Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF80B78BEDC11EF908B2166762E951A.roa
File: 8DF80B78BEDC11EF908B2166762E951A.roa (raw, json)
Hash identifier: kj8Tfbbak3niCjiFl9K6499uEImaYD147nX2Er5P6Kw=
Subject key identifier: 67:49:9D:C1:27:71:E9:18:30:70:25:53:F9:16:3C:E0:27:EC:88:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF80B78BEDC11EF908B2166762E951A.roa
Signing time: Fri 20 Dec 2024 14:13:16 +0000
ROA not before: Fri 20 Dec 2024 14:13:12 +0000
ROA not after: Wed 25 Jun 2025 14:13:12 +0000
asID: 8786
IP address blocks: 154.84.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73008 (0x11d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:13:12 2024 GMT
Not After : Jun 25 14:13:12 2025 GMT
Subject: CN=67657b7b-28bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:7a:d3:aa:78:15:56:cb:49:7f:a4:2f:86:
05:13:85:45:43:c6:88:c4:79:01:a7:8e:f0:26:09:
04:bd:b3:de:fb:3a:a3:4f:ff:3c:e8:dc:d6:42:a2:
66:c1:de:57:18:ef:74:68:06:26:ed:35:ea:79:86:
1a:c3:d2:80:c2:b1:2b:cf:43:2b:ad:52:87:33:96:
25:66:fe:ad:fb:3a:c7:6b:54:f3:93:44:71:fc:ef:
6e:62:de:59:78:98:fd:91:97:df:6b:87:eb:b9:b1:
3a:85:c1:f8:d7:d6:75:0a:a6:ee:4e:21:ce:6f:aa:
a0:bd:df:45:7c:93:71:7f:ec:72:90:14:bd:37:41:
c3:83:88:c1:3c:a3:9c:8a:d2:11:9c:fe:28:1f:8c:
0f:a1:3d:3e:37:ae:af:fb:fd:c2:98:cc:7b:0f:b3:
5a:40:31:16:ac:19:99:76:de:04:7d:9c:2c:2f:90:
09:de:28:a9:4f:77:9b:34:b4:71:7d:ed:f6:ac:d9:
fb:46:bd:3a:48:87:d6:0a:1f:31:c5:bc:3f:f0:a4:
14:30:5d:b5:1a:74:6d:4c:4b:50:d4:33:9a:1c:57:
a6:88:99:00:3c:9e:f6:da:ff:99:52:af:06:b9:bf:
36:1a:c4:eb:7c:15:4f:c8:c4:6f:57:24:f2:71:82:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:9D:C1:27:71:E9:18:30:70:25:53:F9:16:3C:E0:27:EC:88:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF80B78BEDC11EF908B2166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.48.0/21
Signature Algorithm: sha256WithRSAEncryption
48:49:ec:a4:60:61:c2:4d:4e:61:76:8a:50:86:03:12:39:dc:
bb:33:32:dd:74:70:e7:36:15:46:af:09:11:1d:2b:65:fe:eb:
74:df:a4:14:aa:a7:6b:43:5e:d5:f4:91:5d:86:c0:54:fd:78:
13:c2:b6:44:6b:f6:72:21:e6:44:26:21:8b:c7:24:3b:78:f2:
e6:35:27:e2:34:7e:72:27:f1:16:f3:9c:7e:cf:ca:c1:4a:2f:
00:fd:ff:c3:15:e5:a5:2e:da:f6:0e:01:07:98:61:29:c9:53:
25:6f:59:9a:d2:ae:24:96:34:cd:20:12:07:16:d3:18:3a:67:
d7:56:30:73:e4:fd:09:14:ed:b8:7c:24:5a:be:54:f5:a9:92:
9e:8e:b5:23:bd:82:e9:c7:bc:5f:12:42:8a:d1:ff:5f:e5:03:
99:53:70:1c:c7:a1:c1:e5:18:6b:54:11:ec:97:ee:3b:18:3c:
41:6c:18:46:ac:df:c6:99:4f:4d:d3:3e:73:a1:7e:cf:f1:80:
44:c4:7b:ff:ad:e3:d8:b7:88:b3:55:0d:c9:fe:65:19:9e:36:
8c:c6:9e:2f:4b:d1:fe:d8:6b:ec:89:dd:27:87:61:a5:c9:39:
a6:34:85:b9:1f:f2:12:f0:dc:56:27:24:e6:48:a9:e9:b7:24:
e6:42:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:00 2025 by rpki-client