Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAA7B42C3CA11EFA3C0269D762E951A.roa
File: EFAA7B42C3CA11EFA3C0269D762E951A.roa (raw, json)
Hash identifier: a6tRC46EIgOQ3i7ybRqPB/u2c03nQL+Zqy6FawboN3E=
Subject key identifier: 25:0F:76:8A:8F:63:D2:81:43:B1:4B:99:03:0E:9C:9F:99:5B:85:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012802
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAA7B42C3CA11EFA3C0269D762E951A.roa
Signing time: Thu 26 Dec 2024 20:49:44 +0000
ROA not before: Thu 26 Dec 2024 20:49:41 +0000
ROA not after: Sun 12 Dec 2027 20:49:41 +0000
asID: 17561
IP address blocks: 154.83.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75778 (0x12802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:49:41 2024 GMT
Not After : Dec 12 20:49:41 2027 GMT
Subject: CN=676dc168-7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:4d:2f:5d:42:43:b0:8d:61:90:1c:d5:5f:
f1:01:30:26:ac:75:52:6a:26:58:a4:60:f9:2e:6e:
c5:05:4b:bc:d6:a7:05:84:88:d3:5c:5a:98:54:d0:
98:54:86:67:cf:00:fa:cb:07:42:89:3f:a9:76:19:
4a:da:2d:35:7f:9e:85:22:cd:9b:7e:f3:b3:9f:15:
67:b3:3e:09:dc:e6:9e:4e:02:d4:b3:58:15:9e:38:
8d:be:4c:b7:70:11:91:2d:b9:a6:15:3f:25:7e:6e:
d0:c2:df:cc:08:48:4b:92:d5:46:d9:c1:09:49:1c:
65:9a:d5:3e:38:08:ca:bb:d8:b5:a7:b9:d4:3a:fc:
73:b1:f8:48:40:e7:68:36:ee:6c:0c:d5:08:48:92:
22:d0:4a:80:7a:2d:3a:6a:0e:fa:36:93:b5:48:ce:
58:b8:6d:74:c0:5d:df:e2:2e:a6:9c:53:35:68:d0:
d7:90:74:28:16:b5:f5:a7:c2:e5:4c:e0:5b:21:b4:
b9:68:4e:50:05:cf:5d:37:7b:51:90:33:0e:98:81:
5f:fb:7b:23:2b:57:fe:22:5a:09:5a:07:e3:6e:44:
b9:07:ad:d0:3d:ec:99:7b:43:9d:d6:1e:84:78:0d:
10:64:29:92:a4:fa:90:39:43:18:52:e5:c4:80:c9:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:76:8A:8F:63:D2:81:43:B1:4B:99:03:0E:9C:9F:99:5B:85:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFAA7B42C3CA11EFA3C0269D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.150.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c4:1d:a2:63:6b:b1:4d:81:5a:1b:bd:68:60:47:ec:0a:6c:
e2:68:26:e6:83:1e:ac:c3:6a:50:24:4c:72:89:7e:2c:da:61:
0d:ca:e2:84:fd:4a:00:69:c9:09:7c:72:10:fe:a5:11:c8:bb:
e8:1b:aa:8f:da:2d:6a:15:e0:c4:17:4b:a4:57:7a:67:12:b4:
70:e8:88:77:19:dd:d2:04:4c:e3:29:9a:ff:52:7b:68:88:cf:
0e:1c:7c:14:0c:11:0f:57:5c:e8:58:40:a9:50:c9:bb:e2:b0:
78:6f:18:7d:10:ce:28:47:4c:c9:e4:b0:00:30:05:3c:b1:16:
50:3b:ce:53:38:45:f3:dc:f8:d6:b6:e8:75:c1:db:db:f8:5c:
83:be:83:04:6a:ea:91:b5:3a:11:10:47:20:be:9d:7e:a0:c7:
85:b6:fe:cf:53:33:8c:3e:00:08:20:73:d9:47:59:64:b3:01:
72:d1:03:66:97:da:20:16:b6:49:49:9d:08:f2:3b:49:85:ff:
74:e4:82:30:e7:05:46:6b:75:09:a3:25:26:67:39:5c:4e:a0:
31:04:c5:37:4a:e4:b1:6f:14:a0:04:e4:48:2f:49:d1:46:9a:
7f:b5:c5:04:0d:be:02:0b:5a:b0:5f:88:0b:5d:d0:16:24:32:
26:09:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:05 2025 by rpki-client