Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B98370A4BE8F11EFA98CD889762E951A.roa
File: B98370A4BE8F11EFA98CD889762E951A.roa (raw, json)
Hash identifier: vYjMOdV/GMAzxhTz48W3GR5m4CvZJYnr4K+0/KwhMu8=
Subject key identifier: 4A:43:17:66:9C:7D:C2:B4:95:B3:A9:3B:F5:6A:DC:90:1F:76:3C:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B98370A4BE8F11EFA98CD889762E951A.roa
Signing time: Fri 20 Dec 2024 05:03:17 +0000
ROA not before: Fri 20 Dec 2024 05:03:13 +0000
ROA not after: Wed 10 Dec 2025 05:03:13 +0000
asID: 984
IP address blocks: 154.82.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72698 (0x11bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:03:13 2024 GMT
Not After : Dec 10 05:03:13 2025 GMT
Subject: CN=6764fa95-51a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:bc:70:67:e0:08:e2:52:2a:92:df:ef:e6:
66:cf:9c:95:24:84:d2:29:15:9f:1d:45:32:8f:84:
c2:66:fd:b3:51:43:4f:3c:12:ac:2f:30:bd:df:e5:
7c:84:aa:d7:db:7f:dc:e5:ee:72:3d:1a:0f:2e:b1:
9e:05:ac:bc:c8:94:7c:19:37:4b:b2:d6:b2:b7:1b:
84:a8:d5:8e:50:34:f6:bd:1c:ad:98:78:32:18:38:
64:57:4c:c4:9e:2a:16:3d:b0:52:27:58:e1:5e:ec:
38:bd:b5:09:36:f0:da:51:0b:12:ff:1b:c7:b6:6c:
8f:7c:a4:5a:a5:22:32:8b:d5:1e:a5:8e:30:cd:17:
1a:a0:80:79:04:47:14:02:91:18:bb:93:57:c8:db:
21:5f:3a:1b:fc:2f:42:f8:aa:0f:e2:c1:49:f1:37:
c4:49:5a:61:cf:7e:eb:d3:5b:ee:cb:81:11:a8:cc:
1f:6b:04:d2:44:ec:44:cf:c0:ab:36:56:6d:88:cf:
dc:0c:f6:79:d8:60:fc:05:6e:cb:76:6d:9d:bf:e8:
12:a0:04:66:98:72:70:32:a9:21:a4:f8:aa:61:41:
87:38:ff:d9:d6:d8:49:40:17:0f:ac:2b:41:d2:72:
91:8f:f8:ba:e0:50:a4:5a:bb:ed:85:c9:1f:0e:83:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:17:66:9C:7D:C2:B4:95:B3:A9:3B:F5:6A:DC:90:1F:76:3C:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B98370A4BE8F11EFA98CD889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.170.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b1:e6:54:97:c3:92:14:00:e9:ed:a3:3b:76:52:0a:44:76:
89:22:d1:30:d3:18:69:f3:1f:55:d6:46:5f:2c:aa:64:57:e8:
f6:8a:a1:f9:60:93:d0:48:3a:90:3c:37:f4:13:71:7b:21:7f:
ef:54:20:d5:04:e3:69:56:f1:22:fe:c7:d6:26:90:07:9d:66:
1a:6d:fc:d4:72:ea:07:d6:79:95:91:eb:16:4b:dc:05:f2:d9:
5c:0b:6e:4b:6c:47:ce:86:79:fd:6c:cb:95:9e:93:c9:a5:59:
f9:f1:57:8f:ce:c8:e4:e9:bd:19:5a:3e:99:a5:9f:31:fd:68:
10:6a:b8:50:06:35:04:58:12:a1:32:1f:a5:3f:fc:23:42:b7:
a2:a1:03:47:d5:4d:b3:a5:61:de:48:1c:77:f6:84:1e:ae:a6:
05:fc:34:79:73:5c:60:e4:fc:c8:87:17:72:22:28:7b:c0:38:
a8:b9:5e:c6:2c:47:bc:bf:50:5b:54:71:37:6e:00:ed:3c:41:
33:9f:54:2f:0d:41:ec:99:80:67:5a:cd:eb:fb:20:90:7b:c4:
40:6b:a1:47:4c:03:5c:72:2d:ff:3c:e4:a9:f1:22:ef:bb:7c:
62:f8:40:6e:e8:f8:fa:2e:7a:95:17:d8:cb:fc:12:d8:ce:b7:
ee:77:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:57 2025 by rpki-client