Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A83D758C0CC11EF943FDE8A762E951A.roa
File: 5A83D758C0CC11EF943FDE8A762E951A.roa (raw, json)
Hash identifier: a6pV8YOgmCNil8GH+1fsfFowD7GxoAJ4NNTx5QYjLrE=
Subject key identifier: CA:86:4F:3C:6D:0B:DD:DB:47:6B:E9:95:22:56:D6:BE:CC:BF:57:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A83D758C0CC11EF943FDE8A762E951A.roa
Signing time: Mon 23 Dec 2024 01:22:20 +0000
ROA not before: Mon 23 Dec 2024 01:22:16 +0000
ROA not after: Wed 10 Dec 2025 01:22:16 +0000
asID: 984
IP address blocks: 154.82.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73226 (0x11e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:22:16 2024 GMT
Not After : Dec 10 01:22:16 2025 GMT
Subject: CN=6768bb4c-aadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:2c:3d:46:cf:26:b4:83:17:5b:8f:d9:7d:
f4:c6:fd:af:e7:b5:8b:0e:93:84:58:f4:6f:9b:d8:
3c:56:20:78:cd:15:53:8a:c1:93:23:72:78:04:c7:
df:48:f4:c9:9e:fb:70:a1:2b:38:16:89:4b:23:d6:
7e:61:89:72:fa:77:af:3c:a2:84:ef:4a:a9:2a:65:
e1:a7:fb:6e:6a:8d:a3:cc:45:a5:ed:5e:e2:02:89:
16:f1:26:63:7e:ee:6a:b9:1f:de:93:9d:52:e0:d4:
5b:e5:68:04:f2:29:7e:e0:b3:b3:56:52:af:32:32:
c4:0c:30:88:99:c1:9d:ad:ad:c3:85:3b:d7:08:4a:
d4:42:d1:16:c3:31:98:79:30:0c:c7:37:7a:65:5a:
59:df:d9:85:17:a1:ed:16:39:af:ec:27:3c:6f:78:
ce:c5:44:e2:d8:c3:01:c2:e4:a4:01:47:1e:8d:73:
23:11:1a:e4:9b:31:54:7a:03:8d:4c:fa:4b:f8:ba:
78:f3:aa:cc:7e:45:85:dc:be:07:b6:85:b6:37:ae:
45:ef:a9:5c:a4:6d:b1:db:e0:46:b7:cf:46:1e:a7:
0b:5b:4b:eb:21:27:c7:1a:db:7d:aa:28:3c:42:0f:
6b:d6:23:b9:26:9c:7a:e4:66:44:2d:18:d8:66:8d:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:4F:3C:6D:0B:DD:DB:47:6B:E9:95:22:56:D6:BE:CC:BF:57:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A83D758C0CC11EF943FDE8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f9:6b:aa:cd:2b:36:19:73:b0:d3:fd:2c:f5:cf:90:77:4d:
d8:28:02:77:39:40:3f:99:6f:7b:4d:76:da:58:b8:a3:06:2c:
19:13:d6:18:68:1e:99:b5:9a:56:3b:81:76:3a:84:dd:76:45:
cd:96:77:c2:1f:1d:62:14:c6:84:5f:2c:a0:f4:b1:91:32:fd:
52:4a:40:a1:69:33:07:14:86:06:78:33:e9:20:0b:e4:d3:2c:
14:78:58:8e:f7:b6:44:af:5d:fb:d2:02:d5:b3:e7:31:f5:54:
49:0c:b3:a8:05:3a:d4:5b:a6:02:05:5b:38:0f:f1:6f:80:f3:
8e:41:04:22:9d:66:68:74:f3:67:c5:97:50:53:00:04:d8:32:
9c:7e:b7:6e:86:51:c9:3b:e0:f5:7d:ca:bb:47:7a:00:67:5b:
d8:c3:93:df:87:9a:4a:ef:c0:f2:0b:77:2e:a6:1d:37:fb:b1:
c4:d0:3a:7f:2e:f0:1c:ab:bd:45:d4:45:88:3b:eb:fa:66:08:
26:09:75:e0:66:38:23:df:3c:f9:9a:e6:4b:06:cd:8c:0c:ac:
e9:4f:69:2b:bf:54:7c:58:c7:ef:07:31:71:9a:0f:ae:04:b5:
06:2b:25:19:f6:19:ed:1b:28:e6:bb:47:a0:27:40:cc:8b:6f:
24:82:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:16 2025 by rpki-client