Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F6494DC8E11EF9A64D77A762E951A.roa
File: 267F6494DC8E11EF9A64D77A762E951A.roa (raw, json)
Hash identifier: f72n5KsqBBmVfRuTtUn8c8BC4oFNZJ8E/vG3yrGzZjc=
Subject key identifier: C2:1B:D3:59:F5:63:4A:1F:97:00:9E:60:2A:5C:CA:20:1E:A3:0B:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F6494DC8E11EF9A64D77A762E951A.roa
Signing time: Mon 27 Jan 2025 09:07:36 +0000
ROA not before: Mon 27 Jan 2025 09:07:33 +0000
ROA not after: Sat 08 Feb 2025 09:07:33 +0000
asID: 5065
IP address blocks: 154.84.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84853 (0x14b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:07:33 2025 GMT
Not After : Feb 8 09:07:33 2025 GMT
Subject: CN=67974cd8-a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:f8:dc:66:65:eb:16:3b:ca:d0:2e:da:0d:
8b:9f:b2:f4:8e:75:7a:d6:37:95:56:e2:91:b2:b5:
a1:b8:0f:f9:cd:ee:78:83:04:1f:82:f3:63:d5:67:
a2:f5:e0:65:1d:63:c6:44:78:f7:50:87:4c:7a:59:
65:bc:3d:72:28:af:a3:c2:cb:9b:8a:4d:8f:1a:65:
fc:57:f9:c0:ff:47:f0:52:83:07:93:43:f0:3c:be:
9b:76:c2:51:1d:22:c5:df:0d:91:e2:c8:cb:4a:65:
e5:e3:81:3b:d5:86:59:05:98:23:c0:d5:54:2b:1e:
28:4a:45:7e:84:21:5f:b1:7f:fd:a3:56:39:c3:16:
9c:69:1c:15:5a:1b:72:bf:83:65:72:8f:04:8c:c1:
64:bb:ca:7f:ae:de:e8:65:89:37:be:2d:87:ff:05:
55:b0:1f:81:06:c5:53:ae:6d:c1:3c:c0:f2:85:75:
65:2f:a7:46:62:55:ca:7f:d4:0b:a9:e4:6c:d0:66:
7a:33:52:60:a3:65:e9:6a:96:3d:e5:09:40:6b:f0:
0c:95:87:e5:8f:e2:9b:5b:aa:1d:a4:f1:01:25:7c:
29:10:33:8e:40:90:e1:79:c2:c3:a9:e0:d5:3a:a0:
7f:3f:3a:8d:03:7b:23:a3:bb:40:ce:c6:44:bc:91:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:D3:59:F5:63:4A:1F:97:00:9E:60:2A:5C:CA:20:1E:A3:0B:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267F6494DC8E11EF9A64D77A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.182.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1c:7a:30:f9:63:a1:1a:87:04:b1:de:d4:9b:65:63:93:57:
a8:ea:0e:54:91:b6:b4:f8:84:ef:9e:8d:75:5b:71:cd:a1:37:
e6:54:1c:06:a7:60:bd:48:14:f3:c2:19:e3:62:e1:94:fd:98:
ba:db:0d:e3:27:91:c1:92:54:e3:4f:87:c6:e6:b9:2a:57:7f:
cc:4e:80:1e:b4:5e:a1:6f:bf:1f:16:34:f8:07:f2:fc:91:71:
44:93:cb:78:aa:cd:36:e5:3f:bb:4c:58:57:f5:ef:40:bc:30:
71:7e:7c:6b:a8:56:c6:b4:6a:79:f0:90:e5:b5:b3:23:eb:f7:
14:e0:1d:b5:b9:57:ba:37:11:15:0e:9f:35:9c:3f:7e:94:a4:
6c:bb:40:a6:f5:1a:0f:ee:84:7a:51:92:30:e4:ab:8c:a4:5c:
ba:c0:a3:fb:60:9b:31:82:48:8d:fd:4c:6b:40:c1:10:5a:5b:
20:be:49:d9:3b:9e:29:bc:b6:7e:dd:ec:f6:66:78:01:d0:61:
6b:a0:ba:90:22:5c:b9:12:e5:c0:38:83:c1:e0:f3:97:27:30:
6d:5f:18:e7:d9:b1:ad:0a:29:e2:fb:e9:64:a1:0d:ff:68:0d:
35:d2:48:01:e7:6c:40:54:91:96:f1:10:a7:91:6e:58:08:fb:
dc:de:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:45 2025 by rpki-client