Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD62E7FECEF811EF87B54642762E951A.roa
File: AD62E7FECEF811EF87B54642762E951A.roa (raw, json)
Hash identifier: dPUVhTQ8rS5xaTUsBl3SSeZaAoRnLcVbrt18SZ2oAOo=
Subject key identifier: D7:D3:4B:15:71:AB:DD:C5:55:57:DD:2B:7C:53:78:AD:03:74:BB:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013989
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD62E7FECEF811EF87B54642762E951A.roa
Signing time: Fri 10 Jan 2025 02:14:53 +0000
ROA not before: Fri 10 Jan 2025 02:14:49 +0000
ROA not after: Fri 14 Feb 2025 02:14:49 +0000
asID: 395793
IP address blocks: 154.83.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80265 (0x13989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 02:14:49 2025 GMT
Not After : Feb 14 02:14:49 2025 GMT
Subject: CN=6780829d-daaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:39:5e:da:65:97:d0:54:52:2d:b7:7f:9e:
8d:55:05:29:5b:df:2b:8d:9a:b7:0c:37:1b:b4:eb:
7d:1f:71:52:30:2f:1a:41:f1:aa:27:39:22:44:9c:
aa:6c:6e:95:31:1b:e9:ba:61:28:ef:46:f3:d4:e9:
ba:6c:98:c8:6c:1c:38:e2:2a:02:a4:84:d8:41:93:
32:28:79:5e:ea:26:3d:de:72:d2:2c:4b:b1:4a:c9:
0b:3c:1c:80:79:b1:df:9e:91:9f:f4:05:a5:79:66:
f9:bd:9a:b0:c3:fa:cc:f1:7b:3d:71:dc:ab:77:71:
2c:95:d2:1e:40:23:92:3d:99:8a:c2:da:f4:b8:47:
7c:7c:03:9a:a1:b5:5b:ab:7c:44:1e:75:ab:45:2a:
a4:fb:45:23:00:3e:2e:af:82:6d:29:2e:0f:03:02:
97:b8:68:15:21:e8:94:62:b5:22:99:a2:9d:87:69:
4d:92:b5:6c:a3:34:a7:1f:b7:59:e8:35:57:fe:ca:
d1:73:cc:57:44:b3:ad:2c:2f:75:20:fa:b0:56:75:
d0:73:44:fd:42:72:7c:16:e3:25:e0:f6:49:94:4c:
22:6e:fa:6f:e4:a5:32:3c:e4:06:db:0d:c8:00:c3:
11:ba:28:e6:6c:81:d2:ac:f6:37:4b:fd:fc:0a:a3:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:4B:15:71:AB:DD:C5:55:57:DD:2B:7C:53:78:AD:03:74:BB:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD62E7FECEF811EF87B54642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b6:52:19:ea:d5:27:54:3c:c3:37:ec:28:cb:34:42:26:81:
05:1f:a7:19:8c:16:f7:af:2b:fa:ee:48:e0:38:60:c3:21:97:
bf:92:dc:12:4f:72:13:7d:5d:de:3d:7a:57:a2:68:3f:27:50:
01:ba:04:b4:4a:91:33:76:e2:e1:7f:2c:de:ef:65:33:b9:95:
79:1c:dd:c1:58:50:70:62:86:6c:6e:e3:03:fe:db:1f:55:99:
d3:21:1a:c6:00:e6:cf:97:b1:9f:50:e0:0c:e6:1d:9c:5d:72:
58:2e:3d:3a:71:e1:3f:97:69:c5:69:45:2d:5e:88:6a:08:ac:
1f:f0:49:a7:21:74:10:ed:db:00:2c:95:be:83:da:cf:09:3a:
88:3d:86:c8:fb:ab:e5:f5:31:a5:fe:d7:c5:29:d8:e7:45:11:
75:26:27:9c:ff:64:c9:40:46:cf:d0:18:8f:7d:cf:4d:2c:b0:
fb:a0:48:9e:80:cd:c4:88:6a:f9:ec:db:86:74:c7:65:b7:92:
40:2a:15:4b:0a:29:d2:30:a0:f0:48:c4:ec:22:25:34:b8:24:
9b:68:d2:73:1d:7e:d1:d4:4f:3d:4f:82:14:f2:65:5c:7b:4f:
44:f4:64:cd:70:f4:33:c9:f3:c3:f6:71:36:b5:cf:58:8a:47:
59:93:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:26:54 2025 by rpki-client