Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF0BFA6C3C711EFAE1D6E89762E951A.roa
File: 8BF0BFA6C3C711EFAE1D6E89762E951A.roa (raw, json)
Hash identifier: cczHZ42T4yKrJpZTwgW2CVZAQcALpHsWT9bcQW8XiPg=
Subject key identifier: 78:B6:D6:57:A5:C0:E2:0C:A2:8C:84:AF:00:6A:8F:37:66:A5:24:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF0BFA6C3C711EFAE1D6E89762E951A.roa
Signing time: Thu 26 Dec 2024 20:25:28 +0000
ROA not before: Thu 26 Dec 2024 20:25:25 +0000
ROA not after: Sun 12 Dec 2027 20:25:25 +0000
asID: 17561
IP address blocks: 154.83.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75744 (0x127e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:25:25 2024 GMT
Not After : Dec 12 20:25:25 2027 GMT
Subject: CN=676dbbb8-c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:6e:9d:89:c5:14:36:88:80:05:6f:8f:9b:
a3:47:fc:0c:a3:f2:c2:db:2c:c5:52:7a:d7:b3:5c:
47:90:28:6c:6a:0c:9d:db:02:99:c2:4a:64:20:bc:
e0:1d:bf:c8:6a:85:f3:bf:87:da:0b:f3:01:28:81:
f0:09:13:7a:6e:fe:f1:cb:04:e9:3a:b3:71:fb:14:
34:23:c4:4c:8d:cb:1d:85:86:d2:4e:ca:0e:b9:89:
79:f3:00:eb:21:51:05:3b:d1:29:d2:b1:77:d9:2c:
e6:af:26:fa:bc:9f:d8:9d:e8:c3:71:d2:d9:f1:e5:
19:50:4f:8d:c2:e0:81:15:8d:7b:9e:5e:05:f7:86:
96:18:b6:72:aa:15:4c:b2:9f:02:fe:fb:4f:82:25:
03:d6:7a:9a:5f:bf:bc:5d:61:cc:a3:53:88:16:06:
f7:9e:58:1a:2b:7e:c0:c4:a7:9c:43:db:a0:0e:1c:
38:ae:3f:c8:d2:57:c7:83:3a:0f:b5:e0:54:34:f3:
84:6a:d6:64:24:88:70:1f:f3:ab:bc:5f:77:c0:50:
d4:51:09:5c:2c:dc:a2:04:53:7a:f6:5e:89:66:8c:
8c:05:d3:79:56:9a:7f:51:69:ce:05:b1:98:e9:30:
d7:a8:b1:93:03:91:5f:71:9d:f5:36:6b:93:6b:92:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:D6:57:A5:C0:E2:0C:A2:8C:84:AF:00:6A:8F:37:66:A5:24:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF0BFA6C3C711EFAE1D6E89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
52:81:f9:3a:16:a7:38:82:b9:c1:ad:e2:86:2e:b8:67:20:56:
fe:55:28:92:81:d0:44:33:07:86:e3:55:7b:f8:cb:d2:1e:72:
88:49:64:88:d5:02:42:a3:46:ab:d8:fa:c1:67:83:a0:e2:bb:
b2:6a:c9:94:16:f1:6c:22:94:65:dd:8a:78:62:ff:a7:3f:21:
63:cd:10:44:17:2b:84:51:bf:f2:d2:cb:54:e8:54:5e:54:8d:
9c:fc:34:5d:5a:1f:fc:6a:3a:68:e3:72:ca:30:c9:d1:eb:b8:
6f:38:4b:4b:c0:6f:78:fa:27:af:89:c8:fe:b1:50:ea:39:b8:
52:46:6c:50:0a:6a:64:96:51:3b:df:dd:41:cb:f5:35:73:4b:
b9:2f:e0:92:89:32:32:34:14:e0:4d:a8:d3:c4:c1:c5:cf:ec:
35:9d:c0:6d:ed:12:2e:be:79:2b:96:08:d2:68:82:9e:8c:b7:
04:75:13:7b:6b:42:8c:23:53:20:82:13:92:b0:9a:08:27:7d:
4d:06:9b:0e:81:b5:9c:1b:a1:ed:5d:49:87:89:7b:7f:d6:80:
42:5f:02:a5:5e:bf:3a:42:f1:44:6a:21:23:ef:e7:43:db:50:
95:2a:fd:49:a8:7a:9d:d0:4a:ba:db:e3:86:6f:14:9a:37:69:
0f:11:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:38 2025 by rpki-client