Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF21AF4C3C711EFAB0DC189762E951A.roa
File: BDF21AF4C3C711EFAB0DC189762E951A.roa (raw, json)
Hash identifier: VI4yNL1uaRBMIjxS5tDjRecWI56vYxpAGtW3+pgW1Is=
Subject key identifier: 66:72:92:B0:EF:DE:D8:EC:FC:2F:67:BA:AF:5D:37:97:51:08:9A:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF21AF4C3C711EFAB0DC189762E951A.roa
Signing time: Thu 26 Dec 2024 20:26:53 +0000
ROA not before: Thu 26 Dec 2024 20:26:49 +0000
ROA not after: Fri 12 Dec 2025 20:26:49 +0000
asID: 984
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75746 (0x127e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:26:49 2024 GMT
Not After : Dec 12 20:26:49 2025 GMT
Subject: CN=676dbc0c-f473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:3b:af:a0:b9:52:66:cc:ff:ec:48:0f:9f:
1e:58:2d:69:2f:d4:09:26:43:0c:4c:80:6a:79:dc:
4a:70:1f:25:2d:1d:e7:96:fb:a5:ec:23:ba:71:81:
4f:1a:10:f3:17:b9:ce:bc:6f:47:a6:af:17:2d:61:
43:24:04:ce:27:0d:6a:e0:d6:f7:e4:7c:f6:94:d0:
ec:aa:1a:51:e6:b1:f0:f3:a2:32:53:1f:70:da:e7:
8f:dc:26:f8:62:91:30:f6:2f:07:4a:a3:9f:4b:2d:
cd:f5:e6:46:d7:db:40:ca:e8:60:45:35:28:df:ee:
66:86:75:bd:77:17:e4:e1:d6:ca:67:40:6d:43:79:
d5:94:43:eb:f7:c7:4c:ea:76:2b:bf:a8:4e:78:6d:
a0:ab:b4:a7:16:d1:a3:48:26:d7:a7:59:3e:66:ae:
78:13:97:2b:c8:8f:ad:e7:33:dd:15:16:1c:85:6a:
8c:c7:df:5b:e1:9e:58:7a:9c:60:ad:5c:99:ca:cc:
c1:c4:54:fa:44:7a:92:36:d5:98:c6:cd:8a:eb:d3:
42:eb:ff:b3:b2:24:67:55:9a:ca:74:59:f1:1f:fe:
19:5b:c9:65:d1:ee:c7:50:65:23:24:29:e9:d1:94:
4a:aa:3a:03:34:ac:e4:ca:01:fb:bc:2b:01:94:9d:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:92:B0:EF:DE:D8:EC:FC:2F:67:BA:AF:5D:37:97:51:08:9A:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF21AF4C3C711EFAB0DC189762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ce:7c:6c:26:6b:6a:2c:85:f0:93:7e:05:a4:80:64:bb:2b:
bf:7b:51:24:ca:ae:92:07:ae:1f:8b:b0:22:1b:27:b9:12:08:
10:d9:13:aa:75:18:7c:94:5f:78:b3:90:b9:7a:bc:f9:bb:dd:
1f:cb:6d:e8:b2:76:8b:fe:72:18:ef:f3:e4:d2:48:31:71:ea:
50:3a:29:f5:e0:70:d8:79:48:74:42:7a:d6:ee:69:8e:3d:ae:
49:cf:db:36:12:5a:d2:6b:e6:23:b6:98:0e:f8:12:e4:52:19:
24:d5:21:5e:3f:52:72:0a:ab:f3:22:39:2b:f4:63:2e:12:40:
51:30:f0:d8:14:95:4c:17:1b:a1:53:8d:bc:68:e0:0b:c4:28:
d0:cf:d9:3d:e2:5a:af:4d:2d:03:95:47:49:4f:6c:e0:00:0d:
91:28:3e:86:a8:97:1b:ed:9c:36:89:c8:02:35:7c:59:ed:d9:
5e:a2:ca:c5:b1:49:49:0b:52:cc:b5:e1:05:ff:63:3f:55:2a:
a8:54:ce:24:98:f0:b4:68:37:6f:f8:4a:a5:71:9a:e4:e4:cc:
2a:6e:9a:0e:9f:26:f2:de:fb:fc:54:26:66:99:72:09:d8:b2:
57:b0:1b:40:ce:cb:7d:b2:73:c6:15:d1:0a:1e:98:07:28:3a:
a2:1d:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:06 2025 by rpki-client