Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073BDD8DC9911EFB5622E47762E951A.roa
File: C073BDD8DC9911EFB5622E47762E951A.roa (raw, json)
Hash identifier: LR0pAUVpAUXtbuD07dk2bsPf7g/bl7Yjv2HKo5ulCNA=
Subject key identifier: F3:A5:9D:5C:08:D1:9B:C2:05:5F:CC:80:BD:98:36:C5:4C:CE:54:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073BDD8DC9911EFB5622E47762E951A.roa
Signing time: Mon 27 Jan 2025 10:30:39 +0000
ROA not before: Mon 27 Jan 2025 10:30:35 +0000
ROA not after: Sat 08 Feb 2025 10:30:35 +0000
asID: 7018
IP address blocks: 154.83.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84903 (0x14ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:30:35 2025 GMT
Not After : Feb 8 10:30:35 2025 GMT
Subject: CN=6797604f-8aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:38:a8:44:22:10:dc:10:13:37:3f:c6:3d:
fa:32:89:1b:54:17:4f:cc:21:a3:89:b1:e0:59:48:
ae:8b:50:56:cd:7b:3e:ba:09:54:f4:b8:52:5a:6d:
b8:3d:a3:53:d6:8c:0e:d0:75:4b:10:69:81:5a:02:
38:a3:ed:6d:55:1a:44:f8:37:52:6e:2d:dd:ec:39:
ec:40:34:b7:8d:c9:88:26:02:04:b5:94:6d:de:9d:
e2:45:21:5c:d6:fb:10:3a:ff:32:0a:4c:66:b4:97:
5c:e9:a8:12:1c:ad:b9:06:bf:4b:95:f7:16:ca:5c:
90:d4:22:00:d8:9f:64:57:15:3e:41:08:91:eb:57:
60:19:83:65:0f:86:93:87:f6:a1:9e:ca:1b:bd:95:
9e:1e:ee:e6:d2:77:c0:10:cb:23:ea:38:4a:ff:89:
47:16:0e:36:f0:97:1e:0b:8b:56:02:9f:5f:53:cd:
83:0e:d9:a4:9c:80:6b:1e:1e:b3:20:fa:07:89:d0:
80:74:7d:1c:a7:84:34:d1:9c:31:b1:a7:b0:c5:74:
53:c7:34:7d:f4:b2:77:81:72:87:3c:83:d3:1b:df:
a9:45:58:95:be:b6:89:64:bf:64:84:73:78:4e:bd:
a8:68:53:af:85:8d:83:4e:22:b3:bb:b2:e8:00:cb:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:9D:5C:08:D1:9B:C2:05:5F:CC:80:BD:98:36:C5:4C:CE:54:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073BDD8DC9911EFB5622E47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.216.0/21
Signature Algorithm: sha256WithRSAEncryption
44:17:e8:d5:14:d6:59:9c:56:d4:04:e3:69:4c:81:92:da:72:
85:9a:8f:df:37:af:96:1e:d1:65:41:7a:5c:58:eb:ee:81:e0:
9d:4f:57:55:2e:8c:c9:2a:67:08:97:44:9a:43:f9:b0:be:a0:
71:0c:da:79:af:c5:2d:e1:4f:1f:4a:68:4d:f8:62:bc:0d:7f:
51:1b:17:75:82:0a:b6:62:8e:56:5b:6a:62:e7:f1:2b:41:45:
70:ae:45:a3:65:2b:fd:25:cc:0e:01:80:11:85:11:21:cf:3e:
72:3d:60:c0:3b:5f:68:a1:48:e6:a7:02:49:70:69:24:3f:85:
59:a4:6a:88:cf:d1:6d:1d:c7:66:dd:45:82:76:37:fb:c0:51:
ed:c0:d9:db:73:bc:22:c7:4f:54:89:2f:1d:4f:15:89:2a:d8:
70:f3:20:0e:f4:97:d0:84:2c:20:a3:22:0d:4f:b2:1c:94:47:
34:ad:39:75:42:47:87:22:e8:7e:07:54:b0:66:18:c5:e1:d8:
de:e2:75:da:f4:c1:55:cd:b6:80:dd:a9:77:34:d2:ae:69:54:
d0:35:d0:53:4c:65:ea:36:d1:23:92:d5:9e:bf:6e:f1:cd:32:
aa:47:95:8a:38:01:77:f7:f7:1a:18:b3:fc:55:ce:14:d3:c6:
b6:4f:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:02:32 2025 by rpki-client