Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7747F086BEDD11EFBD1B496C762E951A.roa
File: 7747F086BEDD11EFBD1B496C762E951A.roa (raw, json)
Hash identifier: 73cneVtNNckibBUyLR4B4hDXLvIRQddzKZHek4DzgIQ=
Subject key identifier: 5F:FB:A6:BD:39:71:D1:BC:DC:C6:D5:07:FC:B9:09:AB:CB:66:DA:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7747F086BEDD11EFBD1B496C762E951A.roa
Signing time: Fri 20 Dec 2024 14:19:47 +0000
ROA not before: Fri 20 Dec 2024 14:19:43 +0000
ROA not after: Wed 25 Jun 2025 14:19:43 +0000
asID: 18013
IP address blocks: 154.84.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73020 (0x11d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:19:43 2024 GMT
Not After : Jun 25 14:19:43 2025 GMT
Subject: CN=67657d03-48e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:a6:bc:17:5d:bb:0e:98:f8:cd:f9:e9:71:
7e:76:ac:8a:71:b5:6c:79:b8:c9:59:2a:86:a2:c4:
63:5b:89:62:71:a0:ff:d3:b3:08:a2:37:28:74:25:
4b:0b:d1:7e:cd:2c:2a:c4:eb:24:30:38:eb:d2:8f:
9f:0b:22:e1:c8:67:f5:68:a8:5d:7e:68:82:f6:ec:
f6:04:4a:bc:64:27:92:0d:ed:ab:3b:fb:cb:be:bd:
24:9a:2a:c7:64:35:1a:63:3b:7c:8c:fa:a9:81:91:
ad:06:6d:29:e8:5e:72:9a:16:2f:c3:1a:d4:7c:88:
3a:7d:f3:e0:87:a7:b8:19:88:87:a0:11:34:26:53:
56:4f:5d:d7:da:0b:60:f3:80:14:66:59:e3:2b:52:
44:a3:4b:fc:6d:2c:bd:1b:34:19:ad:69:99:16:87:
34:49:70:b2:2a:c6:47:07:1e:43:41:d1:bd:50:f7:
2a:ab:70:b6:0e:ef:e5:23:d1:c7:f2:4c:52:de:79:
08:84:df:22:10:ed:66:fd:a7:95:d7:00:b2:7a:79:
99:4b:6e:11:c6:d4:99:fb:dd:13:cf:c6:0c:6d:54:
55:e4:89:43:dd:14:fe:34:e4:b9:13:e8:b0:e7:3b:
5f:b5:4a:55:0c:44:c9:aa:bb:d8:4d:f5:d2:74:a1:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:A6:BD:39:71:D1:BC:DC:C6:D5:07:FC:B9:09:AB:CB:66:DA:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7747F086BEDD11EFBD1B496C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.40.0/21
Signature Algorithm: sha256WithRSAEncryption
d3:7b:8c:31:83:f4:65:7c:0f:63:04:83:51:be:d5:73:32:ac:
30:f5:3d:0d:45:47:13:b9:59:5e:2f:79:b2:61:63:b3:60:25:
84:3e:ae:82:21:72:a0:61:12:19:78:02:6c:66:a4:ab:67:71:
c7:5a:48:c0:9c:b8:9b:69:63:b5:0d:95:4f:a0:bc:77:76:36:
ab:ee:75:eb:c7:f6:39:8e:cf:39:0a:e3:be:0e:51:3c:11:fc:
ef:7d:54:f3:4b:12:f7:c2:70:ae:8a:75:5a:f0:15:a9:be:3e:
53:49:71:a1:c2:a1:b8:e0:00:54:3e:60:3a:2d:78:8e:5b:ad:
66:8c:1c:e5:0e:03:a9:06:ed:50:aa:f3:13:77:c7:21:59:71:
05:dc:02:f4:d8:a9:35:33:85:46:e5:71:85:89:9b:28:24:84:
98:89:dd:37:c7:8e:6f:8f:de:b2:a2:b7:ed:bf:39:af:ee:e3:
77:6e:ed:77:4c:13:6b:39:a5:3a:c1:ef:58:cd:56:0b:9f:f6:
f4:a5:d2:da:04:94:4c:c1:04:cc:5e:f6:a7:7d:1c:e5:12:5f:
7b:da:60:7c:77:3a:af:cb:59:ff:ba:6b:28:b3:2e:31:3b:05:
23:5d:0a:68:0b:22:8c:69:ae:9a:25:69:58:c0:c1:1f:76:e5:
a7:fb:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:24 2025 by rpki-client