Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0A0232F35911EF8987B29B762E951A.roa
File: BA0A0232F35911EF8987B29B762E951A.roa (raw, json)
Hash identifier: oM19YX0tihde/7Xp8yx7ryRVV0gdJSA1ehJqB4wTHW4=
Subject key identifier: C9:92:5C:AF:88:83:6C:80:33:9B:09:49:E2:28:44:ED:FC:8C:5F:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0A0232F35911EF8987B29B762E951A.roa
Signing time: Tue 25 Feb 2025 09:20:17 +0000
ROA not before: Tue 25 Feb 2025 09:20:13 +0000
ROA not after: Sat 19 Feb 2028 09:20:13 +0000
asID: 17561
IP address blocks: 154.83.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89588 (0x15df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:20:13 2025 GMT
Not After : Feb 19 09:20:13 2028 GMT
Subject: CN=67bd8b51-e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:e2:47:7a:4b:60:30:78:a6:15:3f:a7:06:
3b:37:c2:87:73:63:8f:57:2b:82:47:de:e5:43:9c:
67:28:ff:95:1c:8c:c4:49:b8:6c:d1:0a:db:da:fd:
6a:1c:c4:97:58:cc:c3:20:14:03:c1:11:25:85:3d:
38:b8:22:0d:8e:29:4a:dd:bc:40:ac:a6:c0:65:b6:
6d:f7:d8:9d:a2:32:8a:d6:7d:73:39:cc:d7:89:94:
2f:45:83:ac:70:6c:40:d5:61:28:32:de:ec:81:36:
5c:80:9b:17:ea:fa:b5:f1:8d:cf:17:a8:7c:d3:ba:
dc:58:ee:c0:5d:09:47:1f:80:54:b8:df:34:b9:71:
0e:53:88:85:8e:d5:5e:9e:2f:d4:50:47:51:ae:38:
f3:3c:8d:64:25:69:d0:4c:e0:ba:9e:c5:2d:df:7f:
b7:a3:07:53:32:55:77:13:4b:ce:fe:d4:08:01:15:
a2:d4:5c:19:1a:c8:90:d3:0e:fe:13:ed:36:59:4a:
92:53:3b:8d:b6:82:4b:2e:e1:c7:29:e3:8f:d8:7a:
83:b1:8f:f1:a0:ec:d4:dc:76:fd:4b:91:c4:aa:27:
a6:88:d8:1b:6b:24:62:d7:d2:a1:3a:16:3a:52:d7:
60:7f:4b:fa:ed:a2:b4:3c:68:e3:30:8b:2a:94:9a:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:5C:AF:88:83:6C:80:33:9B:09:49:E2:28:44:ED:FC:8C:5F:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0A0232F35911EF8987B29B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d2:63:d5:29:e1:91:99:b6:81:e9:11:e7:d3:ae:f5:63:ef:
17:3b:33:6a:bf:b5:6a:ae:ee:7d:e5:54:8a:70:9d:ff:25:18:
ba:56:d0:30:07:eb:7e:a5:9c:9b:da:dd:b1:4d:a8:5e:68:c6:
e5:68:ea:10:59:29:4a:6b:23:f7:e7:0d:82:3c:8e:8f:18:b2:
c0:89:6c:c2:fc:7e:c7:dc:77:e4:f8:f5:ef:84:32:56:9a:12:
69:b4:9e:ea:f4:ee:b0:ad:d2:1b:a9:d0:7c:31:22:f0:cc:a2:
ef:82:25:08:8f:ff:a3:14:d0:2e:cf:70:55:f3:b3:43:79:59:
c8:84:42:7d:d5:cf:62:19:8e:51:14:e7:8a:67:13:f7:98:ca:
70:cb:ad:1d:04:6d:d2:f7:71:5f:4a:0e:59:10:e5:ef:f3:69:
31:26:91:59:96:66:76:ba:27:48:07:12:84:12:90:93:f8:c0:
bb:43:da:17:76:98:91:3a:e3:e9:a9:84:89:e5:41:4b:c1:74:
4e:83:d9:62:0d:af:75:a4:d0:2a:78:51:5d:82:5a:5c:9d:57:
26:51:01:75:43:ea:bb:24:b6:2b:a3:df:19:f3:82:8b:6c:c1:
db:49:2d:09:78:86:f8:26:bb:c9:bb:eb:35:77:8b:f5:d5:19:
7a:14:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:47 2025 by rpki-client