Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400FF196C0D011EFA83D0FA8762E951A.roa
File: 400FF196C0D011EFA83D0FA8762E951A.roa (raw, json)
Hash identifier: JYDbSyoyL/bmL2C8Cb6HFCpHaRf+JN1HIBN2YukTQmk=
Subject key identifier: EB:F4:12:2B:E3:CE:F4:0E:31:4C:72:25:7C:6D:93:41:8A:47:66:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400FF196C0D011EFA83D0FA8762E951A.roa
Signing time: Mon 23 Dec 2024 01:50:13 +0000
ROA not before: Mon 23 Dec 2024 01:50:10 +0000
ROA not after: Wed 10 Dec 2025 01:50:10 +0000
asID: 984
IP address blocks: 154.83.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73258 (0x11e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:50:10 2024 GMT
Not After : Dec 10 01:50:10 2025 GMT
Subject: CN=6768c1d5-6932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:52:c7:c3:88:a4:aa:e9:8c:40:e7:a8:5a:
b7:43:5d:e7:e3:7d:56:b7:4c:4e:8a:0b:c3:10:58:
49:44:98:6f:db:02:6a:69:c5:57:47:0c:6c:7e:82:
7a:01:c8:15:fc:26:b5:28:6a:00:ae:bf:43:a8:10:
bc:b0:85:2c:eb:fb:d2:ff:16:d7:b9:79:db:63:5d:
0e:47:da:13:da:33:d0:f6:f5:09:71:c9:c6:8a:2e:
51:2e:36:d1:21:f3:b6:bd:83:1b:39:68:a8:8a:5b:
b2:38:ba:9a:e8:e6:e3:90:eb:9e:ce:a1:90:56:53:
cb:1b:3a:8f:6f:d1:fd:df:67:07:2e:bd:74:f0:37:
d5:9d:b3:6f:68:97:9c:5d:7a:9f:de:85:7f:1e:ca:
0c:cc:e5:9b:ad:be:e2:78:db:75:06:06:40:04:fc:
38:92:3f:14:73:32:e3:af:6f:1b:e3:b7:e8:b7:5a:
67:83:83:4c:6d:b6:e8:0a:bf:ae:4e:12:24:92:b0:
44:b3:92:5a:70:0e:f5:8e:e4:52:14:59:52:77:f4:
64:96:72:41:a0:47:e3:92:7c:82:ba:28:3f:43:b2:
91:6a:e4:2a:68:4f:a0:fe:92:a2:25:cc:b7:8c:f0:
e1:6b:0f:66:29:0f:99:ba:b2:68:51:44:ab:5b:6f:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:12:2B:E3:CE:F4:0E:31:4C:72:25:7C:6D:93:41:8A:47:66:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/400FF196C0D011EFA83D0FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.80.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a1:59:d7:b8:a8:6f:a1:34:39:b7:9f:7b:63:88:5b:42:f9:
be:95:57:08:63:11:fe:5b:4b:07:21:fb:39:9b:99:f7:67:29:
22:26:97:2a:9a:93:66:8f:9a:95:d3:e0:47:2f:ec:67:f8:d5:
c6:11:37:e2:79:d1:e9:a3:bf:91:17:e5:9f:8f:46:f0:34:1b:
9e:fc:9f:46:58:5a:84:81:c5:58:3b:3d:bd:e8:db:dd:dc:af:
5f:e7:c9:c4:c8:31:e4:b0:3a:55:bb:39:97:4d:70:7c:70:84:
dd:0a:d2:a0:d2:8d:7a:dd:87:28:d3:61:2c:4d:73:37:8f:f7:
6b:06:3d:48:45:7c:a3:81:66:d5:ce:4a:19:76:00:d0:3b:53:
c4:13:9d:d5:2c:62:fd:9f:df:27:44:30:6b:43:ce:b1:7d:0b:
9c:b5:e5:5f:d3:f7:89:3e:d7:7c:99:b5:d1:69:b8:a4:c7:4b:
c2:44:d6:af:65:ba:3b:7c:44:79:e2:ae:80:44:80:40:54:bc:
b7:4b:5a:ba:fd:c3:bc:7a:36:d0:f4:ba:e5:fb:ed:83:c6:68:
57:de:d0:8b:12:3b:dc:00:22:d2:cf:a4:db:69:49:b4:f5:9d:
2e:2a:2e:8b:47:23:7b:21:ca:29:78:6c:c9:0c:64:6d:90:22:
94:87:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:03:01 2025 by rpki-client