Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57FE1100C0D211EFACE367B8762E951A.roa
File: 57FE1100C0D211EFACE367B8762E951A.roa (raw, json)
Hash identifier: wtcIIZ9eJUyFdipto9tWhXYzCRiaVwX01s/YHKy8tpk=
Subject key identifier: D6:10:50:31:FC:7C:4D:1A:F4:00:CA:98:FA:AE:B8:1F:EC:DE:2A:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57FE1100C0D211EFACE367B8762E951A.roa
Signing time: Mon 23 Dec 2024 02:05:12 +0000
ROA not before: Mon 23 Dec 2024 02:05:09 +0000
ROA not after: Wed 10 Dec 2025 02:05:09 +0000
asID: 984
IP address blocks: 154.83.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73286 (0x11e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:05:09 2024 GMT
Not After : Dec 10 02:05:09 2025 GMT
Subject: CN=6768c558-fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:f5:f6:3c:f9:ad:26:7d:a5:35:df:3b:84:
20:53:ec:8b:86:4e:32:fe:3c:80:0e:33:c8:80:f4:
9e:bb:90:46:cb:15:95:04:5b:9d:c8:07:d1:c0:6f:
b7:66:f1:3f:ae:85:83:97:46:c0:9a:8b:94:74:86:
77:05:0a:83:83:f7:6a:ee:bc:bc:3f:02:35:85:58:
e5:a3:db:29:87:f9:64:a1:9e:bf:eb:f0:c2:5f:2b:
81:46:31:7b:75:77:52:33:2a:26:ed:6a:87:96:83:
8a:7d:0e:ca:2b:e1:28:81:d6:71:a0:09:77:dc:9d:
01:74:4d:0d:0d:72:13:50:99:b2:21:73:ef:3d:98:
3d:0e:42:f3:b8:73:86:be:d8:35:a5:3e:81:d8:d7:
ec:ff:bc:65:5e:83:03:7c:8c:3b:94:b5:4e:44:26:
51:d0:e2:fc:ee:47:d6:a3:a2:0f:05:da:a3:2a:89:
c2:e0:a8:ca:23:7e:7f:7e:58:e5:a2:58:28:0b:1c:
fe:c5:2d:1c:15:5e:ec:53:5f:38:e0:34:29:46:a0:
d2:38:b3:f0:a6:9d:8a:f7:b7:12:4d:26:29:82:0f:
f5:82:e3:c7:3e:37:54:90:18:94:b4:fa:38:e6:31:
3c:f4:47:90:8c:c0:93:dd:cd:90:cf:71:a0:5e:15:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:50:31:FC:7C:4D:1A:F4:00:CA:98:FA:AE:B8:1F:EC:DE:2A:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57FE1100C0D211EFACE367B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.111.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:a0:82:9c:1f:5d:15:d2:6e:9b:a9:ef:b5:47:83:5b:21:
f7:f0:9b:7b:ac:00:78:94:b2:05:df:8e:cb:3f:09:28:40:76:
97:98:d2:cf:a9:69:68:c7:c5:c4:71:f8:51:33:76:39:03:9e:
b8:a4:26:ce:73:0e:ce:0d:16:83:a1:18:ae:e2:35:73:a6:a2:
35:e5:7d:78:2f:ab:ee:69:78:dd:fb:a8:6f:fb:a1:1d:f1:59:
10:cb:ac:6f:29:e5:1c:d1:67:59:1e:96:a9:60:24:7f:09:4c:
6d:21:b4:9a:e1:5d:84:3f:82:93:6a:a1:e1:5e:58:17:96:55:
50:28:99:5b:e4:39:db:7a:81:19:be:40:b0:59:89:dc:f7:6f:
4d:54:04:1e:c0:5f:d0:66:d8:12:b3:9f:31:72:45:49:0a:09:
8b:c5:25:6c:80:98:bf:5d:ee:f1:66:24:98:7c:e3:06:59:70:
95:e2:c8:ec:79:a6:2c:3f:1f:60:6c:f1:d3:92:89:d2:c3:54:
bc:a0:72:14:c8:b4:f6:5d:4b:31:5b:80:62:8e:76:59:28:8a:
52:9a:ec:e9:03:63:28:e5:4b:70:81:aa:00:66:4b:f5:7a:5f:
22:c0:d3:94:1f:5d:0c:b8:e0:d1:a1:86:de:87:02:cf:24:fc:
4b:44:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client