Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDEB7EF2CD11EF807B9A5D762E951A.roa
File: 84CDEB7EF2CD11EF807B9A5D762E951A.roa (raw, json)
Hash identifier: 5phnHZbhLFRJPNZxr1ND3w/9OayT2kWTdqcy9RvrsAY=
Subject key identifier: 05:18:1A:90:CF:D1:BB:21:EB:48:8A:F4:30:41:76:E9:72:60:74:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDEB7EF2CD11EF807B9A5D762E951A.roa
Signing time: Mon 24 Feb 2025 16:36:38 +0000
ROA not before: Mon 24 Feb 2025 16:36:35 +0000
ROA not after: Fri 04 Apr 2025 16:36:35 +0000
asID: 5068
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89206 (0x15c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:36:35 2025 GMT
Not After : Apr 4 16:36:35 2025 GMT
Subject: CN=67bca016-9874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:22:04:cd:95:eb:b3:71:a8:03:b1:d9:9e:
4c:6d:89:fe:30:95:fe:53:0a:00:77:db:20:38:57:
97:00:ba:66:28:25:f1:18:2e:bf:79:5b:4e:7b:eb:
2f:66:f2:87:6d:22:3d:9d:c4:a3:2e:67:db:c1:59:
b2:80:9f:d7:c7:49:aa:96:a9:03:c3:bf:59:e0:c4:
c2:ee:17:29:81:7e:70:1c:37:ad:23:6b:1b:5e:74:
0a:56:da:9a:b6:38:53:3c:ed:0c:92:54:0b:db:72:
0d:95:17:35:02:2f:c2:f7:0c:27:b6:d0:29:49:ad:
9f:d3:23:28:1c:c2:ea:3d:01:a0:1c:2f:5d:d3:84:
4f:49:8d:ad:49:49:09:f3:1d:8c:63:79:33:77:d4:
8e:f4:b6:3b:31:08:1b:20:42:d8:2a:86:13:30:a4:
83:15:0c:83:4e:cc:74:6c:e1:5f:e8:d1:ba:5d:e7:
f5:bc:a1:2c:75:cc:62:02:31:86:47:25:b4:47:52:
41:0f:4f:01:af:b5:1b:07:ee:6e:e1:fc:69:b5:13:
7a:8a:c7:e8:22:c4:d1:0f:3f:17:e6:94:6c:65:b7:
26:32:5d:7d:c9:36:4a:a7:4d:c8:56:2e:73:3d:ab:
13:05:1e:67:19:9e:5e:a2:58:ac:0d:05:a7:0a:fc:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:1A:90:CF:D1:BB:21:EB:48:8A:F4:30:41:76:E9:72:60:74:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDEB7EF2CD11EF807B9A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1a:92:2c:2c:89:37:bb:47:58:ad:9b:d2:06:b1:dc:44:67:
9f:1f:aa:52:df:43:59:c1:42:3c:73:35:83:90:69:bd:0e:d4:
7c:b3:d4:64:cf:32:b6:a3:02:51:09:5b:25:b5:47:6d:47:fb:
d2:17:80:2a:ec:7a:ab:01:39:3d:e7:68:92:06:16:7b:29:73:
6d:64:f5:49:18:36:fe:44:ab:4b:91:0e:1e:68:c1:92:bd:da:
a2:7b:c0:51:08:59:26:87:c7:ef:4c:d0:df:3c:48:bb:95:be:
43:94:0c:0e:f0:f4:42:70:3a:c4:33:37:3c:c2:fd:e2:32:36:
d1:77:96:15:dd:6b:2c:3e:22:4a:4e:72:70:bb:55:60:3e:f1:
49:ce:e1:c7:cf:45:1c:78:9a:89:ba:da:2b:a2:f8:b4:94:4e:
c7:f1:81:ee:bd:6e:70:d5:84:c9:95:96:62:a2:9a:22:6e:c1:
c9:21:9a:91:d9:e4:09:77:a0:37:f5:7c:81:1f:5c:2d:60:25:
76:7b:78:e6:d2:8e:6a:9f:00:69:34:b3:7b:5d:d7:5a:21:32:
77:56:24:8c:5e:27:8b:db:98:b7:d5:22:d5:ce:50:20:99:1c:
bd:b6:7d:63:81:34:7c:20:1e:d2:b2:e5:3f:01:8f:71:4c:e1:
79:17:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:50 2025 by rpki-client