Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF47D0BEDC11EF88753A66762E951A.roa
File: B5FF47D0BEDC11EF88753A66762E951A.roa (raw, json)
Hash identifier: aalkkJqKA4XF5JqTUxKf2rsrd5DT+vKdgMJ2dx2dsKk=
Subject key identifier: 7A:34:C3:80:30:7D:36:30:67:1C:52:CC:59:48:7A:8D:C1:EC:E2:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF47D0BEDC11EF88753A66762E951A.roa
Signing time: Fri 20 Dec 2024 14:14:23 +0000
ROA not before: Fri 20 Dec 2024 14:14:19 +0000
ROA not after: Wed 25 Jun 2025 14:14:19 +0000
asID: 18013
IP address blocks: 154.84.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73010 (0x11d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:14:19 2024 GMT
Not After : Jun 25 14:14:19 2025 GMT
Subject: CN=67657bbf-ba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:66:19:5f:c4:62:00:74:57:2b:86:d0:b4:
5f:10:3c:3d:11:fc:d6:3f:3d:16:53:37:a5:3b:c5:
29:58:a7:24:00:81:99:2d:40:0f:79:1c:a2:e0:ef:
b5:34:de:46:b0:54:aa:8a:ca:bb:57:33:01:9d:ab:
97:54:34:6c:8d:30:5d:55:d4:3d:e2:13:44:ea:5e:
54:0e:f4:2e:81:56:87:a0:7f:ce:50:07:13:ff:6c:
de:0e:d6:2f:0c:76:96:74:d6:e3:4c:8c:53:5d:3f:
1c:65:76:2f:5e:d0:e7:c7:89:d1:44:0c:78:52:74:
4b:f3:4b:fa:49:77:b1:0c:30:3a:e9:54:97:de:24:
a8:4e:d4:ed:1a:51:94:04:5f:93:b7:6a:00:e5:17:
4e:dc:86:22:5e:9c:82:82:6e:d1:55:77:f9:5c:a4:
79:52:06:18:b1:2c:dd:b2:59:c4:ed:14:1f:eb:1b:
aa:46:b0:2b:8c:7a:dc:87:a2:6e:98:41:44:0d:34:
f4:b9:cc:fc:4e:da:b7:f7:dc:12:2e:47:dd:cc:7a:
a8:ac:e6:46:10:7b:fe:cc:07:24:cf:5f:e3:eb:71:
de:eb:a1:d2:c3:b4:19:51:95:f9:f7:cb:07:e7:5a:
91:ae:35:05:08:47:00:97:9c:ec:37:ac:f5:95:de:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:C3:80:30:7D:36:30:67:1C:52:CC:59:48:7A:8D:C1:EC:E2:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF47D0BEDC11EF88753A66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:1b:4a:89:d9:cb:2b:53:40:a1:49:3b:d0:d0:7b:6c:bc:1a:
c5:34:a0:4e:3b:c8:f1:ed:ab:4b:33:e9:20:f1:93:4e:96:1a:
9e:3b:35:6f:70:0c:ab:17:cb:ed:c4:da:b3:7f:0a:f4:53:12:
86:0a:43:f5:c2:c5:a8:30:1b:71:40:b7:f8:b5:3f:4c:ee:7f:
a3:84:13:66:06:8d:83:43:3a:97:cd:d7:78:c9:d0:14:d5:84:
50:95:d3:e3:d2:29:ac:3f:a6:04:ec:84:ca:3f:a5:52:4c:15:
1b:f1:91:cc:19:d8:77:7f:85:44:9d:d0:8d:69:5f:03:c8:91:
19:cc:66:ed:32:98:e0:22:ba:0b:01:95:57:7c:8a:36:c3:7e:
16:45:97:8f:84:d7:3a:54:fe:10:ff:ff:43:69:8c:53:04:d7:
09:8c:e8:a4:86:01:5a:2b:c9:1d:30:ed:d5:41:dc:ed:83:4c:
fd:e1:66:ce:85:07:6f:f3:91:78:6f:f2:b4:e2:8d:bd:6b:df:
45:64:57:69:ee:2f:62:10:6a:ee:54:fe:b9:65:94:75:8c:8a:
36:64:6f:6b:fc:2c:95:9b:d3:18:20:fa:e8:7f:8f:72:21:fb:
26:d9:28:94:04:fb:54:0c:46:d4:88:d5:3d:59:43:6a:47:c8:
39:e7:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:41 2025 by rpki-client