Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CDCD78C0CE11EFB62D8D99762E951A.roa
File: 48CDCD78C0CE11EFB62D8D99762E951A.roa (raw, json)
Hash identifier: Nmu4TyMjUmB1vu85pQHJK0kkcWOFZk/PeUp6JVWx2Y0=
Subject key identifier: DA:C1:DC:D7:68:8F:96:21:49:69:27:A8:0B:54:B5:5F:CC:99:3D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CDCD78C0CE11EFB62D8D99762E951A.roa
Signing time: Mon 23 Dec 2024 01:36:09 +0000
ROA not before: Mon 23 Dec 2024 01:36:05 +0000
ROA not after: Wed 10 Dec 2025 01:36:05 +0000
asID: 984
IP address blocks: 154.83.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73252 (0x11e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:36:05 2024 GMT
Not After : Dec 10 01:36:05 2025 GMT
Subject: CN=6768be89-0bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:81:17:1d:66:ba:42:04:0c:0f:6e:cd:1f:
a2:63:6e:56:3f:47:23:f0:86:2d:27:81:a1:0b:2c:
a0:5b:a4:a3:e9:2d:d6:d6:16:c0:e0:36:d0:83:ee:
01:5e:36:d0:96:f7:01:50:a1:76:98:23:95:6b:60:
56:6d:64:52:55:38:64:dd:12:22:6f:85:d7:7b:be:
76:ec:7b:1a:9b:64:7e:f5:fa:04:20:48:29:80:98:
e7:4f:c8:bf:49:75:dd:1d:df:0c:3e:e7:21:06:92:
ab:bf:2f:2b:de:98:10:23:97:a0:47:28:33:a5:40:
44:30:29:83:d7:a7:7f:f2:bb:81:a3:d9:35:32:ea:
0c:4d:8b:bd:dc:e8:ec:dc:fc:1f:4c:09:29:b7:44:
18:06:02:88:e8:1c:9d:41:67:ab:d0:13:ea:f7:00:
3e:52:5c:a6:99:5c:08:7c:2b:c0:d2:f0:4e:00:9e:
77:35:03:93:df:7c:06:bf:17:1d:5f:ae:69:e4:fc:
58:cf:ee:ae:6f:18:04:77:22:32:9f:b2:db:ac:c7:
3a:1f:83:3c:da:c1:c6:df:80:33:cf:0f:4a:db:f9:
97:66:50:b9:b3:df:5b:b9:cc:f7:ed:fe:96:7f:bf:
46:75:8c:bf:5e:8c:3c:10:0c:e0:ce:2b:9f:70:16:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:DC:D7:68:8F:96:21:49:69:27:A8:0B:54:B5:5F:CC:99:3D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48CDCD78C0CE11EFB62D8D99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:22:03:54:e6:c9:32:c1:4e:aa:1a:a6:5c:21:79:d0:2e:af:
4f:3b:c5:0a:62:36:fe:10:18:b4:80:10:7d:66:b2:54:8f:34:
56:5d:2f:8b:2a:8f:23:46:95:c5:76:6e:53:6f:d9:9e:77:5e:
e5:19:32:10:5a:66:69:3b:a5:24:3a:d1:79:b1:6f:c1:86:86:
92:ce:29:a2:12:b6:50:35:4b:81:f3:89:08:ff:d1:11:0b:cb:
e7:58:55:3e:1c:89:3c:fe:ac:43:c6:b8:79:fc:16:d5:69:f6:
3d:6b:5f:7a:76:d8:d3:c9:b1:0b:52:97:68:72:06:30:ed:d2:
80:c3:65:7f:1a:8e:1d:81:d0:ca:15:d0:33:3d:9c:3b:2d:c2:
8d:5b:d5:be:95:99:51:24:b5:81:7a:6e:50:98:8c:69:af:2d:
3a:f0:9f:6e:de:01:95:b3:d1:ce:1c:39:75:30:a5:d3:f3:6a:
d1:80:28:e4:6a:27:ef:66:91:5e:9d:0b:d6:b7:e9:8a:60:e7:
32:d8:0c:78:bc:a1:de:94:fb:72:bf:a1:52:3b:9a:cd:ed:88:
e7:f9:7f:12:b5:ac:e2:cb:fe:f1:d1:24:2a:e0:e1:2d:1c:f6:
4b:9d:6c:d8:21:5a:0c:df:19:a7:13:24:11:32:47:d4:54:f9:
74:c1:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:46 2025 by rpki-client