Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CCA7E8DC9811EF86512CBE762E951A.roa
File: 82CCA7E8DC9811EF86512CBE762E951A.roa (raw, json)
Hash identifier: mwTmGCu4FNvAUDLtckIt+gyunJ3Y3Hp6yIuOD6QLNmw=
Subject key identifier: 3A:A1:0B:1C:F2:A9:9F:1F:33:AC:F2:37:02:35:A1:3D:B1:F6:07:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CCA7E8DC9811EF86512CBE762E951A.roa
Signing time: Mon 27 Jan 2025 10:21:46 +0000
ROA not before: Mon 27 Jan 2025 10:21:42 +0000
ROA not after: Sat 08 Feb 2025 10:21:42 +0000
asID: 7018
IP address blocks: 154.82.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84895 (0x14b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:21:42 2025 GMT
Not After : Feb 8 10:21:42 2025 GMT
Subject: CN=67975e3a-8c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:6c:e8:10:f7:c0:d9:c4:13:0a:74:21:86:
d0:70:4a:49:bc:8a:f9:f7:e6:c1:60:bd:1b:52:b6:
d6:9a:1f:b9:4a:f7:3d:8a:42:17:20:6d:77:e3:de:
4a:09:47:71:09:7d:0b:61:95:11:ae:6b:d2:18:31:
63:98:f2:3f:58:e6:da:82:1c:74:06:0f:46:a9:82:
2e:4a:f4:0f:3d:75:8d:ff:ec:a6:b1:da:50:d4:9a:
dc:f7:c2:db:8c:65:4e:c2:4c:9c:cf:9d:6c:67:6d:
37:e5:7b:b1:c0:f8:f7:3f:7b:51:17:1f:de:34:d7:
b2:9f:20:fa:dd:84:df:8b:a4:87:23:ea:c0:04:4c:
6b:b2:5a:c9:06:8e:0b:cd:82:17:03:53:0b:6f:49:
6a:fd:bd:80:db:68:f8:bf:56:31:a1:21:3c:59:77:
46:46:5e:6b:32:21:14:96:0e:1f:91:b3:67:d9:53:
1d:d1:78:da:21:55:4c:75:b6:eb:4e:cc:58:f9:60:
3d:c4:81:26:0c:05:33:f9:75:3f:ce:aa:10:a7:19:
89:13:ae:ed:4d:0d:8f:b2:f5:84:a3:91:76:6e:34:
d4:ef:89:35:28:4b:d0:f4:11:dd:e8:54:dc:38:4f:
a0:09:c5:78:c5:4b:e1:5f:a2:6f:d8:03:2d:b8:88:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:0B:1C:F2:A9:9F:1F:33:AC:F2:37:02:35:A1:3D:B1:F6:07:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82CCA7E8DC9811EF86512CBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:80:8f:12:06:4e:1d:0b:44:ce:27:b2:ac:71:b6:14:c4:7f:
cf:18:a4:d8:00:c4:3e:ed:be:3a:f2:7c:93:b4:a1:7a:fd:cd:
39:7d:8b:36:df:b1:9b:8f:2e:37:c1:31:e2:26:f1:70:da:c4:
57:41:da:10:c3:00:27:4a:0e:c3:37:6f:23:63:cd:3a:4f:4c:
0c:c1:46:09:60:b4:39:fa:6e:7d:a8:66:6d:ef:d9:bc:87:f1:
42:4f:8e:1b:cf:42:66:1c:18:5b:e4:b8:ac:0b:a8:73:94:5d:
d9:18:de:aa:a3:54:7f:61:94:dc:67:d4:a1:2b:66:a9:75:a2:
46:c6:95:31:1e:da:b7:75:07:7f:49:ca:e5:d8:75:3d:25:01:
f8:9f:35:ed:b2:91:fb:e1:58:6c:37:91:38:8b:52:c1:88:e4:
1a:16:07:64:b6:46:4d:7d:55:5e:a4:3d:2f:4c:18:8c:76:7a:
fc:57:dd:27:85:9a:69:c0:f9:54:04:4b:fa:73:fd:f5:8a:68:
0e:b0:41:ea:c4:3d:b9:5b:da:a9:1f:8d:93:e8:4b:49:e7:fd:
85:0b:ad:78:4b:e3:59:e4:54:34:9e:21:19:3e:06:70:e3:61:
27:fa:51:6a:a5:29:02:f8:fe:81:ee:28:d8:a9:12:9f:ee:1b:
0e:3e:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:45 2025 by rpki-client