Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E9EE34F44711EFA5FD017D762E951A.roa
File: 98E9EE34F44711EFA5FD017D762E951A.roa (raw, json)
Hash identifier: ytTJ1Rqiko0qr/1BX1eZ70qaqib6DU15ngNnrjHY3PY=
Subject key identifier: 1D:C5:65:2B:12:09:4A:F6:9D:F6:AE:76:9E:7A:A8:6E:40:F2:88:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E9EE34F44711EFA5FD017D762E951A.roa
Signing time: Wed 26 Feb 2025 13:43:02 +0000
ROA not before: Wed 26 Feb 2025 13:42:58 +0000
ROA not after: Sat 19 Feb 2028 13:42:58 +0000
asID: 17561
IP address blocks: 154.82.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91111 (0x163e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:42:58 2025 GMT
Not After : Feb 19 13:42:58 2028 GMT
Subject: CN=67bf1a66-811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:a0:93:28:09:58:ec:b5:af:98:1e:d1:73:
1e:bd:99:cb:51:8a:ca:67:c6:0d:05:a9:56:e1:b7:
65:00:5e:e1:65:1d:15:5d:ef:8b:f2:fa:ce:57:df:
1a:ac:29:d3:02:7d:04:28:a8:4e:cf:a8:3e:06:1d:
65:94:cd:4e:fb:9b:ef:b0:3b:eb:c0:c3:d2:1a:2e:
58:5d:df:6e:3a:3c:2d:e0:c2:01:3a:9f:de:b4:2e:
75:1d:9d:af:8a:85:ba:e6:44:79:01:0f:62:e2:fd:
b3:b2:f4:33:ca:7b:2e:23:60:55:8c:18:5f:a4:ff:
c2:4d:b8:02:69:88:d1:20:bb:55:fe:a4:06:6c:ad:
76:03:ca:51:01:76:e9:97:ad:d7:7f:41:2f:39:88:
60:6d:96:d4:33:0d:19:c9:c9:d4:d0:7e:29:ec:00:
2b:4b:2a:22:d3:10:97:97:e0:15:4a:57:91:3b:ed:
a9:cf:81:21:45:c3:e5:85:f8:58:43:a8:4b:6e:97:
cc:64:a3:d1:17:70:f7:b8:5d:d9:6d:40:5c:ee:09:
fc:5d:e3:43:a7:36:19:b7:f0:73:c0:4e:5c:21:88:
d6:60:f7:40:f6:e3:5e:fd:6a:2f:90:26:ac:bf:10:
a7:32:a7:65:d0:5a:4d:d7:45:6c:d1:60:c0:71:3c:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C5:65:2B:12:09:4A:F6:9D:F6:AE:76:9E:7A:A8:6E:40:F2:88:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E9EE34F44711EFA5FD017D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d7:4e:de:d8:bd:20:cf:10:97:04:f9:71:58:43:aa:54:d9:
fa:5e:72:28:77:22:4b:43:1f:1c:b1:f4:3e:b2:fa:10:9c:5c:
d5:44:07:3f:c2:63:87:b4:dc:29:a8:6c:fe:17:28:b1:2c:1e:
96:5e:04:b6:9e:89:17:d9:ec:02:7e:f2:43:ae:dc:98:ce:20:
ab:56:98:4f:e7:b6:83:3c:2f:d8:a4:5f:b7:6f:0e:a4:11:56:
66:b2:b8:22:c9:72:01:1a:1b:31:d2:80:7a:47:64:3f:89:71:
1b:1c:ff:61:7b:5f:40:1c:9e:d8:35:0d:6d:f7:60:fb:23:df:
0a:21:76:77:77:07:f4:27:97:1f:8a:b5:0e:e4:1a:9c:b5:7f:
29:85:3d:22:0f:4d:7c:f9:ae:39:17:be:9b:59:17:11:66:65:
7e:09:e4:5f:f0:6d:b3:6b:c9:27:6d:8a:70:9b:f3:57:5b:ae:
4e:83:6b:2b:68:a0:45:e8:ba:b5:9f:4a:27:dc:a8:f8:64:cd:
d5:04:78:d3:c9:f0:59:80:3d:3d:b0:c5:eb:ac:c0:25:e5:a7:
80:a6:98:67:01:0d:85:4d:01:b4:af:41:de:dc:4b:6e:a9:aa:
38:65:47:42:40:d0:16:c9:19:b5:0d:6d:9e:fd:e7:0f:d4:ce:
fb:5a:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:50 2025 by rpki-client