Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B163F884BEAE11EFA384274B762E951A.roa
File: B163F884BEAE11EFA384274B762E951A.roa (raw, json)
Hash identifier: wZtEgFwMhq3cKZs4xTW6IjcsahNsE1c4CTXW2Zx8gKU=
Subject key identifier: 8C:0D:75:61:A7:7C:14:A6:87:A1:07:7F:0C:39:AE:93:A1:BC:19:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B163F884BEAE11EFA384274B762E951A.roa
Signing time: Fri 20 Dec 2024 08:44:58 +0000
ROA not before: Fri 20 Dec 2024 08:44:54 +0000
ROA not after: Tue 16 Dec 2025 08:44:54 +0000
asID: 141216
IP address blocks: 154.84.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72858 (0x11c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 08:44:54 2024 GMT
Not After : Dec 16 08:44:54 2025 GMT
Subject: CN=67652e8a-2f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:1b:a3:be:b1:61:3f:d4:8a:3b:db:88:1a:
1a:60:e9:30:b8:71:5b:aa:dd:03:07:fd:bc:22:33:
af:9b:46:24:77:20:2e:63:32:ac:3b:3b:75:d8:b5:
37:ea:7a:f5:5c:ac:42:df:35:1e:73:38:27:47:19:
3d:5f:ea:5b:79:d6:50:a9:bc:02:b1:78:4a:37:96:
e1:1d:e0:8f:d2:ea:eb:6a:f7:74:1b:1e:bb:31:11:
aa:23:a9:31:80:7d:f4:74:bc:47:9f:19:ac:a5:3a:
10:24:fb:43:36:1f:d9:4a:54:f0:6a:55:7f:da:ec:
bf:2d:f0:59:cc:9c:04:a1:f3:70:06:20:00:6d:9d:
c7:ec:8e:7e:f9:50:dd:6d:92:24:e0:2e:98:8b:a4:
70:2b:8c:7e:e6:91:a3:13:4b:47:66:85:ff:e7:0e:
6c:11:76:02:79:c2:a9:72:29:ca:ef:8d:6c:f1:21:
bd:da:06:e3:89:ea:24:c4:80:30:8f:74:16:fd:21:
94:0e:c1:44:16:a8:e5:ba:02:bf:cc:e0:f3:68:7d:
b0:ec:c7:55:36:4e:0e:92:c4:91:84:90:45:5d:b3:
3c:e6:79:43:65:f3:52:a1:b5:62:af:aa:dd:fb:ad:
b1:56:08:1f:75:00:db:6a:7f:28:ea:01:01:a5:4e:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:75:61:A7:7C:14:A6:87:A1:07:7F:0C:39:AE:93:A1:BC:19:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B163F884BEAE11EFA384274B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e2:50:c5:d6:12:b0:ea:89:bc:e5:52:8d:53:6a:5f:8d:0f:
8d:cb:06:8a:6e:cf:84:2c:ff:cf:73:e5:50:06:36:43:a1:f6:
c1:e7:59:32:e8:b2:c1:04:8c:92:83:80:8e:c8:0b:61:8c:93:
8b:00:79:a1:d5:8b:5a:cf:73:52:57:5e:30:a4:a9:78:fb:62:
e5:f5:a4:ca:86:8e:b9:06:b6:26:5e:31:d2:ed:4b:09:59:98:
eb:73:65:3a:a3:55:6e:91:be:d8:98:77:fe:e5:32:80:82:08:
29:dd:eb:a3:67:4b:17:19:26:eb:f2:0d:51:f5:c4:84:f2:92:
75:20:fb:f1:5c:76:03:d7:0e:de:5e:fe:b3:3c:bc:01:93:f4:
b6:fb:6d:bb:f2:4c:72:d2:96:11:55:fc:d6:90:6b:32:5a:69:
a0:7a:ab:23:57:f8:92:02:c9:0e:79:de:e1:29:2b:5c:d3:21:
74:39:a7:4b:8d:67:f6:2d:f0:7c:d7:14:dc:d0:cb:4e:4c:65:
54:b1:bd:a2:83:78:a1:0b:2a:14:ed:45:eb:7e:d5:aa:dd:ce:
c4:5e:c8:96:c4:1b:64:4d:04:32:60:c3:f6:d1:8b:ad:34:1d:
b6:07:4e:cd:44:66:46:ed:70:a4:67:2c:6c:73:be:44:3e:45:
25:93:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client