Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9BDBB0F17011EF87408076762E951A.roa
File: ED9BDBB0F17011EF87408076762E951A.roa (raw, json)
Hash identifier: kiRAY0iXQSV2vtHuogy2+7AgvQAp8P2bZIfARCXq9JY=
Subject key identifier: 93:81:92:E8:C6:02:36:2A:49:6A:76:15:92:9F:5D:31:79:75:F4:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9BDBB0F17011EF87408076762E951A.roa
Signing time: Sat 22 Feb 2025 23:01:20 +0000
ROA not before: Sat 22 Feb 2025 23:01:16 +0000
ROA not after: Fri 04 Apr 2025 23:01:16 +0000
asID: 5068
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88749 (0x15aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 23:01:16 2025 GMT
Not After : Apr 4 23:01:16 2025 GMT
Subject: CN=67ba5740-cd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:88:b6:46:07:7c:f6:60:4c:9c:bf:27:17:
07:43:ad:f8:c0:1e:6e:a8:cb:a3:2e:03:09:e4:fb:
77:c6:67:0b:f3:46:32:34:43:90:39:35:f3:13:6f:
05:7f:ac:31:50:3d:0f:20:9b:08:ba:b5:d2:61:dd:
7e:72:b4:36:10:cb:59:0d:16:b3:01:5a:f1:5d:8f:
52:eb:f3:33:be:26:7c:39:84:ec:d7:47:62:a7:9c:
bb:65:31:4a:5b:3c:2e:a2:5a:7c:09:5c:c2:15:35:
44:c0:0e:5c:df:99:70:40:72:c6:a5:a4:62:1e:cf:
44:1a:fc:27:1b:59:90:77:34:f4:91:e8:36:cf:e7:
cc:43:85:c8:d3:af:fd:86:e5:53:ad:5c:e1:5b:b7:
89:cf:f7:0a:32:b7:b4:d2:b7:77:d1:50:5d:f4:ef:
42:ed:17:c5:29:6d:62:c4:25:44:e3:ad:63:c5:5d:
e6:a7:3e:8c:af:23:a7:29:0a:15:d5:3e:b5:83:a5:
2a:67:6e:fd:b0:b5:0c:4c:3e:58:d1:fc:a5:a6:34:
ba:30:ad:3f:a4:f2:2d:ab:06:0e:1b:27:91:b6:38:
b4:46:c7:6b:64:1f:51:0d:0b:af:cf:5f:a0:87:36:
66:9b:61:9f:1d:6c:6f:ad:43:f7:84:90:07:82:e1:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:92:E8:C6:02:36:2A:49:6A:76:15:92:9F:5D:31:79:75:F4:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9BDBB0F17011EF87408076762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d9:8f:91:68:10:16:73:e9:d1:88:68:db:7c:d9:4b:15:0c:
8f:e5:26:ee:c7:e7:54:62:0e:30:c6:57:b9:96:ce:5a:d1:26:
7f:09:e0:f4:5a:33:93:29:6d:75:58:58:bc:76:e4:ee:d3:e9:
c9:32:c5:c1:96:24:58:ec:a2:bd:e6:52:f7:5e:7e:dd:ed:f3:
63:3b:de:d3:52:10:50:ef:44:75:51:74:8e:ae:91:d8:c4:1b:
00:49:a1:a0:76:38:b0:09:39:a3:e1:86:38:ef:18:bc:7f:3e:
a9:03:9e:75:10:10:85:b3:2c:74:eb:ed:20:30:8b:35:f9:47:
b5:86:6b:1c:49:33:dc:97:d9:5a:a4:4b:a8:f3:67:0b:b5:ea:
05:d8:4c:cd:a0:45:1c:95:7d:b0:96:29:23:48:57:22:f8:9d:
67:a3:45:c0:29:3c:95:99:7d:26:0f:44:08:b6:d5:7e:cc:09:
b4:5b:38:3d:f9:e2:db:22:76:55:63:a2:d2:30:95:a8:6f:15:
85:47:1c:04:9e:ba:65:a8:67:6b:33:1d:b6:0f:50:b3:a6:02:
1b:ca:4c:8b:b1:9d:95:dc:5c:c0:78:3c:02:ea:b4:32:3c:41:
f3:e4:34:d3:4a:d5:0b:03:10:55:ed:d2:3b:f6:4a:6c:c1:39:
81:08:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:04 2025 by rpki-client