Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF60D0AC3CD11EF938F72AF762E951A.roa
File: BAF60D0AC3CD11EF938F72AF762E951A.roa (raw, json)
Hash identifier: MBCu7tuZI+67YSEbTGIw3NmcxFEGce3QhrD/jpp+r4Q=
Subject key identifier: 95:4E:24:F9:F5:8F:1F:CC:B3:FC:42:E4:CB:FA:FE:06:0C:10:AE:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01281E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF60D0AC3CD11EF938F72AF762E951A.roa
Signing time: Thu 26 Dec 2024 21:09:44 +0000
ROA not before: Thu 26 Dec 2024 21:09:41 +0000
ROA not after: Sun 12 Dec 2027 21:09:41 +0000
asID: 17561
IP address blocks: 154.83.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75806 (0x1281e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:09:41 2024 GMT
Not After : Dec 12 21:09:41 2027 GMT
Subject: CN=676dc618-b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:e0:af:1c:4a:42:98:a6:03:40:d2:51:75:
4d:ae:40:bf:49:ed:85:3b:46:e0:b1:e1:8b:ac:ea:
fa:7a:5b:36:78:c7:39:6f:2a:48:7a:3d:d8:72:3c:
0c:93:4f:0b:2c:62:3c:6b:c4:d9:e0:91:5b:48:13:
a1:20:d1:a1:10:3c:ed:cf:70:1f:19:cf:b8:ff:8e:
17:1d:3c:7b:f1:8f:44:42:84:a8:ac:31:65:de:48:
a9:c2:b3:79:e9:db:02:6b:04:c9:de:f4:8c:21:39:
0c:4f:5f:54:55:6e:02:80:eb:52:40:dd:39:e4:d5:
d7:ff:fd:d0:f6:75:71:ad:81:27:c0:c0:4d:b3:ee:
61:57:16:e1:ff:17:31:04:29:46:b9:74:7c:a3:ce:
f0:aa:09:e0:39:ed:73:e6:d1:1d:dd:e1:1c:7c:92:
c6:35:28:1f:d6:58:54:74:43:46:18:80:25:a0:06:
71:78:10:dd:ab:cc:a8:c8:c0:74:b0:d4:14:1c:c5:
9e:65:3c:f7:60:ac:37:0d:e5:47:83:d3:e3:69:43:
f1:6b:e6:9e:41:01:78:65:87:aa:30:c4:b5:92:a3:
68:18:e2:51:51:c8:a3:52:ec:d3:ca:68:71:24:ce:
d5:5c:58:26:83:1c:ac:b4:70:c6:4d:a3:d8:c2:32:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:24:F9:F5:8F:1F:CC:B3:FC:42:E4:CB:FA:FE:06:0C:10:AE:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAF60D0AC3CD11EF938F72AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7a:88:7d:4c:59:29:1d:49:39:fd:59:36:9c:06:fb:a0:ae:
60:03:6b:3a:4a:55:cd:db:09:1c:c1:4b:c5:c5:7c:26:9f:ad:
c4:4e:45:4d:e5:c4:16:93:2c:96:9a:9b:9c:38:e9:43:83:0c:
7e:71:17:68:d1:d0:57:8d:4a:3d:c3:b5:61:c5:e5:a3:f7:8c:
52:be:45:7a:1e:c0:87:22:d4:f3:7b:b0:c4:dc:96:0b:20:24:
0b:b6:25:af:44:60:64:3b:cb:b0:15:05:0e:3b:67:31:ee:6f:
69:10:ef:d9:76:94:ad:ad:11:8a:57:25:8d:03:35:3c:16:7f:
ab:ac:d9:16:be:40:87:85:f7:cc:be:1d:9e:00:c5:aa:b7:59:
6b:e2:41:68:d1:f6:f2:9b:ab:22:e6:68:1f:a9:c8:81:94:41:
eb:c8:5e:32:6e:e9:70:40:47:ee:bf:2c:ab:6c:b0:72:b1:f2:
00:de:91:3b:de:f3:aa:16:e7:20:1d:61:c7:0b:7e:a8:3d:34:
4a:ba:dd:64:c1:c4:81:cb:df:85:a3:23:da:f7:ba:5e:a7:6d:
23:33:18:b4:e9:b9:c4:bf:87:68:f3:ed:fc:fa:ff:1f:ca:58:
0f:aa:87:01:77:dd:73:f6:89:00:4a:08:60:82:7e:42:1f:b6:
c4:7b:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:43:35 2025 by rpki-client