Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84BAA834070911F08A97D0B9762E951A.roa
File: 84BAA834070911F08A97D0B9762E951A.roa (raw, json)
Hash identifier: vS3+CpIX8JttTH7tDxDTaYg3lnVrf2JnZEL93gerBKk=
Subject key identifier: ED:FF:54:A2:6F:9D:87:05:E4:EE:17:0D:23:B0:5F:9E:A6:70:CF:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017596
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84BAA834070911F08A97D0B9762E951A.roa
Signing time: Sat 22 Mar 2025 10:36:31 +0000
ROA not before: Sat 22 Mar 2025 10:36:27 +0000
ROA not after: Sun 30 Mar 2025 10:36:27 +0000
asID: 142403
IP address blocks: 154.83.13.0/24 maxlen: 24
154.83.14.0/24 maxlen: 24
154.83.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95638 (0x17596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 10:36:27 2025 GMT
Not After : Mar 30 10:36:27 2025 GMT
Subject: CN=67de92af-7ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:f6:85:96:41:0a:fd:64:ff:81:f3:e5:f5:
35:ea:d1:16:47:4c:e1:03:25:3c:3d:fe:67:c1:81:
08:00:5c:5c:53:74:80:d7:e3:fa:d8:79:68:b4:30:
b4:ea:66:6f:c2:6d:af:5c:93:84:a4:99:c0:3a:28:
f0:0b:22:f2:1d:60:a8:3f:13:15:35:f7:44:3d:22:
c7:54:51:3b:44:4a:6d:d6:99:ad:a5:7f:70:55:82:
6a:f5:32:12:c6:31:21:fb:c2:8f:2a:34:85:32:0d:
b9:e4:4b:ac:31:c0:8b:c4:ac:55:e4:a9:65:c3:0b:
98:fe:6f:10:07:56:5e:40:67:7f:6d:03:c2:cc:fb:
e7:bd:7b:e0:ac:f9:22:ff:41:b5:cd:f0:2d:a9:b2:
af:3e:20:b0:93:62:bb:03:94:70:7a:5b:bc:53:f2:
88:a5:bd:3f:e5:b8:2b:36:2e:43:15:bd:a9:7a:75:
92:76:5b:75:17:63:20:a1:b7:0d:80:0d:8b:d6:22:
f8:16:24:f6:3c:cf:00:25:94:b7:75:73:72:33:76:
97:d5:81:3f:32:74:e2:f5:08:e9:77:04:03:ad:a2:
64:98:c4:4f:e6:be:17:da:44:30:7f:33:1f:30:a8:
23:b1:c2:87:ac:d3:33:bd:94:26:fe:98:2c:08:0d:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:54:A2:6F:9D:87:05:E4:EE:17:0D:23:B0:5F:9E:A6:70:CF:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84BAA834070911F08A97D0B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.13.0-154.83.15.255
Signature Algorithm: sha256WithRSAEncryption
2a:be:84:65:5c:b9:e4:19:ad:0b:9f:76:ee:91:83:59:70:75:
c0:0b:bf:5c:6b:a3:7b:62:f3:98:64:68:ff:d7:9b:8e:0b:e2:
49:17:29:7c:c9:fb:be:2d:9e:16:18:1d:ba:a6:62:89:ca:7d:
b7:95:15:3c:a5:45:df:69:2e:b8:1f:59:ee:05:07:e8:cb:8f:
d9:ec:c4:12:ba:48:1d:02:49:5a:97:ea:02:fa:c4:db:a3:d0:
47:8b:fb:52:cf:b8:83:b6:36:0b:e7:52:85:0a:f7:b1:b4:8e:
64:04:4e:9a:ef:d0:52:b4:0f:ba:5c:61:3a:60:c3:b3:4f:31:
51:3b:d0:53:b0:c7:e2:1a:34:e4:b4:b3:70:2a:08:c4:e1:4f:
1a:c0:6b:18:eb:d2:6c:04:da:f5:c7:77:5b:64:7e:e7:c5:f0:
ff:ee:dd:98:f1:ad:ce:a4:60:18:07:55:67:20:27:b1:e8:27:
e4:cf:0c:b0:2c:46:a7:00:70:86:db:42:b9:2a:25:a3:05:61:
c9:58:c8:5d:3b:5d:d8:b8:1e:d5:c4:62:2c:0f:6a:44:8e:3c:
07:a4:8e:fd:7b:ef:aa:44:ce:4a:29:d4:87:d3:ab:62:31:e9:
df:d3:80:2f:dd:db:1b:c5:b6:3d:b6:88:27:08:2b:b3:81:43:
98:80:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:31 2025 by rpki-client