Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA51BECF80F11EFA00DD95F762E951A.roa
File: 8BA51BECF80F11EFA00DD95F762E951A.roa (raw, json)
Hash identifier: DExcWqubESgBoA1LE0jVq1Swnm7978xQ3cjH6cXQqao=
Subject key identifier: CF:C9:1B:91:62:8B:7A:9F:75:5C:B2:12:A1:DF:F3:36:9A:31:33:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA51BECF80F11EFA00DD95F762E951A.roa
Signing time: Mon 03 Mar 2025 09:11:52 +0000
ROA not before: Mon 03 Mar 2025 09:11:48 +0000
ROA not after: Fri 04 Apr 2025 09:11:48 +0000
asID: 61112
IP address blocks: 154.83.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94126 (0x16fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:11:48 2025 GMT
Not After : Apr 4 09:11:48 2025 GMT
Subject: CN=67c57258-0567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:f4:3c:3f:17:60:90:13:c9:a1:b9:a0:0f:
8f:e1:8b:2d:0c:5c:9c:96:d0:a8:2b:ca:2a:3c:52:
7d:d5:64:a0:62:60:82:fd:ce:d3:88:34:2a:70:0f:
ed:e2:fb:b9:ef:ba:05:02:be:8f:4c:26:b4:4d:7c:
2a:35:3f:90:1d:36:1b:6c:93:f7:78:1e:8c:b1:fb:
a1:fb:74:b8:52:4d:a3:1a:f5:8d:c7:ea:f3:28:bd:
4c:47:f3:d0:0a:7e:50:27:ff:c9:82:06:0f:dc:d1:
1f:bf:67:67:70:fe:53:cb:5c:42:4f:e8:6c:8e:6b:
86:81:c6:be:4c:81:44:88:e6:3c:4e:35:5f:f5:b6:
d6:9a:87:e9:98:31:37:63:92:e6:fe:3c:f3:21:5f:
3a:da:df:63:7f:29:3c:39:7c:59:04:6f:b5:34:69:
b6:19:bb:ed:27:e4:c0:71:c0:95:b2:21:7c:6d:52:
9e:d6:7f:d5:f0:df:db:1a:b6:7f:a3:2e:e0:28:94:
11:2e:1b:48:8a:95:a2:c9:48:b3:cc:86:99:de:6e:
a2:70:d3:37:57:09:5d:63:cf:f3:cf:65:dd:84:19:
31:b3:98:e1:12:4e:59:d6:82:2d:61:62:3a:fa:9c:
3f:f0:8b:f1:7d:c7:a3:23:17:ff:ca:23:d5:a3:cd:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:1B:91:62:8B:7A:9F:75:5C:B2:12:A1:DF:F3:36:9A:31:33:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA51BECF80F11EFA00DD95F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.96.0/23
Signature Algorithm: sha256WithRSAEncryption
66:57:ac:a4:23:17:ef:7e:a8:75:04:57:98:15:d7:f3:b2:a0:
6d:5c:eb:2b:2d:15:a6:7e:70:bf:6d:aa:52:3e:1a:2d:6a:47:
d7:68:45:6e:b3:87:3c:6c:fa:89:71:bd:55:3f:e5:d7:36:2b:
cf:97:d2:71:5e:ab:49:9e:84:0c:de:9a:a3:02:f7:9e:af:74:
ad:53:26:26:ca:70:8c:2a:b5:20:ed:a8:e9:28:d2:03:db:41:
17:4e:de:6a:cb:40:b2:49:14:9c:88:f1:16:9b:7c:cb:d1:08:
fb:8a:e0:5f:19:85:b1:5d:1e:b9:a9:45:85:bc:bd:da:5a:bd:
66:c5:04:73:18:23:74:26:2b:b1:9f:c4:7a:dc:e1:2a:05:b6:
80:f6:72:a1:09:0c:d3:ae:f8:e3:c8:f4:01:fa:fd:e5:f9:3e:
55:37:4f:26:1e:a4:2c:e9:55:56:c1:c8:4a:22:af:b1:53:8a:
ed:c7:d0:9d:43:9d:32:3a:69:67:a2:e8:8c:e1:72:c7:42:5d:
51:39:f7:d5:f9:af:84:9c:72:dc:f9:47:3f:89:76:05:f0:8c:
ad:68:a2:57:65:cb:de:e7:dc:60:84:f1:f1:e7:7d:2e:55:11:
0d:b5:89:9a:15:f3:98:e4:c4:a3:b4:0d:89:00:64:59:85:71:
45:5c:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:09 2025 by rpki-client