Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10289BABB7911EFAAF29AA0762E951A.roa
File: B10289BABB7911EFAAF29AA0762E951A.roa (raw, json)
Hash identifier: KWH7aI8IxxjUJ/aQamqoXRilUz9xhXC1BPPl2jG/NGU=
Subject key identifier: 0F:1E:F2:07:B6:A5:D3:42:43:D7:B1:CE:17:8E:85:8A:37:03:DD:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10289BABB7911EFAAF29AA0762E951A.roa
Signing time: Mon 16 Dec 2024 06:48:01 +0000
ROA not before: Mon 16 Dec 2024 06:47:57 +0000
ROA not after: Tue 04 Mar 2025 06:47:57 +0000
asID: 142403
IP address blocks: 154.83.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72614 (0x11ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:47:57 2024 GMT
Not After : Mar 4 06:47:57 2025 GMT
Subject: CN=675fcd21-719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:a0:d8:49:42:9e:eb:76:1d:28:8b:6b:ce:
89:77:8a:d9:0e:a9:6d:bc:f6:fb:dd:e5:84:50:d1:
a7:00:e7:5f:3e:db:49:84:d3:54:82:43:6c:ec:67:
08:fd:02:4d:7b:10:f4:b9:de:ff:cc:e3:12:95:ce:
90:e1:f4:e8:51:32:25:d4:3b:64:3e:99:be:2f:54:
c4:8e:df:ad:6b:8f:e3:6c:a8:4a:ff:1f:6e:6c:d3:
0e:a8:fd:06:90:d9:83:98:e9:d3:70:7b:92:48:4c:
a1:f1:6d:11:a7:54:ad:e4:f8:85:c4:88:5d:a0:70:
2f:28:bf:a0:79:ba:30:fa:10:b5:a0:13:ff:f3:71:
9d:57:7e:4a:86:97:ee:1a:ca:8c:d0:0c:fd:69:5e:
a7:6b:dc:aa:cd:9d:a5:9f:b8:6d:0a:3b:31:8b:b2:
66:62:ca:d1:03:67:ff:1c:d7:d6:a1:98:12:56:85:
af:c2:1f:8a:6e:1a:31:70:2c:89:9b:ad:48:94:ba:
e3:ad:aa:0d:2a:1c:54:32:2e:d1:7b:47:59:55:06:
f4:ef:57:54:5a:51:1b:44:0a:7b:c4:73:85:08:bb:
23:ec:eb:5b:6b:1f:93:42:19:ef:3b:69:7c:d2:0f:
7d:ac:2e:74:73:db:c2:fd:d5:fe:08:42:ca:6a:15:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1E:F2:07:B6:A5:D3:42:43:D7:B1:CE:17:8E:85:8A:37:03:DD:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B10289BABB7911EFAAF29AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:fc:0e:fc:c4:55:5a:99:79:5b:b7:24:29:17:d5:27:54:66:
07:65:f0:f2:f6:6d:75:82:c9:97:fe:8f:95:90:65:7d:28:6e:
ce:0b:d3:6c:43:70:df:69:bc:94:58:64:1d:5c:fd:f2:4d:56:
23:fb:42:9f:6a:e7:cb:e4:50:71:28:7e:32:7c:bf:58:29:99:
13:e1:1a:9c:58:4d:0d:ee:bd:6e:3c:d4:ec:26:44:44:dc:3a:
63:f5:ca:ba:e4:1b:19:46:26:ec:58:14:50:02:58:4c:2c:c7:
0a:87:94:0e:6f:c2:67:16:b4:21:36:53:99:64:2e:64:70:14:
a2:c8:9d:ab:ba:63:e9:63:08:54:fe:9c:65:3f:02:fb:7b:41:
e5:82:1c:a7:97:73:04:d6:7f:9d:62:d0:01:b4:de:d1:3d:2c:
7b:47:56:27:af:7c:60:85:c8:17:83:1c:c2:8a:57:0c:16:3d:
32:10:14:b8:d7:a6:fd:e1:2e:ab:1a:7b:cd:4d:0d:f3:e9:90:
f2:d1:1f:e5:82:ea:f9:93:75:9d:63:fc:43:40:a6:d3:98:47:
f8:16:ea:2e:e5:78:b1:df:b8:0d:bf:2b:1a:5d:0c:f0:29:b2:
b4:70:8b:e5:82:d3:75:eb:4e:72:f5:c5:a4:fd:15:78:07:ab:
62:7f:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client