Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D869C61AC0D011EF956D11AC762E951A.roa
File: D869C61AC0D011EF956D11AC762E951A.roa (raw, json)
Hash identifier: ike+6fD32IdtpVoxQnTdnCe6wR3wcey6Qe65gE61cSM=
Subject key identifier: 87:65:A4:48:2A:10:8D:A2:FC:D8:55:65:EE:6B:8A:62:04:79:0B:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D869C61AC0D011EF956D11AC762E951A.roa
Signing time: Mon 23 Dec 2024 01:54:29 +0000
ROA not before: Mon 23 Dec 2024 01:54:25 +0000
ROA not after: Wed 10 Dec 2025 01:54:25 +0000
asID: 984
IP address blocks: 154.83.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73266 (0x11e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:54:25 2024 GMT
Not After : Dec 10 01:54:25 2025 GMT
Subject: CN=6768c2d5-3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:49:78:c3:29:66:cf:57:8f:0a:01:26:b7:
ba:5a:6a:35:cc:af:5d:a6:dd:4b:3b:53:d0:92:cf:
a7:27:34:3e:e8:da:34:20:43:19:0f:b0:93:af:cf:
4e:1d:fa:16:79:7d:12:2e:76:63:09:05:73:52:fe:
35:2f:ad:c1:4f:0d:c1:37:6b:98:64:cb:8f:d8:82:
c2:e4:77:9c:cd:c0:e9:84:7c:49:ef:17:45:a6:a3:
f8:e6:09:b6:c8:2b:f9:0e:a7:c9:c4:b1:db:67:ad:
1f:2d:69:23:4b:15:a3:e9:a4:cf:bd:ae:17:33:f8:
d6:e3:82:09:d3:9f:bb:bb:3f:6d:e4:22:09:04:66:
f3:b9:c1:98:ad:88:86:11:7d:0c:23:77:8b:15:04:
c1:43:23:0d:16:56:4a:4f:3f:3c:e7:da:f7:f9:25:
ae:d5:35:3f:01:d6:db:b8:46:f2:3d:e9:4b:40:b1:
f2:1f:de:dd:4b:71:9a:f8:a9:a1:f7:9b:34:f6:aa:
e3:20:c3:bc:a5:a1:d1:63:d2:fd:3f:22:97:3c:48:
9d:c0:c1:b1:e7:a6:db:40:b0:e4:9e:22:f8:ac:6c:
13:55:c0:7a:2d:57:07:cb:8a:b8:e5:42:1b:d3:96:
1c:ea:5e:59:e9:b8:98:be:aa:64:77:1d:99:f9:33:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:A4:48:2A:10:8D:A2:FC:D8:55:65:EE:6B:8A:62:04:79:0B:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D869C61AC0D011EF956D11AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.100.0/24
Signature Algorithm: sha256WithRSAEncryption
68:36:e4:12:38:bb:4e:bf:bd:59:ec:61:7b:df:e5:98:7c:34:
9c:eb:55:4a:2c:09:33:95:35:6f:47:37:85:30:10:f4:2c:63:
b1:10:af:1e:90:a3:ec:25:60:5d:b8:6f:88:02:fc:18:f7:d0:
20:53:ff:51:f6:db:ce:a4:cf:d0:38:2e:f2:36:b5:02:6f:d8:
ca:e8:3e:ee:d2:79:79:73:2a:0f:a1:41:22:5c:41:80:26:9d:
d5:95:7c:9d:2d:df:6f:ff:6f:66:21:31:d9:07:a5:af:2a:e6:
98:16:d7:45:d9:11:9e:c3:b9:c4:ed:9e:24:9f:19:98:d8:55:
41:e1:c9:64:4f:7b:81:34:f5:29:9f:f7:e4:6d:ce:1c:d1:ee:
8b:75:e4:63:f9:1e:d1:27:0a:e1:33:4e:5f:bd:eb:57:16:6f:
96:51:6b:cf:89:65:d5:c0:b4:ea:bd:4a:57:30:d5:6e:6b:c7:
15:ae:8a:79:ea:05:e1:b2:23:9e:a7:40:ce:d3:f9:ff:df:f4:
c2:f6:11:d3:4b:8f:3f:25:8a:7f:7e:d4:8b:ff:85:c5:a1:48:
c2:e0:7b:48:51:c5:8e:38:65:e3:dc:12:58:9a:70:a6:7b:27:
a0:92:cb:bc:fc:df:f6:fb:08:4f:a8:ba:6f:0a:ee:15:a0:55:
81:ff:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:29 2025 by rpki-client