Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980FB790CDD311EFA9364774762E951A.roa
File: 980FB790CDD311EFA9364774762E951A.roa (raw, json)
Hash identifier: ZaMq8J8BxifRkdACNw5pClbe5VwFFtXjDUIpy0pMOvg=
Subject key identifier: 40:A3:B9:E9:9D:8C:67:E2:16:A4:42:8B:E5:37:45:9C:ED:76:88:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013757
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980FB790CDD311EFA9364774762E951A.roa
Signing time: Wed 08 Jan 2025 15:16:54 +0000
ROA not before: Wed 08 Jan 2025 15:16:51 +0000
ROA not after: Sat 03 Jan 2026 15:16:51 +0000
asID: 984
IP address blocks: 154.83.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79703 (0x13757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:16:51 2025 GMT
Not After : Jan 3 15:16:51 2026 GMT
Subject: CN=677e96e6-1413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:72:80:6d:b8:d1:2f:1f:c7:96:03:29:65:
a6:67:56:8e:1f:70:c7:0e:3a:0d:b0:1a:3d:cb:7d:
45:a0:0c:e7:06:ec:55:66:4e:b1:b4:17:d8:b6:1e:
31:7c:d0:44:b8:30:b8:9a:ef:8c:a1:dc:02:fb:13:
ab:ec:a5:c2:a0:b0:0a:70:a6:8c:f7:bd:49:30:64:
f1:ca:32:d4:f1:27:7a:0c:d8:f5:4c:09:88:3f:4f:
7d:f6:d4:00:63:05:8a:4f:95:84:0f:c3:7b:2b:d8:
de:3a:2b:b5:51:38:28:ad:a4:35:28:26:32:99:69:
3b:b1:30:50:8f:14:11:a7:ff:79:b3:7a:a9:23:69:
63:59:3c:e4:45:66:5a:f9:56:0a:f6:47:d1:35:64:
d9:fc:bc:6a:48:1b:ae:cd:24:07:d0:d2:e9:72:3e:
8a:5b:60:3d:ca:4b:12:91:10:a9:c9:b9:bd:e1:33:
a8:f8:d8:f0:28:03:3b:3b:72:3c:4e:5d:0f:b5:27:
53:2f:91:df:fe:d5:5d:38:41:9b:20:39:5f:38:b6:
14:b7:a0:d7:51:61:8a:80:cd:17:e9:22:f3:a7:65:
69:12:5e:f1:e0:67:69:52:23:b7:61:aa:3b:e1:ff:
a6:ed:20:2d:46:62:31:2c:28:5c:29:65:fe:aa:89:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:B9:E9:9D:8C:67:E2:16:A4:42:8B:E5:37:45:9C:ED:76:88:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/980FB790CDD311EFA9364774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.135.0/24
Signature Algorithm: sha256WithRSAEncryption
09:7e:a9:19:34:99:1c:1c:33:42:3b:c9:a9:1b:73:ed:ce:50:
76:9d:d2:04:91:5a:69:3b:29:83:16:c5:5b:f4:c3:e9:7b:35:
02:b7:d8:98:cb:54:dc:93:38:fc:dc:99:52:c7:c7:b7:85:3f:
d4:b1:0f:3d:60:7c:54:f0:0d:e0:27:85:f8:16:c9:65:49:15:
2b:33:0d:ca:be:a8:d2:5a:71:7b:3c:8b:22:db:26:b0:34:86:
43:41:ae:0f:d8:e0:b4:3f:5b:18:a3:8d:96:1e:6d:a3:20:3f:
89:86:4b:07:b2:e7:b3:59:df:49:64:9b:8d:b3:3a:8c:25:95:
0e:a1:42:28:ce:e9:09:e4:af:d6:15:1e:66:57:ce:25:c0:9d:
b9:1f:56:86:45:96:86:59:19:c9:66:50:e2:83:21:8b:15:be:
a1:e2:42:1c:3f:44:46:de:5e:44:cf:1d:dc:0e:cd:c3:b6:0d:
c5:87:d8:6d:24:28:3d:53:57:7b:2a:5e:68:93:b8:9b:57:60:
2f:98:8a:43:c7:23:a9:eb:3a:fb:86:d9:fa:fc:b8:6e:36:2d:
a7:74:e6:e7:e5:35:e9:1b:c3:37:7b:cf:47:21:b7:f7:4d:ca:
28:14:9c:c5:90:65:b9:09:5b:c1:27:89:23:1d:05:3c:ff:b1:
8c:33:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:31 2025 by rpki-client