Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EA7558BEDE11EFA6E2C96E762E951A.roa
File: 13EA7558BEDE11EFA6E2C96E762E951A.roa (raw, json)
Hash identifier: N5/qWIxgL/FJO7R1+EHJ9tbK0N3tW9qFCEJB6rTl7ps=
Subject key identifier: 9D:27:EA:AD:98:83:57:B2:91:1D:68:E6:2F:3D:90:A7:CD:60:A4:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EA7558BEDE11EFA6E2C96E762E951A.roa
Signing time: Fri 20 Dec 2024 14:24:10 +0000
ROA not before: Fri 20 Dec 2024 14:24:06 +0000
ROA not after: Wed 25 Jun 2025 14:24:06 +0000
asID: 8786
IP address blocks: 154.84.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73028 (0x11d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:24:06 2024 GMT
Not After : Jun 25 14:24:06 2025 GMT
Subject: CN=67657e0a-7a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:90:9e:e7:19:a5:97:32:16:cb:13:ca:fb:
20:c3:99:7d:8f:0d:21:ef:ae:d5:ef:4d:bf:65:22:
b4:fe:6b:54:59:64:e7:c7:57:2b:24:c5:c8:c2:ad:
e6:c6:dd:6d:1b:1a:de:71:a9:7d:9f:2d:32:c2:5a:
31:19:3a:9e:70:3b:ff:70:26:6b:26:2a:a1:e8:59:
30:ba:f3:06:9e:a2:60:f1:c3:59:27:32:e3:a5:2e:
06:68:7b:53:6f:35:99:9a:a5:21:26:ef:eb:42:96:
d2:79:a1:7a:74:7d:b6:c7:d7:c0:53:97:85:3b:d4:
51:c9:dc:5d:82:2c:c4:34:ed:66:63:fd:5a:99:dc:
1d:55:a8:86:7c:f1:9d:d0:43:bc:7e:4e:59:5e:ea:
21:a2:6d:45:d4:9a:cc:cc:e3:5e:2b:69:fc:39:89:
16:5e:7c:e3:ce:0a:14:87:f4:d9:80:6b:d7:53:cb:
d8:c8:77:57:be:10:d1:fd:8e:fb:c9:b0:35:a8:8c:
a8:43:3c:42:a3:f1:78:b9:9d:4b:24:24:b6:ca:6c:
eb:83:b3:ec:61:94:13:1b:55:56:80:94:ee:22:47:
db:d6:c5:08:c6:89:28:1c:39:48:88:69:3f:14:3e:
79:a8:08:eb:ff:ae:bd:50:8d:ce:31:e1:5f:e8:75:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:EA:AD:98:83:57:B2:91:1D:68:E6:2F:3D:90:A7:CD:60:A4:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EA7558BEDE11EFA6E2C96E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:44:1c:99:57:fa:48:29:52:84:c9:e0:84:c8:4b:a5:64:32:
5b:35:72:90:95:0a:7d:05:24:eb:9f:7d:d7:67:9a:13:1f:78:
9e:ee:f1:d1:31:e5:03:8e:f0:dd:06:db:ca:ce:97:e0:03:e6:
37:2b:d6:08:27:53:7c:ab:93:69:23:15:76:50:de:7a:d7:28:
0d:27:81:e5:ab:ff:68:c7:f7:35:80:83:76:a3:c5:fa:04:f8:
dc:e4:de:2e:67:d8:4a:df:05:8a:58:ee:c6:47:b3:2f:68:81:
c8:68:88:3b:61:2b:8d:c5:a2:9b:3d:dd:af:d6:bd:3d:32:6f:
f3:4b:d3:12:db:09:c4:c1:39:a4:d4:4c:6e:ca:d2:97:a5:84:
2c:08:73:e6:86:e3:d2:6b:4c:c5:08:c4:c4:fa:a4:6b:91:4f:
b9:90:f7:f8:4c:e2:4c:8d:ba:76:08:f0:61:7f:9c:6d:b5:d9:
a1:89:14:db:d7:94:90:1d:70:96:38:1d:5c:91:62:53:bc:d3:
b7:c0:94:81:28:2c:0d:4e:fc:0d:66:46:21:8d:ba:84:3e:c6:
82:db:d5:7a:e5:60:8c:55:a2:d0:08:ba:1c:96:85:40:92:73:
1d:b2:fb:3f:fb:0f:06:29:76:80:42:48:24:ff:42:be:1a:5d:
2b:eb:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:03 2025 by rpki-client