Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C83C280D8C311EF94C14A62762E951A.roa
File: 9C83C280D8C311EF94C14A62762E951A.roa (raw, json)
Hash identifier: KgaRv8lXFuMEykBlJpjtEp0UNQ8qjY38XQHUqKuDt0E=
Subject key identifier: 0A:5B:A0:9E:26:FA:B7:4E:8F:AA:D7:2C:72:60:1E:AF:AE:1F:54:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C83C280D8C311EF94C14A62762E951A.roa
Signing time: Wed 22 Jan 2025 13:20:13 +0000
ROA not before: Wed 22 Jan 2025 13:20:09 +0000
ROA not after: Tue 01 Apr 2025 13:20:09 +0000
asID: 63139
IP address blocks: 154.93.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81784 (0x13f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:20:09 2025 GMT
Not After : Apr 1 13:20:09 2025 GMT
Subject: CN=6790f08d-20be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:a1:cd:3a:8e:02:e4:3a:57:12:36:bb:d5:
3a:e3:79:73:bd:fe:57:43:07:73:c8:20:28:15:48:
c0:a0:83:fd:fb:5f:a7:e5:6a:08:31:6c:c3:68:17:
39:c7:79:5e:b9:58:82:8b:b3:e4:17:80:d6:d0:e3:
ed:e9:ed:f2:29:63:e8:23:30:68:58:d1:4f:98:e0:
5f:f5:cc:60:c4:e2:9f:7d:78:7e:c5:23:6b:68:6e:
26:9d:0e:42:ca:49:40:31:51:50:92:19:06:64:88:
a0:74:0b:e6:5a:47:e6:56:a0:fd:78:72:21:bb:10:
62:a3:3d:15:93:8b:bb:42:c3:e6:da:34:69:09:45:
88:c3:f0:fc:47:fb:f0:d7:a8:52:c1:7f:10:1e:10:
53:21:bd:ff:91:02:b6:23:2b:5d:f5:a2:1a:e9:c2:
58:6c:01:23:9d:52:ae:a7:2a:27:97:99:98:38:f6:
1a:24:ad:95:55:d1:59:10:7d:61:ab:39:be:c4:c7:
2a:ad:22:d1:2c:4f:7d:b9:46:e5:42:55:54:34:1f:
f3:2b:a6:bf:db:98:e1:02:a1:29:7c:b4:f7:ff:be:
98:9c:c2:f2:c9:1b:c9:f7:91:9b:74:61:dc:0b:bc:
0b:41:d7:f7:89:48:03:0c:ad:ab:98:26:c6:37:0a:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:A0:9E:26:FA:B7:4E:8F:AA:D7:2C:72:60:1E:AF:AE:1F:54:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C83C280D8C311EF94C14A62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.82.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c8:e8:47:8e:62:75:14:02:b7:ad:8c:9a:8f:2c:24:e9:6a:
06:d1:ad:9e:50:f3:bd:4f:87:b1:86:7f:7c:1f:48:7d:2a:31:
53:df:9f:fe:ce:a3:a8:fe:27:de:cf:e2:c6:78:15:27:96:58:
83:be:25:50:35:b5:a0:70:e9:54:2e:6d:e9:24:78:f8:cb:8d:
c0:cc:a2:73:a8:69:e0:e1:ec:07:28:07:21:12:18:11:11:03:
d3:11:6d:a3:f9:68:9b:ba:ba:cc:0c:e4:3a:b7:88:af:e8:0c:
8e:fe:38:8e:88:6a:01:37:e9:88:bf:20:7a:d3:fe:92:f4:28:
19:e3:d6:8b:96:f2:21:03:20:72:f5:1d:bd:2c:b3:10:6a:f7:
7b:92:34:30:1a:6c:8a:7f:50:4e:f7:ea:97:b1:76:ce:1e:27:
65:f0:23:8e:0c:c7:fb:fa:21:8c:34:f4:34:b5:3c:60:bc:95:
f2:8a:57:a5:fb:52:62:c2:39:ed:b9:b2:21:a1:a1:22:88:29:
68:99:62:af:c1:64:92:e4:20:b4:d9:ea:fd:05:58:0e:ff:6c:
9a:fc:dd:94:a3:53:ad:57:bf:5a:f4:14:be:70:13:d1:ff:23:
03:06:11:f2:f0:3d:0b:c5:6d:46:db:7c:2d:f7:81:71:2f:03:
ec:f5:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:45 2025 by rpki-client