Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8413D896CEED11EFAB865D6F762E951A.roa
File: 8413D896CEED11EFAB865D6F762E951A.roa (raw, json)
Hash identifier: t8ueAANXKOowmaeYLnE2HZr/YM49z1PJX5QzpmbFLFs=
Subject key identifier: 2D:30:6B:05:17:C5:98:9A:3B:09:F4:74:7C:50:06:3D:4C:57:A5:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01396C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8413D896CEED11EFAB865D6F762E951A.roa
Signing time: Fri 10 Jan 2025 00:54:59 +0000
ROA not before: Fri 10 Jan 2025 00:00:55 +0000
ROA not after: Thu 13 Feb 2025 00:00:55 +0000
asID: 54801
IP address blocks: 154.83.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80236 (0x1396c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:55 2025 GMT
Not After : Feb 13 00:00:55 2025 GMT
Subject: CN=67806fe3-9ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:5a:5e:c7:d0:85:b1:9e:2f:50:d7:29:1c:
45:0e:fb:1c:74:23:90:ab:57:23:18:33:8c:58:76:
94:3c:62:5d:af:a2:ed:fa:30:1e:85:33:92:44:0e:
a0:4e:8e:41:a3:72:e3:76:4e:4c:e4:f2:ba:b1:51:
8f:25:95:4a:76:f2:88:a0:a1:43:50:e2:04:d9:98:
7c:25:74:7d:fe:fb:91:a1:1b:26:a2:8b:f9:1a:50:
3a:79:84:36:7c:83:8a:08:38:0d:67:87:02:9e:6d:
24:db:b9:e4:4d:7e:aa:a8:fb:df:9b:12:9f:cd:79:
96:47:ca:8a:3c:13:4f:f3:19:51:9f:93:4c:b3:1c:
05:66:f2:cf:74:9e:7c:76:14:64:97:4c:ff:c2:83:
d4:57:ae:9d:f8:f0:34:a4:4a:e8:62:01:62:d7:7a:
af:a0:b7:05:64:17:09:8b:32:81:0e:12:8c:f5:75:
36:3f:d2:bd:1c:02:97:c3:cd:8b:af:5a:1e:6d:56:
54:60:08:95:70:24:a4:33:a1:8f:a5:18:0b:8e:4a:
91:ec:45:49:b1:72:00:72:b2:e0:27:39:24:f9:0c:
58:a3:06:c8:9c:87:66:08:b1:46:c4:34:35:c3:70:
22:bc:94:06:2c:4c:ef:f7:60:d9:71:cc:41:55:17:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:6B:05:17:C5:98:9A:3B:09:F4:74:7C:50:06:3D:4C:57:A5:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8413D896CEED11EFAB865D6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.187.0/24
Signature Algorithm: sha256WithRSAEncryption
98:54:09:28:b8:47:ef:f1:60:26:b3:3e:18:85:ee:90:5b:c9:
7c:69:7f:35:fc:46:c2:c6:7c:15:9c:bb:93:b8:e0:d0:57:c4:
8f:78:ee:a1:c3:dc:2a:43:dc:9c:c6:7a:56:96:fa:b6:d1:d8:
f3:94:b7:25:2e:e7:bd:64:ee:f1:d1:23:f7:d3:05:04:11:5f:
10:bf:04:52:a8:b9:f0:1a:fc:7f:54:86:13:88:a2:03:a1:22:
25:66:ca:e1:f0:a3:23:bd:f9:8e:63:b6:26:da:5f:b8:0c:8f:
fa:f1:69:ee:94:51:43:aa:21:c7:ef:c7:b3:5e:34:e2:99:2e:
2a:46:b2:43:37:30:b8:36:80:ee:75:53:68:90:b5:64:67:66:
2a:da:ad:28:d4:d2:18:b0:0a:37:da:1e:63:c0:7a:45:df:66:
65:6b:05:45:3d:fe:d3:52:0e:f1:34:ac:a5:5e:86:e2:15:74:
2a:d6:5a:cc:a8:75:9f:35:e2:41:ab:8c:f8:aa:71:64:94:9e:
58:74:fa:02:ed:76:c1:b7:36:b0:41:1a:28:f5:db:c7:d8:3a:
47:5c:84:15:c3:70:df:64:73:ae:c9:47:8b:19:2e:3d:44:e0:
f8:c7:a0:19:c0:8f:e2:fe:35:e6:b1:06:bd:74:e1:fe:92:89:
42:c5:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:27 2025 by rpki-client