Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2282D5EAD9D411EFA8CFE581762E951A.roa
File: 2282D5EAD9D411EFA8CFE581762E951A.roa (raw, json)
Hash identifier: oO+43dWrgNo+DJ0nVoARG0LaFfg4eQvP4ewOGBuLth0=
Subject key identifier: 47:A0:D7:AB:B3:3B:39:E7:0F:06:31:83:7D:6A:03:9C:76:82:AF:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014327
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2282D5EAD9D411EFA8CFE581762E951A.roa
Signing time: Thu 23 Jan 2025 21:51:01 +0000
ROA not before: Fri 24 Jan 2025 21:50:57 +0000
ROA not after: Fri 28 Feb 2025 21:50:57 +0000
asID: 62240
IP address blocks: 154.194.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82727 (0x14327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:50:57 2025 GMT
Not After : Feb 28 21:50:57 2025 GMT
Subject: CN=6792b9c5-ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:86:f6:a9:a6:55:56:0e:46:ca:a2:c0:60:
a3:9c:9b:36:ad:59:f0:78:be:d3:de:01:b2:93:d0:
57:cf:6a:67:74:d2:c1:c0:02:4a:e5:b8:7d:b6:82:
e7:03:0c:c5:6c:01:34:0a:59:bf:0c:38:db:c8:a2:
81:94:b5:02:8d:59:b7:4d:60:62:2b:e5:c8:06:b7:
56:ee:8b:8f:e4:b4:19:24:49:47:db:8b:8a:6b:5a:
8e:e9:31:f5:58:62:60:a7:cd:8b:c3:b1:e4:6f:9d:
c8:e6:43:00:af:fa:7b:76:5c:43:6e:16:94:fc:7a:
2e:44:e2:97:fd:58:38:f7:4a:1c:0f:78:8a:1d:e5:
eb:6f:c8:e9:8b:91:7b:8a:6f:bb:0e:49:67:66:66:
d0:c5:5a:d8:b1:02:3c:f9:73:ed:ea:59:6f:72:ac:
30:e8:e8:71:c4:d3:66:65:d8:4a:3e:3b:cd:ce:a6:
d4:f4:f9:76:d1:82:d5:3d:1b:ed:ff:3f:e7:e0:c7:
84:ef:aa:e0:6f:c6:f5:48:e3:77:a0:d2:e9:28:7f:
b2:9f:32:2e:3f:eb:48:51:3c:a3:7d:a6:ad:68:06:
41:36:b8:4f:d7:65:1b:d5:f3:19:6d:e4:23:25:4d:
0d:b0:d0:5b:54:26:4d:a4:ba:4c:62:cf:21:8a:ed:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:D7:AB:B3:3B:39:E7:0F:06:31:83:7D:6A:03:9C:76:82:AF:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2282D5EAD9D411EFA8CFE581762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
56:91:14:e8:90:c0:e5:2b:ca:bd:95:2c:69:32:5c:ba:73:b6:
b5:21:8f:23:cc:35:1a:96:7d:70:4b:89:90:aa:c7:61:f9:5f:
a2:8b:af:dd:3c:3c:36:9b:e8:c5:1f:ac:a7:9a:e2:5d:bb:28:
e1:3c:5c:4f:02:92:28:da:f7:48:60:f2:d2:97:2b:5f:23:e4:
1b:be:a8:0c:6f:84:10:87:d6:e6:5e:6b:4a:6d:f1:62:ee:7d:
43:1e:84:52:4f:8b:97:df:0a:22:b9:13:56:98:cb:5e:dc:0a:
b4:28:79:83:b8:3b:f2:96:72:a2:c5:41:cb:41:a9:b5:26:0f:
e0:be:54:6f:c3:7d:29:a6:1b:e0:d6:b3:ae:4c:3a:28:1c:4d:
f7:53:15:e2:67:7d:4f:0e:6f:30:8c:a0:2f:23:f5:6f:ef:26:
7f:38:8b:16:76:21:70:03:65:33:90:19:7e:67:e1:29:fd:4c:
f6:f8:1e:42:d7:89:f1:2d:a3:23:a3:ce:88:43:f0:7e:05:3f:
48:1f:bc:27:89:cf:cd:cf:b0:9b:11:14:f5:7b:9b:68:6d:ad:
60:82:b6:7e:90:4f:7c:2d:94:85:ea:51:92:49:59:ab:67:7a:
85:9d:46:6f:37:24:af:64:05:13:a0:51:6e:e3:da:0e:29:12:
27:e9:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:50 2025 by rpki-client