Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D563FF28BB7911EF952EADA0762E951A.roa
File: D563FF28BB7911EF952EADA0762E951A.roa (raw, json)
Hash identifier: jXd7pTONd7HsnjLMh/qSL8JCUPbLleUQ9J8bE3o70Qk=
Subject key identifier: F2:3B:DA:D8:18:B0:A1:10:73:6C:67:23:44:DD:4F:58:43:F8:CD:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D563FF28BB7911EF952EADA0762E951A.roa
Signing time: Mon 16 Dec 2024 06:49:02 +0000
ROA not before: Mon 16 Dec 2024 06:48:58 +0000
ROA not after: Tue 04 Mar 2025 06:48:58 +0000
asID: 142403
IP address blocks: 154.83.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72616 (0x11ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:48:58 2024 GMT
Not After : Mar 4 06:48:58 2025 GMT
Subject: CN=675fcd5e-07fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:68:dd:1a:13:a1:5c:4c:3d:0b:31:ee:5e:
11:14:83:33:45:f1:61:2a:e7:0d:c1:2b:50:3e:eb:
d9:c3:18:cf:a5:43:25:dd:e2:ec:47:fd:72:8a:b3:
8b:b4:23:78:47:ea:3a:14:e8:50:49:4b:1e:fa:14:
72:b1:0e:92:f5:8d:db:20:b3:ff:ba:eb:cf:cd:bf:
1f:a2:a8:bf:a3:29:79:1d:a0:41:42:cf:8a:dc:33:
82:6e:9a:fc:e3:22:f1:67:7c:2c:d3:fa:90:d9:92:
8a:0f:66:cb:6e:7d:15:5a:94:5e:aa:1b:7e:9a:ba:
9b:b0:eb:1a:b2:a3:77:b0:47:f9:59:c9:dc:a6:d3:
9e:5a:2a:a5:17:f8:36:c8:bc:12:a9:cd:86:02:ce:
19:87:c2:ae:7e:da:36:dd:41:67:89:2b:1f:b0:48:
d0:e4:1e:81:13:05:fb:d1:de:1e:06:90:0a:d5:1b:
e5:30:fa:39:70:79:62:43:3f:aa:00:68:41:8a:0f:
2a:5e:6f:c9:c2:27:de:2d:25:93:4a:86:39:74:93:
71:d4:92:10:72:1d:d3:7f:2b:be:97:8c:db:c0:e5:
06:f6:fa:07:d9:62:57:39:0d:0c:2e:f4:ac:09:a0:
06:19:f5:3c:6e:41:ce:e5:2f:fc:f4:4b:e3:76:20:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:DA:D8:18:B0:A1:10:73:6C:67:23:44:DD:4F:58:43:F8:CD:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D563FF28BB7911EF952EADA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a9:0a:56:fd:ef:3d:50:43:e5:e9:76:23:a8:b1:46:04:0e:
fa:06:37:8f:de:8c:66:cb:29:4f:21:04:2c:57:45:fd:cc:45:
3b:bd:55:0e:04:77:75:71:fd:a0:1e:dd:ab:2f:04:4b:7b:58:
25:4f:ac:36:93:79:2f:99:d6:32:96:4a:91:f3:68:cb:b6:50:
73:a8:e9:d0:ff:ee:c3:b4:1c:fd:8d:2d:64:c8:67:42:2b:21:
b6:dc:62:7e:8c:2c:5b:42:32:dc:38:27:c1:c0:0c:a1:98:d3:
e8:1e:5e:10:03:da:06:63:e5:30:13:41:ca:bc:01:59:02:81:
e7:da:5a:bc:fc:1f:17:19:1e:9d:8e:da:a6:2e:83:93:19:02:
bd:a5:b5:c8:bb:7b:92:bd:f0:a4:2a:1c:f2:5d:5a:32:47:7d:
aa:2c:e3:54:89:cf:14:90:74:a2:e3:bb:7d:e8:57:f1:5e:9d:
ca:c5:44:3c:3c:ad:5a:a0:95:97:9d:ff:83:ff:8f:78:5a:37:
e0:a5:0a:27:7a:36:e4:8f:4c:0e:97:f0:e1:bc:04:d9:9d:6e:
37:72:34:65:c8:b2:3a:10:19:49:c2:46:b3:5d:82:f9:bd:d8:
a6:93:96:58:43:4d:27:47:fd:2b:ea:5b:8c:3d:14:9b:10:b2:
2d:2d:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:21 2025 by rpki-client