Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC64B88CDC9011EF84F40F8E762E951A.roa
File: FC64B88CDC9011EF84F40F8E762E951A.roa (raw, json)
Hash identifier: c3+vh0lQCgnOiHICN9XNA5it+qmjkBF+dGo8P16ICnU=
Subject key identifier: FD:02:9D:36:74:68:45:6E:3D:1F:3F:0C:76:F7:59:2A:DB:43:69:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC64B88CDC9011EF84F40F8E762E951A.roa
Signing time: Mon 27 Jan 2025 09:27:54 +0000
ROA not before: Mon 27 Jan 2025 09:27:50 +0000
ROA not after: Sat 08 Feb 2025 09:27:50 +0000
asID: 5065
IP address blocks: 154.83.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84871 (0x14b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:27:50 2025 GMT
Not After : Feb 8 09:27:50 2025 GMT
Subject: CN=6797519a-6372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:08:14:e8:c7:70:ac:17:f1:68:0b:6c:35:
59:bf:68:9a:d9:52:13:33:c5:7a:0e:cd:e1:eb:71:
f3:3c:d4:b3:6f:0f:1b:00:7b:8e:c8:8a:26:68:00:
3c:39:a9:e5:bb:12:74:37:02:a3:4b:b9:42:16:3d:
35:de:e0:01:18:55:fb:1d:2e:6b:6d:b5:c9:58:f7:
0c:0b:33:41:43:c2:33:26:13:83:3d:19:f5:52:67:
b6:00:8e:fb:51:70:6d:68:64:c1:fe:e9:80:a2:3b:
61:93:62:b5:8a:49:73:51:1f:cd:ee:5d:ed:b3:1b:
d1:5e:e9:c5:7a:95:ff:2a:26:2f:f2:ed:89:e1:d7:
8a:ef:44:ab:44:71:9e:47:57:b9:08:4c:fc:6d:87:
b2:97:d8:2e:01:50:d4:8f:3c:bf:58:32:77:8c:4d:
2b:6d:f5:64:4c:35:98:b2:92:2d:cb:c6:ef:f6:36:
3c:ba:35:a9:70:5f:74:69:e6:4a:8a:5d:72:40:d9:
e1:41:57:83:69:c3:f6:82:74:3c:c1:33:3e:5c:fc:
d1:20:d6:f6:26:29:d3:d8:cb:58:f0:03:c3:d2:7e:
eb:93:2b:3d:a6:4e:a2:43:d3:ea:06:06:4a:6c:3c:
f1:18:90:40:43:23:39:13:fb:67:e9:8d:71:75:d7:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:9D:36:74:68:45:6E:3D:1F:3F:0C:76:F7:59:2A:DB:43:69:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC64B88CDC9011EF84F40F8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8d:fb:ea:c6:cb:6b:0f:2a:4a:b7:98:13:b2:5b:42:f1:2b:
8f:0d:f8:ec:6b:99:1f:a4:5d:81:06:9b:08:e2:c3:e9:59:67:
3f:d8:c7:26:43:e6:ad:50:3d:6e:d3:9a:5e:62:07:3b:93:54:
95:76:2b:b4:b3:9a:23:6c:a1:38:3c:a3:b5:6e:25:96:04:d6:
2a:f7:aa:14:27:6d:29:b9:db:f0:2d:83:ac:c3:88:9c:4a:15:
2a:c4:3f:bd:4d:8b:eb:31:0a:8f:0c:96:75:88:4b:08:fd:30:
93:14:e4:66:fb:de:65:3c:44:74:66:95:8c:45:a4:ea:bb:9c:
51:fa:3e:e7:7c:39:a6:84:27:48:86:bc:77:6f:34:c2:b1:c9:
b4:aa:a4:d5:c9:ca:70:2a:72:b3:2d:8b:d8:a7:07:92:e2:cc:
e9:f2:7d:87:42:d6:aa:d2:fe:9d:9d:74:9e:46:f7:b0:cc:53:
50:a5:db:40:c3:29:b7:35:8f:7f:23:62:64:ea:ad:88:e2:9e:
1f:f1:1d:00:fc:61:d6:72:20:71:41:78:d0:38:a5:8a:18:60:
a8:ad:41:ba:a8:1a:be:bc:52:f6:38:34:c1:15:f5:a3:d1:08:
40:36:95:b5:5c:21:02:a8:d1:d4:67:48:a2:ad:74:12:4c:7e:
9d:0d:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:26 2025 by rpki-client