Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB11C7BAC0C611EFB652B362762E951A.roa
File: CB11C7BAC0C611EFB652B362762E951A.roa (raw, json)
Hash identifier: bNrPDHJOaSP5AQ90UBgugEsoT+8970/9aWiwUJM5X3g=
Subject key identifier: 94:7C:17:63:0C:53:6B:9B:48:31:D3:8E:82:D9:9A:54:EB:1E:F3:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB11C7BAC0C611EFB652B362762E951A.roa
Signing time: Mon 23 Dec 2024 00:42:31 +0000
ROA not before: Mon 23 Dec 2024 00:00:28 +0000
ROA not after: Wed 10 Dec 2025 00:00:28 +0000
asID: 984
IP address blocks: 154.82.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73150 (0x11dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:28 2024 GMT
Not After : Dec 10 00:00:28 2025 GMT
Subject: CN=6768b1f7-5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:40:f8:6e:9e:11:32:2d:24:5d:55:25:25:
3c:10:58:67:96:9d:2a:6c:1b:dc:f0:27:5a:6a:8c:
97:ab:ec:8f:c2:4c:74:77:d2:a2:3f:ea:59:88:46:
be:1e:f8:a5:d7:60:d6:11:ad:f7:10:9e:b9:53:c6:
b9:6d:62:22:b5:0a:7d:f4:9e:42:db:94:4a:b8:13:
a6:6e:f5:db:79:3d:14:d1:99:69:81:c8:eb:44:2e:
5a:55:e4:71:82:6f:0b:2d:e6:1b:b8:79:9d:e5:23:
a1:f1:2d:a6:3f:8f:03:dc:04:e2:35:6f:06:02:df:
c2:2f:14:70:c6:ea:64:ff:ab:3b:8c:b5:94:bf:f6:
d7:be:69:09:78:c5:a8:3d:7d:1a:9a:f0:21:cd:7d:
d1:d7:21:c6:48:cd:53:c5:ef:1c:2a:ce:13:a6:66:
2b:1b:60:07:32:e8:99:57:dc:d6:a3:53:88:38:f9:
5d:dd:6f:92:7d:17:66:93:e6:1f:b3:68:e7:a7:ed:
83:47:a9:9d:cf:3c:a0:cc:4d:fc:09:2f:f7:42:d6:
8e:19:b0:8a:7b:f9:cc:d2:11:7e:c1:2e:1f:d3:48:
c8:7b:6c:ee:10:21:c8:5b:b8:76:eb:93:89:62:81:
74:13:96:3c:7d:cc:13:29:d3:ce:cd:64:10:c5:8c:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7C:17:63:0C:53:6B:9B:48:31:D3:8E:82:D9:9A:54:EB:1E:F3:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB11C7BAC0C611EFB652B362762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.210.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d4:40:4c:06:69:75:35:85:32:1f:a1:c3:7c:94:82:fd:85:
eb:c8:e2:80:5c:35:74:9d:99:a6:bb:23:99:d9:6d:57:d7:91:
72:cc:91:7e:9b:e7:bc:86:a8:e6:a0:8b:ab:43:13:03:58:f0:
02:b7:c8:f9:f5:c9:10:e6:28:97:93:64:d5:99:d4:29:c4:32:
b1:96:c5:9a:4f:bc:9f:dd:ae:48:24:13:88:34:93:02:1d:12:
f3:b0:bd:48:4a:3a:28:e4:01:00:16:c6:fe:c6:1f:6f:3a:ce:
35:6a:c3:12:16:bd:ea:2c:18:81:00:41:62:0f:0b:8c:62:d4:
91:9b:02:1a:0c:0f:40:8e:c5:73:c4:08:67:a0:93:03:10:83:
b8:72:1b:83:c0:53:7f:1e:4f:01:77:83:fa:20:4b:6a:6a:08:
f1:3f:0b:ab:d6:19:46:67:8f:9a:44:dd:12:14:c4:3a:04:e2:
31:cf:f0:51:5e:20:07:94:0e:bd:95:c0:9b:7e:2f:9b:9f:c8:
c4:66:47:ca:18:17:3a:97:8e:71:c1:2f:19:b2:3c:3e:84:ba:
e9:ca:ad:1f:ff:bd:af:3c:f1:19:f8:bb:a9:83:04:fd:43:59:
43:9b:eb:81:2a:76:38:8b:2c:ed:73:28:08:41:cc:cf:c8:24:
fa:19:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:02 2025 by rpki-client