Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D092D860C8EF11EF9A1C825A762E951A.roa
File: D092D860C8EF11EF9A1C825A762E951A.roa (raw, json)
Hash identifier: dafv60B8DEAceIILhvf7SlBh6uabWQw4E29X76QafqU=
Subject key identifier: 73:7B:8A:B6:32:3E:1B:77:B6:FB:FA:3A:3E:E5:B8:5F:62:1F:D0:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013269
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D092D860C8EF11EF9A1C825A762E951A.roa
Signing time: Thu 02 Jan 2025 09:56:19 +0000
ROA not before: Thu 02 Jan 2025 09:56:16 +0000
ROA not after: Thu 06 Feb 2025 09:56:16 +0000
asID: 61112
IP address blocks: 154.83.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78441 (0x13269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:56:16 2025 GMT
Not After : Feb 6 09:56:16 2025 GMT
Subject: CN=677662c3-aa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:dd:a9:fb:b7:f9:d6:6d:e5:f4:30:79:ea:
fb:d4:b8:40:79:e6:da:18:d2:b1:5e:28:59:81:3f:
e4:53:48:20:f0:df:8e:c4:ef:9b:fb:2b:21:39:67:
f7:65:e9:83:88:67:7d:3d:28:00:65:4b:5f:2b:3f:
c0:37:bf:c9:80:ec:f7:23:a3:08:30:fd:1e:5e:62:
31:3b:f6:13:3c:89:2f:25:97:50:b6:f8:32:b5:b9:
4e:3c:ac:0a:70:01:8a:d3:4a:e9:04:cd:84:9b:0d:
81:7c:ee:77:8d:15:d4:b3:4e:f0:77:72:65:20:29:
2c:23:c9:cb:c6:c9:b3:47:43:69:f2:84:7c:02:23:
f8:a2:bc:94:f0:c8:d7:7b:f5:3c:77:57:9f:d9:a5:
4f:66:fe:52:49:92:d2:90:a5:03:13:d7:51:e3:bb:
78:35:af:a8:5f:ef:b5:49:19:41:7e:4a:ff:a5:db:
71:06:65:7f:48:46:27:4d:0a:76:20:33:db:69:dd:
44:d1:a1:15:2f:b4:39:9f:89:bc:eb:70:39:1f:58:
34:f4:ad:cb:53:60:bf:cb:ad:8e:0b:3d:45:c1:a8:
b1:db:62:6f:81:80:f4:b8:a1:ee:e0:9d:d5:c1:6a:
63:4f:c2:e4:0f:5e:4c:cd:80:4b:9e:f8:f9:a6:9a:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:8A:B6:32:3E:1B:77:B6:FB:FA:3A:3E:E5:B8:5F:62:1F:D0:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D092D860C8EF11EF9A1C825A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:87:7a:f8:4d:fd:8e:1e:be:40:a3:7d:6e:c3:b3:88:a8:6a:
71:90:02:35:f0:57:c1:c6:cb:4f:b4:8b:b4:85:b6:fc:c3:3c:
56:e1:5d:03:67:44:ab:76:62:fe:c5:e7:f3:41:0c:10:c0:91:
10:82:37:96:cb:65:c6:0a:64:e5:4c:37:1b:9d:32:4b:75:44:
6e:af:6e:8c:ab:14:2a:36:cd:e5:89:12:b3:51:88:1e:ce:cc:
ad:54:65:9d:17:94:26:c6:22:3a:20:7b:2c:cd:11:e3:ee:5e:
72:aa:91:bd:3b:59:3b:05:c1:b0:4f:5a:2b:15:0d:31:9e:96:
28:24:28:82:ab:aa:96:b9:b2:80:b4:67:85:81:d9:d1:d8:e9:
e6:bb:b6:f5:9a:aa:69:88:f5:84:2b:41:44:ad:1e:f2:16:4e:
ab:0f:4c:ef:3e:f5:0f:e4:3d:94:86:1c:39:da:39:fc:5c:68:
ac:07:cb:e4:df:77:21:25:6d:0d:48:34:96:71:61:ed:c0:5f:
d3:36:07:02:ea:f8:8c:d6:8c:c7:b3:70:c3:e8:14:7a:82:5c:
c5:1d:df:e1:18:9b:bc:36:27:80:d1:7c:51:06:df:62:ec:f6:
ee:f7:93:ca:47:04:81:63:3d:e9:58:cb:3b:02:98:8f:aa:0e:
04:cd:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:27:44 2025 by rpki-client