Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D783ECC0BFA011EF881EC0B6762E951A.roa
File: D783ECC0BFA011EF881EC0B6762E951A.roa (raw, json)
Hash identifier: D1IQhnvgxcy0AeituCr4hof+cM4Q78qcyEUuo8e+E+o=
Subject key identifier: 88:F9:8C:B2:84:F8:5F:08:8A:1E:96:3B:B8:25:39:97:49:74:42:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D783ECC0BFA011EF881EC0B6762E951A.roa
Signing time: Sat 21 Dec 2024 13:38:20 +0000
ROA not before: Sat 21 Dec 2024 13:38:17 +0000
ROA not after: Thu 27 Mar 2025 13:38:17 +0000
asID: 29802
IP address blocks: 154.84.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73089 (0x11d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 13:38:17 2024 GMT
Not After : Mar 27 13:38:17 2025 GMT
Subject: CN=6766c4cc-8e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:5f:b8:03:06:72:cf:a1:74:53:db:fd:1a:
16:63:55:8f:d4:b0:f2:6a:05:98:aa:6d:5e:0c:36:
8d:7d:be:11:e1:9e:62:68:6a:03:ee:31:fc:00:c3:
7a:3c:71:61:37:72:1c:4e:7a:b8:b3:e7:ff:90:8b:
11:f0:3f:83:82:62:31:7a:74:5a:14:bb:c7:81:f7:
a2:e5:05:8c:16:a7:d7:85:38:e9:e0:b7:7e:bf:3c:
bc:8a:7d:bc:8c:ca:eb:94:b5:dc:85:23:4d:10:12:
0b:53:ff:47:8d:6f:3a:fc:40:ee:27:54:72:b4:21:
58:bf:d4:fa:a2:dd:89:17:a7:5e:0c:f9:9f:5f:76:
c2:91:9c:fc:15:d8:5c:a5:bb:5d:a6:c6:b6:1a:6a:
4f:7c:b9:08:2e:4d:76:f9:dc:a0:e0:f7:d1:42:73:
95:da:71:ad:f6:12:4c:53:3d:c6:ad:7a:db:a0:79:
5a:5a:d3:36:c1:08:39:03:6a:b6:4d:7b:68:6c:d9:
d1:64:73:ba:91:bb:53:08:d6:29:20:3a:f7:a8:92:
be:85:4c:e5:cf:00:67:77:7e:3e:d3:05:6a:30:6d:
5b:77:d5:84:e8:de:18:84:d6:bf:16:50:25:c8:44:
82:1d:af:41:59:de:f9:90:d4:58:29:2b:53:9b:58:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:8C:B2:84:F8:5F:08:8A:1E:96:3B:B8:25:39:97:49:74:42:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D783ECC0BFA011EF881EC0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:28:5d:b2:c3:3a:d1:50:63:a4:72:4d:77:66:56:9d:55:82:
74:3e:ee:df:41:5f:bc:ea:7c:3b:81:6f:f0:fb:70:78:a2:3e:
24:5c:7c:4d:28:5a:bb:5e:8d:67:9e:fd:38:11:81:db:18:59:
02:ba:87:c4:d7:8a:6b:bf:35:33:17:ce:a0:a4:00:cc:d8:06:
0b:e3:cd:00:e5:79:fa:9d:6a:81:cf:08:a8:35:e6:fe:9c:4b:
c8:3e:92:df:06:d6:ab:d7:55:8e:fc:10:ca:a2:7c:89:9a:45:
cc:6a:bb:ab:a0:ab:33:f2:20:d4:fd:6b:6c:02:73:c6:66:17:
fb:52:67:9d:9e:08:48:89:b8:15:50:23:26:ed:e5:50:01:14:
00:f2:71:d4:df:81:89:d8:34:42:f2:3a:95:f4:9c:35:7e:1f:
0b:ce:a9:cd:71:42:4b:54:f5:61:f4:d0:43:c1:4a:35:29:9f:
bc:46:a5:15:1e:20:2f:00:04:a2:78:43:9f:f0:95:31:5c:b9:
d8:29:40:df:6e:e7:a3:b3:fc:e1:ea:b9:cf:03:93:b4:f7:68:
9f:14:e9:f6:fd:eb:34:3b:e4:2c:8f:2c:9a:64:37:47:5b:4d:
44:48:41:bd:39:5c:06:b3:50:9b:f1:76:d8:7f:f6:e9:6c:f3:
d8:17:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:02 2025 by rpki-client