Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC638A9ECEEC11EF91615A6A762E951A.roa
File: BC638A9ECEEC11EF91615A6A762E951A.roa (raw, json)
Hash identifier: fR2q4DT4sn0No0/xaDGZDvrvE+jsOFgubvFxGMx5G7U=
Subject key identifier: BB:60:11:2E:B5:DD:AF:4A:75:01:86:5F:62:72:04:EB:96:D1:E9:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013966
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC638A9ECEEC11EF91615A6A762E951A.roa
Signing time: Fri 10 Jan 2025 00:49:24 +0000
ROA not before: Fri 10 Jan 2025 00:00:20 +0000
ROA not after: Thu 13 Feb 2025 00:00:20 +0000
asID: 54801
IP address blocks: 154.83.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80230 (0x13966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:20 2025 GMT
Not After : Feb 13 00:00:20 2025 GMT
Subject: CN=67806e94-5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:a5:39:b8:c4:4a:72:dd:3a:b1:ff:a3:e0:
f1:89:a9:57:18:15:92:ce:12:43:61:b9:d7:f5:16:
5c:62:5f:52:67:94:28:93:33:8e:65:21:71:b8:12:
86:3f:e8:38:3d:9b:ee:66:03:88:26:2d:88:72:38:
85:b0:85:75:b6:9b:10:dd:8f:52:9e:3b:78:44:0c:
f4:04:1c:96:3e:a7:eb:25:d8:2e:d1:58:73:a6:c5:
0b:43:2d:5e:c5:9d:5e:7c:6b:f5:ba:7d:16:e4:7c:
6e:eb:59:c7:e9:ac:29:5e:bf:1c:a5:5d:d1:ce:0f:
b9:9f:38:f6:89:ed:25:cf:e6:bc:bb:6d:6f:d8:8d:
5f:34:45:60:43:5c:8d:63:cb:1e:de:ee:e3:94:9a:
61:b3:83:87:1a:e1:ed:55:94:4d:83:7a:3c:98:8f:
a9:51:3c:8f:98:98:d7:73:b2:d6:0d:9d:9b:4c:6b:
b5:18:75:c4:77:93:d4:0c:4a:c3:05:b9:e7:39:37:
ac:56:5c:49:72:ff:0c:71:ae:7b:5e:f6:e0:e5:2a:
ec:7d:71:96:cd:b3:00:b3:04:b5:b9:b1:58:91:90:
26:34:39:24:38:18:75:d5:00:e0:99:5c:37:49:3e:
3c:0a:27:46:10:c2:f9:df:84:a9:81:4d:34:e7:58:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:11:2E:B5:DD:AF:4A:75:01:86:5F:62:72:04:EB:96:D1:E9:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC638A9ECEEC11EF91615A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.211.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6f:7c:84:94:7f:73:47:c9:30:8f:44:a2:00:26:2f:0c:12:
3d:d3:71:0d:b5:78:e8:76:b2:ce:3c:92:ec:f1:cb:fc:74:19:
61:57:73:71:ca:e8:ad:c4:c1:53:78:54:b0:2c:7e:0a:09:23:
03:92:65:61:9e:6c:ac:d9:6c:18:5b:67:4e:05:03:42:29:63:
fd:bd:0f:a0:4a:3f:36:06:e2:51:cb:dc:e7:ef:71:f9:f5:68:
7e:a5:ff:4a:b3:9b:e8:47:0e:96:2f:95:b4:44:97:ed:24:fd:
e6:21:09:47:76:82:c9:3a:4a:51:14:84:02:20:7f:dd:bd:54:
79:c3:07:d8:f6:63:4d:aa:2b:ce:89:1f:af:ae:1f:ac:26:92:
b0:77:a8:16:d4:5c:50:25:73:84:5e:83:3a:d6:3f:3a:4a:68:
ca:a3:91:c7:d2:42:66:64:31:65:a0:71:04:53:17:5e:23:c4:
00:c9:e0:d2:85:45:8f:7c:44:26:66:dc:c9:5b:3c:2e:4d:f5:
02:c0:79:c9:53:12:91:fd:a0:3a:1d:40:73:ef:c4:95:91:83:
e8:65:ff:f6:76:33:7f:f7:41:93:0b:64:ca:e7:2e:16:03:ea:
87:d7:81:f2:cc:f4:85:4d:77:6a:7f:61:28:04:31:50:b8:5e:
54:a6:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:13 2025 by rpki-client