Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D9B3EFAF35C11EF834438AB762E951A.roa
File: 0D9B3EFAF35C11EF834438AB762E951A.roa (raw, json)
Hash identifier: Z6XPc75HouSMkBk1R6zCwcjQG7g1fPQEMFSx5nKia6M=
Subject key identifier: 1D:FE:4F:E5:5D:BF:7C:CE:21:10:C2:16:9A:E9:2A:5C:9E:19:C6:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D9B3EFAF35C11EF834438AB762E951A.roa
Signing time: Tue 25 Feb 2025 09:36:56 +0000
ROA not before: Tue 25 Feb 2025 09:36:52 +0000
ROA not after: Sat 19 Feb 2028 09:36:52 +0000
asID: 17561
IP address blocks: 154.83.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89612 (0x15e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:36:52 2025 GMT
Not After : Feb 19 09:36:52 2028 GMT
Subject: CN=67bd8f38-dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:67:7f:b4:d1:b4:80:b6:77:0b:e5:b3:28:
fc:6c:7a:9c:a4:ad:cd:c1:9a:44:1e:6f:1d:e5:4a:
9a:da:50:f4:4d:2a:de:e6:a6:dc:ef:6b:4b:62:67:
83:36:d5:08:c3:e9:8c:61:79:31:a2:2b:0e:06:eb:
5d:3d:b1:83:cd:22:b2:87:60:eb:14:5e:7c:03:b4:
9d:bc:0f:36:2b:9c:28:d3:fd:0b:3b:8c:85:5a:bf:
43:3d:22:de:b3:7e:70:75:0b:c0:f6:c5:0f:e4:4f:
c6:4f:91:6c:3d:c6:82:b8:2d:4a:86:3d:1e:db:dc:
35:b9:bd:1b:b4:28:3a:00:9c:7b:4e:01:05:d9:c1:
0d:f4:06:12:05:34:65:b3:3e:26:01:ca:a1:bc:38:
41:ed:2a:5a:cf:dd:f0:a5:70:92:09:ef:d2:02:6d:
b0:94:6d:18:93:2d:ba:b4:ba:9c:d0:a9:a7:be:97:
e1:3d:55:cf:f3:2e:c5:cb:35:b8:d1:4d:23:75:67:
de:e8:4e:eb:03:7d:57:ad:74:15:69:0d:30:81:19:
ae:c7:21:2c:4b:9a:c6:dd:d4:02:bc:3e:71:e5:42:
2e:d7:fc:75:14:d8:28:98:c2:ee:a4:67:7d:21:88:
7a:39:88:5f:ca:f5:dc:b5:98:97:0d:a0:ba:bc:cb:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:4F:E5:5D:BF:7C:CE:21:10:C2:16:9A:E9:2A:5C:9E:19:C6:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D9B3EFAF35C11EF834438AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5a:3c:12:6f:16:d3:36:65:dd:26:71:a8:68:d4:af:fa:58:
0d:f4:bf:cc:5c:38:93:87:e6:c9:08:0d:58:87:e4:57:bb:32:
4f:ee:53:5e:63:91:aa:13:7b:eb:1e:67:ca:a9:19:1c:bf:51:
3c:7e:00:58:1d:6b:2d:7e:a0:f4:b0:6e:13:b9:b1:3f:92:8d:
3c:31:d7:17:69:67:76:c6:c4:3d:95:0f:1c:9f:4a:bc:80:17:
e2:66:f4:63:83:30:49:19:3a:ce:c2:65:dc:63:de:7f:27:44:
90:f0:75:cc:3f:53:16:d4:db:5a:77:60:f5:2b:09:83:b4:10:
73:10:6f:0d:46:5a:a9:7e:16:87:56:91:d9:3e:e7:91:eb:4c:
88:c2:83:9b:e4:83:fc:a9:de:12:ea:15:a4:9f:d3:af:c7:2a:
2d:a4:8c:8a:55:02:df:7c:6d:e5:74:ef:a9:84:e3:a8:64:fb:
9f:c2:b0:af:f3:ba:c7:08:da:44:8c:3a:2c:d8:fb:85:e4:b7:
f4:0a:63:ed:33:d5:b9:8f:e3:66:ad:25:2c:02:14:5a:ea:e0:
cd:0c:80:3f:54:4b:a5:e4:63:c9:4e:c3:57:81:b3:fa:af:65:
d7:90:57:d3:c2:81:39:c2:59:40:c2:11:c6:4a:1d:67:c4:4f:
d9:ca:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:11:20 2025 by rpki-client