Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA64E96C8EE11EFB57AF553762E951A.roa
File: 9EA64E96C8EE11EFB57AF553762E951A.roa (raw, json)
Hash identifier: jWoprSC+15HGUEknXprSbV6QchtWEp1fkAaN6/fMIxk=
Subject key identifier: 20:1C:2C:41:22:07:2A:19:F5:73:BB:3B:22:F8:C9:79:14:2A:62:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01325F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA64E96C8EE11EFB57AF553762E951A.roa
Signing time: Thu 02 Jan 2025 09:47:46 +0000
ROA not before: Thu 02 Jan 2025 09:47:42 +0000
ROA not after: Thu 06 Feb 2025 09:47:42 +0000
asID: 61112
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78431 (0x1325f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:47:42 2025 GMT
Not After : Feb 6 09:47:42 2025 GMT
Subject: CN=677660c2-2638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:15:3c:bc:0d:36:18:ea:ba:c0:3c:54:21:
3a:0f:44:dd:21:83:cf:ac:1d:f1:a7:65:e1:50:be:
70:d5:6e:78:b0:24:d0:c5:76:e7:1c:01:b2:7e:65:
05:be:94:6e:49:91:ee:db:26:f9:21:93:ca:e3:09:
68:f8:b3:8e:ac:19:ff:b1:30:36:7e:88:85:68:2d:
f3:7c:2b:c9:d3:03:70:35:fa:de:49:27:54:dd:cd:
ad:14:8a:ba:82:4a:af:e9:66:99:07:46:af:9c:8c:
72:e1:a7:25:73:3b:fd:79:83:4e:fa:4a:40:c6:6a:
35:3c:ed:05:b8:00:1a:f9:d8:67:a8:d2:11:fd:45:
2c:08:07:46:55:9b:82:32:7a:f2:62:c9:ce:df:1e:
06:52:6a:33:95:c2:5c:f7:4f:94:a8:54:e8:09:4e:
d2:9f:21:d6:e0:33:19:7b:de:75:50:22:25:71:1b:
ed:7d:6c:ea:d1:f4:07:6c:9b:d6:d5:84:93:bb:57:
f5:11:fb:e9:90:5d:a2:4c:21:ce:ca:68:99:35:38:
6e:1d:a0:38:40:75:dc:bd:fb:af:15:09:a4:19:fb:
6b:67:2e:0b:44:08:94:68:c5:f2:17:17:f2:3c:4d:
30:06:c0:61:e9:6e:97:60:62:c5:0c:76:63:ec:99:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1C:2C:41:22:07:2A:19:F5:73:BB:3B:22:F8:C9:79:14:2A:62:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA64E96C8EE11EFB57AF553762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1a:15:45:dc:2f:08:a6:4c:08:34:a4:1d:6c:f4:23:24:9b:
69:3e:5b:09:67:ee:5e:69:5a:5f:69:fa:78:a4:ca:5d:4c:5b:
b8:6a:8c:1e:01:a5:60:47:dd:af:4f:90:92:41:92:92:20:42:
9b:3c:4a:b1:bf:b7:93:7d:7b:c4:6a:a4:4b:7a:ba:00:fe:90:
a4:4a:44:98:d2:09:f5:92:53:f8:49:38:e1:e9:29:c0:90:a3:
52:4e:26:1e:c1:46:f5:04:72:c5:a5:b1:31:5d:2c:b6:0f:1e:
49:d0:9a:27:87:1b:35:a7:c7:b7:c6:3a:35:54:30:55:ed:26:
20:ef:7b:ea:26:15:56:d7:ba:c4:cc:04:73:d4:2d:c2:ae:af:
b4:cd:45:d3:b0:4f:fb:95:8b:aa:7d:71:6e:b6:c7:81:59:2e:
a4:db:3e:66:18:52:da:31:45:51:be:35:0c:43:fc:75:1b:81:
6e:51:51:a0:15:6e:41:8a:95:4e:e3:d2:05:47:ca:84:75:bd:
bb:7c:69:1f:8b:87:6f:28:94:d4:02:77:86:c1:7a:c1:b6:65:
41:b5:65:05:4e:c6:84:53:9a:d1:16:96:ea:3a:19:e7:87:a8:
34:b7:8e:92:04:40:8e:87:9f:e5:e4:f6:5b:23:6d:7d:3b:d5:
26:f8:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:36 2025 by rpki-client