Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EAC27EC0D211EF9D7836B6762E951A.roa
File: 31EAC27EC0D211EF9D7836B6762E951A.roa (raw, json)
Hash identifier: 4KPEjr+0B7xPmSveGLBLjIIARnqeRYwhav8iXWN/HEk=
Subject key identifier: 27:B2:A3:15:87:3A:63:C9:38:F0:6D:1D:AB:56:1F:67:A0:1C:1F:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EAC27EC0D211EF9D7836B6762E951A.roa
Signing time: Mon 23 Dec 2024 02:04:09 +0000
ROA not before: Mon 23 Dec 2024 02:04:05 +0000
ROA not after: Wed 10 Dec 2025 02:04:05 +0000
asID: 984
IP address blocks: 154.83.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73284 (0x11e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:04:05 2024 GMT
Not After : Dec 10 02:04:05 2025 GMT
Subject: CN=6768c518-ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:04:71:2a:2a:3f:d7:4e:b1:f6:3f:0f:cb:
7c:41:fb:48:d1:7e:58:d3:f5:b6:6a:32:b2:a9:9e:
a4:c5:63:c2:99:0d:10:5f:4a:8a:a4:26:da:d1:ff:
69:5f:b0:d0:30:b5:17:ab:9b:12:17:df:a7:d6:06:
62:a7:58:d3:a3:d0:b7:0a:99:48:75:a5:9e:62:e9:
ec:e3:ce:8a:a0:c3:94:49:50:8b:a2:51:53:fc:64:
7a:cb:e3:ef:9d:29:17:9c:86:73:b9:11:01:8e:36:
ee:38:85:52:2b:ad:bd:b8:a5:85:94:ef:be:4c:61:
3b:a4:6d:ae:6e:38:e0:88:95:82:28:53:46:73:a6:
47:61:89:5d:6d:5f:a0:9d:c0:39:bc:74:c2:35:ce:
c8:4d:7e:3e:12:d8:63:15:54:3b:3d:87:3e:8e:dd:
bf:00:7a:2c:32:f7:5f:b5:b3:0a:57:46:2f:45:2d:
6b:aa:40:cc:f3:ff:85:42:52:1c:4a:59:b9:bf:fb:
fc:19:3b:45:ed:86:b6:de:3b:9f:88:34:7a:0c:b5:
9d:91:4f:aa:31:e8:21:45:01:b6:d7:22:ce:46:ec:
35:85:42:0d:82:8b:dc:5b:f6:e2:b7:cd:70:33:ef:
96:c8:0a:12:a6:6f:83:31:93:0f:57:a1:d9:24:4b:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B2:A3:15:87:3A:63:C9:38:F0:6D:1D:AB:56:1F:67:A0:1C:1F:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31EAC27EC0D211EF9D7836B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:92:a0:a1:5e:47:3f:61:09:a0:f0:44:c9:13:17:7e:ab:b1:
c8:93:31:ef:15:db:ce:9f:03:58:1b:1b:94:47:4a:dc:f8:d6:
74:b9:56:df:12:56:58:81:46:61:c5:12:0b:e8:9e:af:45:0e:
0c:e7:c1:33:04:4d:3b:10:82:eb:f7:6a:d5:51:07:c2:ce:b0:
66:37:bc:5f:96:04:c5:c6:ea:0e:26:1e:20:c0:e7:ca:8f:45:
dd:ef:11:81:d9:76:38:1c:fd:05:ad:e6:42:55:dc:97:d8:ba:
0b:ca:94:89:fa:04:16:5d:4f:9f:3b:18:84:ee:bf:67:e4:52:
8f:df:b3:6f:53:cb:3a:94:28:9a:8a:da:6c:b4:d6:19:28:59:
d5:0e:49:0c:36:7a:08:16:8a:8a:a4:24:de:7d:06:55:bb:2e:
8f:b6:da:97:05:3e:02:22:c4:fc:6b:b5:85:9f:21:0a:f3:a5:
38:6a:ac:59:75:e1:00:68:5a:99:4d:b3:95:60:b2:1d:05:6e:
6d:aa:00:d4:a9:cc:77:c2:6a:f8:18:cb:70:10:78:36:07:84:
92:80:99:66:ee:07:dc:f6:09:d0:45:b2:6c:3d:b7:04:74:ac:
b9:f8:81:cf:b2:26:0d:55:ae:8d:58:8e:28:c6:e7:57:49:9f:
a5:95:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:46 2025 by rpki-client