Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F29CB88DA5111EFB200525E762E951A.roa
File: 6F29CB88DA5111EFB200525E762E951A.roa (raw, json)
Hash identifier: RfvwT5eY95KNzP7IIoPd/SY7uhWyueF/FPw1y33a6HE=
Subject key identifier: 82:EB:3B:A5:46:A5:AE:B5:DA:E9:D8:A0:D5:E7:58:0A:13:74:A0:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014705
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F29CB88DA5111EFB200525E762E951A.roa
Signing time: Fri 24 Jan 2025 12:47:56 +0000
ROA not before: Fri 24 Jan 2025 12:47:53 +0000
ROA not after: Thu 06 Mar 2025 12:47:53 +0000
asID: 21859
IP address blocks: 154.83.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83717 (0x14705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:47:53 2025 GMT
Not After : Mar 6 12:47:53 2025 GMT
Subject: CN=67938bfc-2f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:98:f2:6e:16:ca:87:0d:b2:24:4b:3d:99:
19:b4:67:95:29:d0:01:31:d6:3c:0f:a7:1c:2e:85:
7f:ee:22:69:39:71:7d:70:fa:3b:73:74:49:54:d2:
25:4c:d6:2e:56:8f:a3:4a:73:5e:1e:28:3e:55:64:
74:23:3f:12:cd:c4:e9:a1:04:97:c7:c6:c4:e6:03:
9f:15:8a:07:04:19:c3:23:46:91:75:0a:01:07:5f:
c9:9a:ea:e2:5b:46:c1:d1:99:86:bb:5e:40:60:cb:
7d:c7:eb:62:8c:26:7a:62:47:28:80:a2:72:7e:a8:
ff:1d:0c:ac:27:d7:ba:e3:3f:dc:d7:3d:ab:60:20:
9b:c3:65:cd:ec:8c:6b:04:38:7a:bf:9a:b7:02:24:
4b:ec:2c:db:dd:bc:7f:bd:be:c6:ae:a4:7c:42:56:
99:50:d2:7f:42:ee:1e:ea:86:16:81:35:da:5d:0e:
71:60:74:d2:51:fe:0f:44:06:cc:ad:af:db:23:42:
98:96:39:59:71:0d:08:8a:28:a9:70:70:6e:76:d4:
55:37:56:23:ad:ea:ab:9b:68:ee:42:11:94:3e:12:
11:12:25:bd:31:de:7c:17:61:e0:53:0b:c4:93:a1:
cd:fa:fa:1d:43:01:d5:f9:97:03:16:12:74:41:6e:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:3B:A5:46:A5:AE:B5:DA:E9:D8:A0:D5:E7:58:0A:13:74:A0:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F29CB88DA5111EFB200525E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3e:c3:7f:b2:4a:a2:6b:54:74:20:18:c2:71:81:65:82:f9:
83:cf:c0:ef:66:20:4e:73:4f:21:79:d4:0b:fa:6c:2a:78:8c:
96:5c:ce:40:5c:dd:e0:a5:d9:66:aa:93:f9:37:2a:bb:ef:75:
41:d7:be:fc:39:62:3e:96:6b:0e:85:5e:99:e7:ae:19:fd:39:
0c:14:b1:fa:c7:d0:55:58:60:1e:63:6e:ff:e7:e0:71:b6:d0:
47:49:f3:f3:8f:0e:c7:f5:c9:87:54:7c:b9:7f:80:f8:21:9f:
32:1f:47:c0:5b:6b:f6:4e:9f:68:83:c7:94:9e:c7:06:60:0b:
e4:af:e8:39:18:f7:18:82:04:7b:ad:e2:55:bb:aa:1f:2b:df:
6c:f6:15:de:2d:29:a0:4a:09:30:42:0d:58:df:e1:14:56:a9:
5b:07:57:18:fb:18:2e:b4:40:b9:01:3e:0d:8d:65:bc:58:92:
12:10:e9:15:a4:75:b4:e5:45:be:29:dc:41:f1:34:08:73:ec:
fd:d5:c0:33:18:d2:3b:da:08:16:d0:47:db:17:46:db:3f:dd:
b3:eb:16:d2:eb:2c:37:4f:a5:e9:46:a4:e6:96:b7:79:d0:85:
6c:10:d5:07:32:2d:da:a3:c0:7e:6d:49:4f:fd:c4:80:c0:70:
94:e9:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:02 2025 by rpki-client