Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759CAD8AF35D11EF895053B4762E951A.roa
File: 759CAD8AF35D11EF895053B4762E951A.roa (raw, json)
Hash identifier: Lg+8IfPSFUizZMEMc05oXjrbHrs6jpmDT1BsRRnoeg4=
Subject key identifier: 9B:FA:E7:BE:C6:5D:33:68:EB:0A:9A:DA:65:2C:60:27:49:31:91:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759CAD8AF35D11EF895053B4762E951A.roa
Signing time: Tue 25 Feb 2025 09:47:00 +0000
ROA not before: Tue 25 Feb 2025 09:46:57 +0000
ROA not after: Sat 19 Feb 2028 09:46:57 +0000
asID: 17561
IP address blocks: 154.83.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89620 (0x15e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:46:57 2025 GMT
Not After : Feb 19 09:46:57 2028 GMT
Subject: CN=67bd9194-d021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:68:a4:24:42:b8:c4:c5:ca:0c:72:00:75:
7f:02:2a:45:fa:5b:11:a2:99:12:6d:13:fd:49:f7:
35:e0:10:81:8a:ff:3d:bc:51:3e:20:18:ac:cd:f0:
b0:8c:68:91:fa:0e:d1:86:23:31:d5:8c:bf:46:61:
7f:7f:81:7b:ad:01:20:1b:34:c6:ff:46:87:0b:3c:
af:98:7e:b3:79:82:54:06:a6:cd:3e:46:50:26:6b:
b3:1e:96:e2:47:82:81:fd:00:ee:38:ed:19:d7:4f:
2b:98:96:48:8a:fa:f8:a8:8a:4f:62:0e:25:57:74:
14:10:84:db:77:6d:76:9d:6c:19:11:2e:fb:68:90:
34:e9:3a:fd:c8:77:f7:88:5e:85:21:21:e8:07:a2:
cc:a7:f8:f3:10:8d:49:1c:21:c5:da:83:74:77:31:
2c:c8:c6:66:61:2b:9a:15:a1:00:7d:52:47:17:ea:
e6:b0:79:8d:d3:14:22:2e:ad:54:e2:45:5e:f3:f5:
d5:50:1f:1b:04:61:c7:13:3f:fa:21:19:f6:e4:94:
c0:4e:f6:bb:46:14:88:cc:37:4a:bc:fb:0c:95:74:
6b:58:e8:d9:b8:c7:0c:c3:41:1e:ec:e1:eb:93:b3:
79:e4:8a:4d:c3:4e:cb:04:a3:cb:05:36:7f:89:36:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:E7:BE:C6:5D:33:68:EB:0A:9A:DA:65:2C:60:27:49:31:91:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759CAD8AF35D11EF895053B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.81.0/24
Signature Algorithm: sha256WithRSAEncryption
35:41:4b:f2:6b:ec:70:74:31:2b:b2:87:89:98:0b:f5:14:ef:
20:69:e0:df:67:61:1c:26:8e:22:b1:d9:a8:79:54:87:ea:22:
2f:a5:ed:33:51:4b:68:e4:44:4a:1c:67:60:e4:af:2d:22:7b:
0a:99:1f:92:b7:81:bb:42:0d:3b:0c:d9:07:e3:5a:52:10:a6:
22:50:5f:93:86:fb:46:ce:d6:86:e2:2a:fe:a6:0f:da:c4:44:
36:ca:da:cc:39:b2:7d:9e:fe:a0:87:75:1b:f8:b2:b2:79:e6:
9e:aa:7a:f8:74:ec:65:cf:78:fd:ea:62:c5:1d:5a:ad:3e:d5:
fd:01:8a:91:08:40:47:17:f2:64:e0:93:b4:cd:09:92:3a:34:
03:2c:27:9c:42:2a:d3:72:86:78:f0:59:74:7e:e5:68:22:97:
0e:07:83:a4:13:af:0b:4d:d1:06:8c:a8:76:6e:23:7a:43:89:
1b:62:b1:5c:f8:95:a7:31:47:93:08:8e:12:e1:2a:60:58:9c:
27:e8:29:a4:bf:3d:56:8a:3d:54:e6:f4:36:8b:79:8d:49:9b:
cc:62:ad:90:1b:6f:d2:53:5c:21:10:1b:2a:dc:43:39:29:ac:
6c:ed:91:bf:c2:8b:87:ab:2a:ab:11:22:ab:e5:1a:af:41:83:
8d:3f:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:58 2025 by rpki-client