Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077BBF06C5DD11EF9DB6004B762E951A.roa
File: 077BBF06C5DD11EF9DB6004B762E951A.roa (raw, json)
Hash identifier: fpEKlNKFu1r5C+GnKJRFCWiHEhIjmCfcsNeSFRJwCSY=
Subject key identifier: 22:2C:68:8D:54:C7:54:24:89:A2:D5:91:6F:B1:BA:3D:5F:A3:3F:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077BBF06C5DD11EF9DB6004B762E951A.roa
Signing time: Sun 29 Dec 2024 12:04:18 +0000
ROA not before: Sun 29 Dec 2024 12:04:14 +0000
ROA not after: Sun 12 Dec 2027 12:04:14 +0000
asID: 17561
IP address blocks: 154.210.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77098 (0x12d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:04:14 2024 GMT
Not After : Dec 12 12:04:14 2027 GMT
Subject: CN=67713ac1-dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:e6:07:29:3e:36:5b:f6:d5:3b:1e:ce:1d:
51:5d:f9:83:4f:18:95:77:31:e3:b4:22:6e:d3:62:
e5:82:3a:bd:c9:f1:4b:25:2d:10:9d:72:db:1a:a2:
35:d7:e1:1a:2b:0e:3a:6c:a2:a9:40:d2:c9:66:4e:
92:e6:5b:31:20:c2:b9:65:fd:2e:97:2d:a3:f4:ae:
fe:86:f8:53:d4:10:05:75:dc:23:22:40:8f:a2:6d:
86:6d:14:c2:5d:66:3f:78:e7:b4:bb:45:70:ce:17:
14:a9:43:ba:02:dc:e0:ce:f8:f5:ab:35:99:29:0f:
d8:84:56:c6:89:2d:95:db:fb:c0:d6:a3:42:2b:36:
f9:8d:6e:bf:ad:6d:29:59:3a:57:06:ce:f3:53:d6:
10:0a:41:fe:4a:e5:47:18:bb:e9:4a:8b:4d:42:84:
59:15:4a:17:81:25:bc:ef:c5:b7:5c:39:5d:5e:b1:
49:51:ea:47:6a:a3:6c:01:d1:45:59:37:db:ce:80:
9f:15:41:ba:89:3d:de:78:98:bc:52:f8:6b:e3:34:
10:67:70:74:33:f8:f6:a7:79:07:40:12:eb:89:2f:
4b:d1:99:5c:8a:aa:63:ed:46:58:54:7a:98:75:4c:
f2:19:b8:1d:94:99:0f:93:79:5a:51:72:d9:5a:00:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:68:8D:54:C7:54:24:89:A2:D5:91:6F:B1:BA:3D:5F:A3:3F:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077BBF06C5DD11EF9DB6004B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:be:9f:78:3a:d1:26:08:b5:a2:f9:8d:1e:e2:d3:f2:a8:29:
65:b1:40:46:8e:c1:30:84:d6:63:62:80:f8:da:cc:77:bb:59:
77:ac:bf:af:43:64:f2:2b:6b:98:c6:d3:5e:b3:d9:66:d1:86:
83:ce:8c:75:a0:5b:01:a4:a5:9f:8a:b8:db:53:3c:4b:18:5a:
7d:4b:78:80:64:e3:0c:91:8b:c4:ba:e7:a3:93:5f:c5:a4:aa:
25:c7:84:70:b3:4b:91:c1:fe:32:af:ab:95:6f:e3:9b:18:2d:
53:45:d9:32:81:ff:52:a7:90:60:82:f1:88:26:3a:87:28:2f:
8a:75:75:45:5b:e5:10:df:b4:18:0d:84:f6:ad:8a:a1:eb:2f:
55:ac:0c:8b:28:1c:94:57:63:14:b9:4a:da:87:a7:df:87:d8:
f8:89:85:62:b2:68:c4:cb:7a:9e:5d:29:e9:be:0f:1c:28:4e:
a8:41:98:ef:46:e0:43:58:a7:b3:40:1b:01:78:38:7f:21:1e:
8e:c4:79:34:c1:9b:74:63:de:79:eb:b1:96:c2:5b:98:15:9b:
b2:18:e9:72:ef:d8:8a:db:bd:8a:38:fe:5d:14:4e:ed:c1:f7:
0a:b4:86:34:e1:91:c9:e3:0b:db:8d:0b:6d:3e:ef:01:c0:5e:
7f:36:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:10 2025 by rpki-client