Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F41954DCA411EF849F5690762E951A.roa
File: B7F41954DCA411EF849F5690762E951A.roa (raw, json)
Hash identifier: pd1lebuYXEFl3jkCizgs4JCrU/vKpQy9HNrLXzwtpFI=
Subject key identifier: E9:B9:A8:F9:65:4E:2B:F7:50:BC:68:3E:08:D5:0A:06:D6:87:7F:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F41954DCA411EF849F5690762E951A.roa
Signing time: Mon 27 Jan 2025 11:49:09 +0000
ROA not before: Mon 27 Jan 2025 11:49:05 +0000
ROA not after: Sat 08 Feb 2025 11:49:05 +0000
asID: 7018
IP address blocks: 154.83.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84965 (0x14be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:49:05 2025 GMT
Not After : Feb 8 11:49:05 2025 GMT
Subject: CN=679772b5-1379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:77:3d:f3:fa:04:c5:61:ad:5d:77:59:22:
88:cf:04:45:1a:44:b0:3a:b2:a7:ea:08:ba:b7:e7:
ee:09:fd:05:0f:f5:58:17:bd:80:7e:ce:a0:b8:61:
b7:89:c3:30:b3:62:83:5c:2e:48:c8:6d:8f:1b:5e:
8b:88:40:91:12:52:92:4e:55:0b:5d:57:d4:1f:4e:
7b:01:d4:0c:89:77:93:a3:4c:0c:d6:17:18:d8:7a:
f7:db:3d:81:30:0f:02:89:1e:2a:2e:27:73:5d:e5:
9f:f6:c4:65:5e:12:5d:4a:69:b8:cb:f3:fc:63:dc:
c8:27:33:e1:2c:2a:74:9f:50:0d:05:b0:20:57:92:
2a:0d:87:7c:a3:47:fb:65:15:88:18:a1:01:b4:8b:
fb:55:ec:83:b9:1c:1d:7f:1a:7f:25:48:a0:d1:f6:
b7:49:9a:26:0d:a4:40:eb:61:f9:20:1c:ba:66:47:
09:17:a0:53:c1:43:94:3a:12:5f:cb:54:c5:96:ee:
4f:82:90:6f:9d:a1:1d:41:61:22:19:cc:89:5e:e8:
10:db:24:d1:c3:84:38:b1:07:72:55:13:25:b6:1e:
b7:04:53:62:cc:15:de:b2:36:4e:c9:eb:06:6a:98:
03:85:0a:7c:14:af:2d:0c:80:50:e7:7d:8b:c4:b1:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:A8:F9:65:4E:2B:F7:50:BC:68:3E:08:D5:0A:06:D6:87:7F:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7F41954DCA411EF849F5690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.192.0/21
Signature Algorithm: sha256WithRSAEncryption
91:6b:68:02:73:4f:40:99:15:26:08:8e:09:4b:dd:95:2b:ba:
ea:33:f0:a3:43:df:9f:36:97:c1:33:4e:4b:68:f5:61:2d:03:
bb:19:ee:6c:1d:6d:ba:b8:41:a8:52:82:86:69:c0:ee:1e:38:
86:8f:9b:08:ce:97:e3:1c:f2:13:6b:79:75:2f:53:69:f1:fe:
93:29:91:f3:68:a6:5a:2a:41:d3:2b:93:cf:9b:4f:80:61:6d:
2e:3b:6a:6b:c4:ef:55:93:91:45:c9:9b:aa:d7:55:9d:5d:c1:
2c:e0:ff:0b:bc:ad:68:71:d6:a9:c8:49:5d:55:c8:50:6b:15:
bf:9e:43:f2:5b:32:37:33:01:d1:ce:83:b2:88:f7:63:8b:30:
d0:c3:7c:ba:c9:b7:0c:87:fa:82:3b:87:f4:36:5e:f5:f8:a8:
2e:12:67:06:a3:da:06:61:e9:78:4c:97:25:15:2c:d4:dc:49:
13:3f:9a:18:5e:9a:13:f1:db:28:f1:26:6f:43:a0:43:20:d9:
51:9c:8d:fe:e5:a5:b5:ec:eb:41:23:61:92:e0:32:ff:b3:36:
de:e5:b6:3f:f2:35:c1:0d:5a:df:6b:77:f6:60:19:ab:c8:43:
20:63:d2:03:85:a4:41:bc:f5:7e:77:c6:82:e4:0c:ec:2d:16:
df:f1:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:00 2025 by rpki-client