Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9BCC2C3CC11EFA9BD9AA7762E951A.roa
File: 88E9BCC2C3CC11EFA9BD9AA7762E951A.roa (raw, json)
Hash identifier: n8qS53iIu3WCf1H2Hq5Vi+Py5LTLx7/GI4b4PTIFPtE=
Subject key identifier: 23:C8:B6:96:85:C8:39:A2:43:ED:F4:8F:04:B3:FF:70:29:1A:9B:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012812
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9BCC2C3CC11EFA9BD9AA7762E951A.roa
Signing time: Thu 26 Dec 2024 21:01:11 +0000
ROA not before: Thu 26 Dec 2024 21:01:07 +0000
ROA not after: Sun 12 Dec 2027 21:01:07 +0000
asID: 17561
IP address blocks: 154.83.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75794 (0x12812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:01:07 2024 GMT
Not After : Dec 12 21:01:07 2027 GMT
Subject: CN=676dc417-3f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:1c:f9:19:78:8d:b1:e4:ce:d9:26:22:ae:
17:85:85:ce:75:f2:f5:84:6c:c3:81:22:dd:de:e0:
71:78:94:4e:30:93:04:5a:f5:96:c9:5e:c2:c0:e7:
e1:1c:ec:a8:df:6c:08:32:01:b6:cf:ad:b7:9a:19:
6c:b5:c8:4c:60:66:65:a9:2b:52:ef:0f:81:8e:ef:
00:14:5d:2e:e1:ba:56:25:3a:7e:1b:14:51:91:31:
45:6f:5d:67:93:54:3e:5a:c5:19:4e:0c:c0:d9:37:
44:5f:32:8a:ca:9b:e6:d2:e0:58:53:47:fb:42:8a:
b6:fd:b4:6e:5d:3b:5c:2f:c9:0c:05:a1:97:00:8f:
1a:79:e4:b1:27:d2:01:7a:07:4d:e3:d4:47:59:a5:
b4:6b:cf:a1:43:1e:d3:ca:50:01:aa:8b:57:fc:5e:
92:77:51:01:25:e3:cb:cf:fe:95:cc:ec:38:03:11:
d9:01:0e:2b:ff:7b:d3:fd:90:8f:a0:dd:90:02:80:
2e:b6:e1:b5:ee:74:9f:bd:bf:92:aa:fd:aa:f7:bb:
fe:81:0b:a5:4b:e0:37:d8:d6:62:ee:be:0f:c8:d3:
5e:53:09:5d:11:5b:fa:6a:ff:ab:10:ea:ea:9b:dc:
a0:14:02:18:03:ca:5a:d0:99:14:99:85:80:2d:fb:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:B6:96:85:C8:39:A2:43:ED:F4:8F:04:B3:FF:70:29:1A:9B:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E9BCC2C3CC11EFA9BD9AA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.159.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8d:30:cb:d1:0e:9a:86:be:56:7c:3e:8e:64:c5:36:fb:ce:
60:04:a7:f8:3a:2b:df:d5:ea:03:63:96:a9:49:09:5b:2b:9e:
3f:e2:69:6d:95:8d:93:f9:9b:25:72:72:06:30:bf:45:44:24:
fc:7a:ca:af:4b:17:19:dc:1e:88:da:b6:15:5c:37:a3:7a:f9:
38:13:07:04:db:c1:4e:95:4f:50:0a:24:cd:b3:19:1f:55:ec:
05:ed:35:c0:87:33:53:2a:79:fa:2f:ef:4c:2c:c6:ec:b4:c1:
f4:d0:f5:47:73:d5:d9:53:ae:e3:7e:10:a6:28:e3:ae:da:e3:
49:f3:e7:18:e7:d7:7d:17:a4:1a:8b:c4:31:43:f2:7c:b2:09:
53:60:12:5a:2f:d9:46:bc:17:e5:10:f8:a4:06:c8:6a:a6:46:
8c:c7:fc:37:23:6b:d5:ce:ac:fe:c1:89:9d:c8:f8:6e:e2:06:
2b:c7:8a:6b:8e:1d:43:16:53:cc:de:d4:4e:84:b8:4d:23:b1:
d5:d7:86:34:7c:fa:bb:80:0a:a7:f4:cf:3b:92:3d:5f:4f:01:
c4:95:b3:c0:52:e6:d0:8c:b1:21:25:07:dd:63:3f:3a:6f:aa:
fc:7f:cb:42:72:e6:83:e0:2f:46:40:ad:8f:87:65:2c:20:f7:
e7:3f:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:31 2025 by rpki-client