Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3EF7DEC0CE11EF8AA6E499762E951A.roa
File: 6F3EF7DEC0CE11EF8AA6E499762E951A.roa (raw, json)
Hash identifier: 3Q4bShLaEEvr9Q+qry5cJn8V+FkuTGpK+yNCUQCmUJo=
Subject key identifier: 02:6B:CE:97:30:3D:FD:98:66:D5:50:F0:B8:D0:C5:0F:FC:1F:64:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3EF7DEC0CE11EF8AA6E499762E951A.roa
Signing time: Mon 23 Dec 2024 01:37:13 +0000
ROA not before: Mon 23 Dec 2024 01:37:10 +0000
ROA not after: Wed 10 Dec 2025 01:37:10 +0000
asID: 984
IP address blocks: 154.83.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73254 (0x11e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:37:10 2024 GMT
Not After : Dec 10 01:37:10 2025 GMT
Subject: CN=6768bec9-39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:ea:7f:dd:62:5c:4c:61:d7:18:7b:ad:93:
00:db:ea:2c:f4:35:00:ef:1b:fe:84:c2:71:be:5f:
b8:b5:40:59:9d:e1:50:26:af:82:d2:58:dd:d7:e2:
c7:f9:65:cb:db:f3:22:f5:b2:9e:8f:92:71:f2:ae:
e0:c2:7f:d0:ed:b3:dc:75:ef:5e:b4:87:93:2b:f4:
54:d3:42:e0:c8:51:bc:65:62:fd:f7:cd:10:9b:a8:
54:65:44:d7:5b:8f:4f:a5:b7:e1:2e:28:10:e0:09:
8f:7a:4e:39:15:9e:a0:f0:a7:05:d8:9d:1d:24:bb:
d8:70:81:40:37:a6:64:b4:70:3c:ef:4a:57:18:12:
59:f2:b2:52:d0:9c:24:64:d7:88:8c:45:95:d0:d5:
02:6b:6b:e3:6f:ee:86:d6:e6:ef:07:56:2d:38:fa:
c5:be:36:24:f5:9c:ab:38:95:bf:85:04:e6:a9:ef:
68:30:a5:2b:d2:b1:15:1a:28:e5:58:4c:1b:e8:15:
a4:4e:e7:5c:4d:00:90:33:b7:e2:e2:c9:21:e2:61:
a4:c5:55:c9:b3:fe:de:f5:ee:ad:d8:eb:56:db:cf:
fc:43:df:e2:53:e5:f0:11:e5:20:9a:6b:e0:a7:5b:
b2:cb:26:0f:7f:13:d7:99:7c:6f:a6:cb:40:e9:37:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:CE:97:30:3D:FD:98:66:D5:50:F0:B8:D0:C5:0F:FC:1F:64:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3EF7DEC0CE11EF8AA6E499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.77.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f5:e4:a3:96:88:ee:35:08:94:8f:22:ca:a0:f0:63:7e:9c:
9c:7e:b2:77:9b:6b:2a:9d:3e:7c:99:50:d5:8e:82:f1:fe:84:
d1:28:81:ba:d3:e5:83:af:25:a2:01:f8:df:23:4a:0b:7a:0f:
b6:82:4b:2e:7c:dd:00:f7:df:67:a0:49:63:f1:92:5d:56:a6:
c4:f7:ca:20:90:3c:72:57:f0:72:1e:79:73:5d:81:18:c6:59:
97:b0:37:91:ea:4f:42:61:ff:59:57:a9:64:06:cb:b9:10:40:
88:a4:2d:18:0f:16:67:da:e6:e3:fd:0e:8d:bc:ab:67:e8:3a:
50:ff:8f:60:0e:55:76:53:72:02:ae:db:c0:52:0a:92:6b:d5:
88:f1:c1:6a:3f:ab:84:7f:1b:bf:81:47:05:9e:fe:90:51:3c:
d8:db:71:18:be:bb:21:3e:ce:c9:6a:b6:91:c9:33:67:fd:01:
35:59:e2:0a:d1:92:90:a2:c5:16:a9:a0:c6:bb:e8:b5:8a:27:
8f:a3:ad:60:a5:df:9e:90:c2:eb:1b:ee:b1:5e:f1:1f:c4:f3:
c0:2a:cb:60:ad:04:c7:90:40:86:6c:11:c4:80:e1:a8:d1:e1:
3c:6e:74:28:ae:d6:23:b8:84:6c:d9:c2:21:08:5a:e7:c6:83:
09:37:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:38 2025 by rpki-client