Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18FAEE8DC9111EF83EC0D93762E951A.roa
File: F18FAEE8DC9111EF83EC0D93762E951A.roa (raw, json)
Hash identifier: MCj9AV/Emvum8ZE5kLr7MQPjQaiJ5WnTDjAKairmcPI=
Subject key identifier: 4D:8F:AA:BD:2F:D7:23:D8:23:94:46:3A:BA:0B:9A:97:16:23:50:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18FAEE8DC9111EF83EC0D93762E951A.roa
Signing time: Mon 27 Jan 2025 09:34:45 +0000
ROA not before: Mon 27 Jan 2025 09:34:42 +0000
ROA not after: Sat 08 Feb 2025 09:34:42 +0000
asID: 5065
IP address blocks: 154.83.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84877 (0x14b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:34:42 2025 GMT
Not After : Feb 8 09:34:42 2025 GMT
Subject: CN=67975335-161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:c7:e6:e0:aa:14:f4:57:09:13:26:98:cc:
53:00:1e:87:40:f9:b5:21:4a:33:2e:46:7e:1b:67:
2a:77:2f:b3:b6:df:9c:6b:ab:b4:f5:22:20:18:c0:
fc:b0:c3:93:7b:d2:75:cb:2d:8f:fb:4c:76:9f:1f:
c3:4d:f7:a4:a5:b5:dc:22:b9:c5:11:5a:5b:eb:ab:
7e:51:53:a3:48:50:ee:71:b5:b1:d5:f9:73:58:37:
a2:a4:55:d4:c8:b3:ad:0a:d5:5f:ce:d3:76:9c:23:
bf:93:44:02:49:e6:f4:11:35:ec:5a:f9:59:4d:8f:
0d:49:7d:2d:a7:fb:5a:c7:cb:09:a4:34:64:18:5c:
e4:cc:65:29:9d:c4:b0:6a:4a:10:e1:bd:d4:eb:d4:
9f:b1:56:1c:6a:50:4c:3a:ca:5f:82:dc:86:d1:b3:
9e:29:d0:f3:3b:06:f4:22:44:24:cf:de:27:a3:a7:
1e:eb:0d:e3:80:c8:5c:3d:dd:91:0d:ca:b0:dc:51:
be:1b:08:4d:00:db:3a:ca:24:bb:62:73:63:73:1e:
ce:93:1b:5c:c3:08:12:9b:13:52:d0:f2:93:c5:5c:
ce:b0:82:e1:86:f9:9f:67:88:89:84:b6:13:97:d2:
e8:1b:6a:ad:fc:2b:65:b9:6e:ff:a3:89:09:d1:47:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:AA:BD:2F:D7:23:D8:23:94:46:3A:BA:0B:9A:97:16:23:50:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18FAEE8DC9111EF83EC0D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.202.0/24
Signature Algorithm: sha256WithRSAEncryption
04:47:c8:f9:20:d3:7e:36:b8:f4:d6:b5:1d:bc:82:d3:da:3e:
d2:e6:24:60:b5:1f:e9:da:e3:d8:a4:75:ce:27:bb:2d:d6:a0:
86:cc:a2:e5:1c:93:a9:90:1a:33:ca:f3:2f:65:f3:0c:0e:a4:
b0:a3:39:90:63:66:33:6d:57:60:a7:bb:45:34:81:e7:97:78:
80:02:49:0b:e0:89:99:92:99:9c:7a:8c:8d:46:f4:30:3b:5f:
9e:95:ae:0b:9a:f5:0e:3c:78:c3:55:5f:09:0c:25:4c:31:5b:
38:ee:75:b7:48:2b:5d:c4:dd:a9:08:12:3a:af:a2:4d:f2:a5:
de:b3:fa:d9:58:7e:65:45:61:94:5f:45:cc:e8:60:63:c8:ea:
26:cb:e4:42:6a:ad:ef:0a:e8:6c:ba:1a:e7:0c:f0:d1:90:fe:
dc:7d:b2:7f:fe:f6:87:45:76:7e:fd:03:f6:93:1e:c6:e0:a7:
6c:a2:d6:8c:1f:98:69:3b:d5:dd:b1:20:37:4e:04:dd:3d:2b:
e1:29:4f:b4:c2:bc:45:12:23:77:76:92:fb:e0:7d:ed:4f:6e:
b8:7e:26:e3:00:57:28:71:20:ec:82:a7:e7:f7:15:c2:90:bb:
23:e5:db:4c:25:c6:7f:b5:4c:82:c6:17:87:80:c4:99:bb:b5:
51:d2:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:38:13 2025 by rpki-client