Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F495B5A2BEDB11EFAB72EA61762E951A.roa
File: F495B5A2BEDB11EFAB72EA61762E951A.roa (raw, json)
Hash identifier: 6LvHP9g+Meyo6wqsr2uOLpQPL5pQayyFBDl7DfAJly4=
Subject key identifier: 8D:03:6F:CD:5A:4E:51:CB:9F:25:1B:E1:07:0E:04:AC:1B:E4:74:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F495B5A2BEDB11EFAB72EA61762E951A.roa
Signing time: Fri 20 Dec 2024 14:08:58 +0000
ROA not before: Fri 20 Dec 2024 14:08:55 +0000
ROA not after: Wed 25 Jun 2025 14:08:55 +0000
asID: 18013
IP address blocks: 154.84.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73000 (0x11d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:08:55 2024 GMT
Not After : Jun 25 14:08:55 2025 GMT
Subject: CN=67657a7a-bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:cf:ae:6c:a0:9c:0f:be:0b:85:ed:d8:74:
f1:89:b2:25:8d:b0:1e:71:b5:f1:8e:4b:4a:b6:1b:
a4:c9:19:13:37:99:f9:c6:1a:dd:46:2d:d8:29:7f:
ff:d8:ff:f9:b6:dc:1c:7a:4a:a4:8b:30:ff:48:70:
46:e4:1c:30:11:a2:c0:b5:86:e6:37:dd:ee:84:9c:
f1:ea:f0:10:d3:bc:5e:61:70:5b:42:4f:42:69:bc:
5f:0c:d6:ab:cf:d3:3f:ce:70:db:a8:2f:dd:aa:d7:
09:89:83:6c:83:4a:56:b9:67:6e:a3:c9:ec:4e:1a:
a7:ab:5f:ba:9e:4c:29:f8:21:52:be:eb:43:14:05:
bd:cf:de:43:20:c4:ae:0a:1e:60:90:90:97:61:51:
e2:31:e5:66:47:9b:2b:0c:65:b1:18:c1:dd:7b:a2:
18:1f:c5:bd:a7:91:fd:e6:ea:77:fb:dc:65:32:8c:
d4:d6:6d:95:fa:06:cb:3c:d3:13:7c:46:96:df:e8:
d7:45:72:3a:08:d2:4f:d9:0e:3c:f8:39:ac:8b:99:
4e:6e:20:dd:33:43:b4:3f:f9:3b:c5:a9:51:69:25:
b6:e1:e7:17:b4:8f:31:6e:e2:76:cc:56:60:1d:10:
58:27:02:6e:40:76:aa:e1:6d:55:1e:7a:e9:62:b4:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:6F:CD:5A:4E:51:CB:9F:25:1B:E1:07:0E:04:AC:1B:E4:74:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F495B5A2BEDB11EFAB72EA61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.56.0/21
Signature Algorithm: sha256WithRSAEncryption
86:6e:bb:71:7e:f3:7d:7f:f1:a2:75:8d:26:b1:d3:ec:92:6e:
46:68:3d:ae:dd:a0:57:0c:26:b5:d1:8e:69:0f:2e:67:11:06:
26:2e:14:56:2f:f7:24:b2:2f:3e:14:23:4e:72:b9:43:26:c6:
c1:4d:f4:55:15:32:56:51:c2:42:6e:5a:08:63:ec:de:a5:06:
f9:68:73:c0:87:bb:66:ae:59:99:03:de:52:e3:ec:1c:82:df:
fe:17:57:50:f4:34:12:34:2a:96:2e:70:0f:0d:40:4d:0c:ba:
4b:e5:e7:dd:17:ec:4d:fd:29:ec:66:81:d6:ec:41:fa:97:b5:
f5:2a:6f:bc:47:ac:d3:47:b8:90:b5:14:8d:05:09:f8:cb:cd:
b7:8d:b9:e1:0d:63:b1:14:ab:ae:f8:ad:a3:2c:93:72:d5:49:
fa:2a:df:d8:1c:46:77:cd:50:d4:42:46:16:21:9c:0a:0e:8a:
1c:dc:16:a2:a0:1f:96:a9:09:34:ba:3b:10:7a:0d:e0:91:24:
f0:f2:4c:d5:47:b8:9e:f6:3c:f9:f8:78:4c:a6:28:78:ae:4f:
8d:ca:df:74:a7:bd:64:14:63:3a:e4:c7:67:52:ae:1e:35:fd:
4b:08:48:11:93:76:33:bb:e1:35:05:cf:b0:7e:ca:00:54:a7:
95:20:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:20 2025 by rpki-client