A:99:53:71:53:A0:FB:57:5B:42:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49E5CDC9A11EF8648E64A762E951A.roa
Signing time: Mon 27 Jan 2025 10:32:57 +0000
ROA not before: Mon 27 Jan 2025 10:32:52 +0000
ROA not after: Sat 08 Feb 2025 10:32:52 +0000
asID: 7018
IP address blocks: 154.83.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84905 (0x14ba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:32:52 2025 GMT
Not After : Feb 8 10:32:52 2025 GMT
Subject: CN=679760d8-cba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:53:66:75:a2:2e:0c:45:94:03:7f:2a:6d:
1f:21:39:ec:d9:05:3f:04:99:b0:a2:6c:d9:b3:b5:
33:d0:7f:d4:c3:c2:68:8a:9b:2c:ef:22:bb:e8:36:
10:c8:17:9b:0f:44:ca:be:91:83:b6:02:92:af:bf:
96:cd:10:44:88:dd:82:e5:ad:a6:ae:b7:b8:fa:03:
c3:ee:97:6b:eb:de:e5:c5:8d:2d:22:a8:e0:11:35:
e8:cd:42:47:af:f8:70:bb:b6:91:3a:a1:3f:61:d7:
de:87:5f:80:f8:92:73:af:aa:5b:9a:6f:32:06:10:
b4:ca:06:06:50:90:57:0c:9d:f0:df:a5:4f:cf:a1:
9e:dc:7c:5b:98:f4:bd:ac:b9:c2:5f:91:f7:80:26:
38:62:42:14:99:83:31:29:14:55:ad:f2:ab:cc:14:
9c:9a:20:5e:74:d9:87:b5:0f:f8:45:84:76:45:91:
a6:ab:f7:3a:54:e7:9e:4d:99:fd:0d:c6:8a:ae:89:
29:75:f1:f0:a8:b7:2f:2f:48:69:14:a3:63:e7:26:
e2:00:c8:1c:9f:4b:5d:c0:cb:83:a7:23:9d:48:11:
77:2e:c4:83:62:37:57:29:eb:3d:04:55:c1:01:2c:
a1:c3:ee:dc:1e:2b:db:5f:20:e1:1f:8a:84:29:76:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8A:E1:6B:25:5B:12:86:30:0A:99:53:71:53:A0:FB:57:5B:42:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49E5CDC9A11EF8648E64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.232.0/21
Signature Algorithm: sha256WithRSAEncryption
61:4f:50:52:3b:69:49:5d:0e:9f:a0:9a:9d:d8:0a:12:7b:05:
9d:ec:53:a3:13:2d:0b:5d:ae:a9:05:3f:77:c1:c2:c3:1d:2a:
4d:ba:bd:2b:b4:6f:03:09:20:0b:c4:0e:af:5c:34:41:f9:87:
7c:62:f3:f7:cc:e1:29:73:77:af:8f:60:d6:3f:26:43:0d:0f:
bc:60:04:d4:43:54:8a:58:95:75:8e:2a:3e:1e:d4:92:c1:b4:
46:52:a4:89:95:4b:79:54:13:c4:45:33:c9:c7:b3:24:b7:c0:
b8:8b:de:e8:48:95:49:4c:b1:db:51:15:7a:31:e9:45:58:5a:
f5:71:0e:00:c3:56:53:53:9b:7e:c5:23:2d:45:63:2a:2d:09:
25:65:6e:0e:42:d6:17:47:94:ee:e5:09:7a:90:05:45:84:29:
b4:1c:e2:ea:c2:4b:61:6c:fb:3b:ce:b5:b4:2f:69:b0:50:aa:
b0:93:84:58:32:71:60:41:98:5c:43:cf:e7:62:bd:c7:2b:66:
a7:66:90:e3:fb:4f:0e:fa:68:3a:11:0d:20:eb:72:6d:23:21:
87:d0:0d:da:f8:13:14:77:78:0f:44:e4:d2:f6:9e:5a:c9:fd:
81:3f:14:35:2e:44:1f:27:2d:27:29:0d:25:30:f3:a0:ee:c2:
f3:84:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:07 2025 by rpki-client