Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2AABFAC8EE11EFA9500F54762E951A.roa
File: DB2AABFAC8EE11EFA9500F54762E951A.roa (raw, json)
Hash identifier: qFUUij0kmR38zZ80zCCe8O08ZQ3x8jemY821HpODpBY=
Subject key identifier: C7:94:B7:C1:7D:A7:2D:F1:A5:DF:F7:47:76:C2:26:5A:D1:1D:5D:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013261
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2AABFAC8EE11EFA9500F54762E951A.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Thu 06 Feb 2025 09:49:24 +0000
asID: 61112
IP address blocks: 154.83.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78433 (0x13261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Feb 6 09:49:24 2025 GMT
Subject: CN=67766128-3ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:17:64:da:b1:98:0f:fc:4a:81:75:40:8d:
02:35:cd:9e:b0:ea:f9:7f:01:de:f2:21:fe:87:f9:
be:32:ad:b2:dc:66:31:74:03:62:00:81:bd:fc:27:
f8:75:16:37:06:5e:51:29:ca:f1:ef:54:66:b6:8a:
4a:40:ba:c6:a9:f1:14:05:3e:83:e2:d7:b9:64:85:
0c:dd:b5:21:3d:00:45:b6:84:cc:e9:0a:32:c4:2f:
08:bc:11:66:d6:3b:53:e2:74:c9:da:f5:60:32:e2:
29:d6:50:19:08:69:90:9a:83:f9:24:80:68:a6:6d:
23:64:26:34:aa:44:29:01:3e:1e:75:e3:40:a9:78:
d9:aa:c3:fe:46:60:4e:f2:20:08:61:fe:cf:75:0f:
47:c3:7c:d8:3d:95:79:2d:20:53:4e:fb:8b:29:63:
84:99:05:f9:c8:33:6e:67:b6:5b:10:70:15:37:c2:
f9:a6:87:8c:59:1f:b7:1a:d3:bb:fd:8b:11:08:9f:
cf:02:46:4b:fc:ca:04:2c:de:3f:b9:d2:b3:c1:de:
4f:0e:da:93:24:a9:e0:d3:71:59:09:a4:73:bd:d4:
63:8a:86:2a:a8:2b:63:93:1f:1e:6c:41:b0:75:6d:
1f:03:09:13:9d:48:66:46:ca:f9:d0:a5:9c:fa:b9:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:94:B7:C1:7D:A7:2D:F1:A5:DF:F7:47:76:C2:26:5A:D1:1D:5D:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2AABFAC8EE11EFA9500F54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.96.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:dd:40:fb:65:cd:d5:f2:9b:c7:46:7c:71:20:ec:62:f8:5e:
37:de:54:fe:79:62:9d:9a:23:12:da:4a:07:71:2d:0a:d9:b3:
61:7d:0b:a9:6a:f5:6d:1f:d4:29:00:cf:57:43:05:4f:37:8c:
67:a5:7e:c6:44:0a:8a:39:12:a6:b6:74:3e:ef:af:a2:b1:5b:
14:77:1f:fb:05:ad:e3:a5:26:33:a4:84:3f:d2:79:96:05:9a:
fb:a5:08:2a:0d:d4:7d:17:14:2c:48:f2:44:61:2b:0f:07:f1:
6b:f1:cb:0b:d9:3d:81:7c:03:d3:90:6a:dc:09:0f:18:f2:a8:
26:3a:c5:29:f0:d6:ad:66:f1:1a:3d:c8:cd:00:06:57:13:34:
dc:a2:11:24:88:7b:ea:e4:80:0a:e9:6e:93:f5:8c:ab:75:4b:
90:8c:72:db:55:48:15:ce:e9:e6:07:5c:76:87:3f:57:79:ed:
5e:61:91:d5:74:ef:bd:43:43:a2:b5:15:08:80:28:90:cf:f2:
c7:58:57:f7:dd:8b:7a:7c:3b:c1:9b:5d:23:61:63:4b:0e:9c:
1e:6b:3e:02:d8:2d:c8:b0:99:e7:75:1d:ed:24:42:2c:f0:75:
b2:e5:54:9e:eb:d9:e8:91:20:e4:04:d8:cb:03:7d:34:eb:e4:
23:91:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:34 2025 by rpki-client