Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42B930C3CA11EFB307C09C762E951A.roa
File: BD42B930C3CA11EFB307C09C762E951A.roa (raw, json)
Hash identifier: Bxvmv/7BRc3HI0tLJPSDOckEw2SxOOwgVDL0cK5pBlU=
Subject key identifier: 79:A1:E7:D4:2D:FB:EC:B4:24:1E:04:5C:B1:B8:4B:F2:DB:32:14:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012800
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42B930C3CA11EFB307C09C762E951A.roa
Signing time: Thu 26 Dec 2024 20:48:20 +0000
ROA not before: Thu 26 Dec 2024 20:48:16 +0000
ROA not after: Fri 12 Dec 2025 20:48:16 +0000
asID: 984
IP address blocks: 154.83.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75776 (0x12800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:48:16 2024 GMT
Not After : Dec 12 20:48:16 2025 GMT
Subject: CN=676dc114-e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:49:e2:73:da:d3:1f:45:42:6e:c0:bf:d2:
8a:da:6f:82:cc:41:7f:0d:31:52:2b:95:8f:f3:4f:
e1:34:b2:de:cd:cc:e5:c9:43:0d:29:a8:13:78:d3:
ed:5e:4c:d3:29:a9:04:a3:8a:d7:74:79:d7:d1:35:
b7:d3:c1:a7:f9:fe:20:7d:78:38:f4:2d:06:23:9b:
c5:be:93:a4:6f:6d:f2:40:62:18:e7:c8:8a:8d:84:
ca:71:4d:19:88:ab:ae:59:39:b3:04:0b:71:60:81:
14:b5:41:30:95:8b:14:d2:88:83:a1:64:f6:70:ab:
51:d5:ae:00:4b:11:f8:c6:2e:56:b5:63:10:94:4d:
a5:5c:f9:b1:6e:e0:f5:d2:bc:97:35:8d:f0:bf:ed:
d8:3c:f5:8c:f8:98:b6:53:25:4c:41:51:87:1e:0d:
9c:b8:53:24:b2:ae:b1:76:99:ab:9a:9e:91:cb:c3:
d3:d1:b3:62:15:db:19:2d:2c:5c:bf:8c:dd:9f:c1:
41:9d:77:b9:8a:d5:6a:56:47:fb:e9:56:00:04:37:
bd:4a:82:03:b8:09:e8:4a:5d:b4:20:9b:56:82:71:
db:97:32:88:8e:4c:2b:33:ea:11:8b:36:3e:db:b6:
cd:c0:96:c9:16:00:5b:ed:9c:e8:84:21:78:6c:b3:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:E7:D4:2D:FB:EC:B4:24:1E:04:5C:B1:B8:4B:F2:DB:32:14:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42B930C3CA11EFB307C09C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:55:0a:fe:ae:89:f7:21:07:28:10:8d:aa:6f:21:f9:3d:8e:
53:24:49:fa:9a:3e:78:04:58:32:ea:4e:8f:c2:3e:57:20:15:
90:4a:41:3e:b7:64:d3:50:85:e6:a6:bd:80:f3:17:4c:d0:d4:
6d:b3:8b:8d:88:ef:5b:c8:68:a6:ad:37:e8:e4:dd:1e:8e:82:
ef:30:18:32:2e:42:2c:66:f9:08:cf:9f:34:b1:e4:e5:67:2d:
c9:96:b4:8a:54:dd:18:0b:2d:51:40:e9:53:13:b7:72:ff:c3:
ae:33:2b:1a:56:84:e2:f2:75:78:f8:08:5d:e3:24:f3:34:db:
4c:2e:2a:77:41:da:66:bc:1f:d6:b4:10:83:0b:05:e8:6b:3a:
b3:fd:87:45:e5:da:83:5a:1c:b0:02:5a:23:a7:19:24:5d:71:
a4:7f:8f:94:33:ad:2d:43:c1:aa:b8:2b:4e:28:6c:91:4e:84:
9b:25:e5:da:78:a0:35:46:97:ae:82:67:c2:25:25:2f:93:a7:
74:23:3a:d5:51:8c:73:7e:28:be:fe:6c:41:28:c8:64:9b:94:
57:af:3b:d9:c2:13:0b:57:8e:31:b7:57:8a:87:43:ef:3c:91:
63:de:c7:b5:6d:5d:18:14:ed:f5:1c:41:ef:e2:20:e1:74:3e:
ad:11:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:56 2025 by rpki-client