Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDDE63A6C0D011EF93553FAE762E951A.roa
File: FDDE63A6C0D011EF93553FAE762E951A.roa (raw, json)
Hash identifier: OdSOGWz4DYB1I+mZX9+ppkgGLIPL5JsN93A6Up7JzM8=
Subject key identifier: 59:2F:2C:8A:31:2D:8E:D8:BB:D6:6E:4D:77:73:60:09:15:F6:A6:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDDE63A6C0D011EF93553FAE762E951A.roa
Signing time: Mon 23 Dec 2024 01:55:32 +0000
ROA not before: Mon 23 Dec 2024 01:55:28 +0000
ROA not after: Wed 10 Dec 2025 01:55:28 +0000
asID: 984
IP address blocks: 154.83.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73268 (0x11e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:55:28 2024 GMT
Not After : Dec 10 01:55:28 2025 GMT
Subject: CN=6768c314-a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:99:7f:85:50:97:65:53:15:c9:08:09:b7:
d0:5e:7d:14:c9:59:74:0e:5b:19:49:74:a1:c9:ea:
8b:a6:63:12:45:33:1b:0e:73:bf:ae:be:5f:38:69:
b4:68:40:1d:93:62:0a:cd:ee:8b:21:e7:0b:ff:63:
93:13:d5:cd:29:1c:06:2c:9c:e2:0a:33:44:9f:ee:
8f:99:6a:94:92:40:44:54:8e:2e:8c:47:34:d6:23:
5b:69:a0:f2:ba:76:7e:eb:53:76:0a:65:ac:9b:aa:
cb:5a:1d:97:17:3c:9a:f4:8c:81:22:ac:06:0a:7a:
53:f9:8d:b3:29:5e:d6:b8:f7:8a:70:2d:35:c6:5c:
ff:32:cf:9a:db:c7:06:9e:1f:b2:e9:a9:ae:32:81:
07:8b:9d:32:62:90:40:53:99:15:6d:85:d8:b7:6d:
71:ad:06:36:fe:0d:eb:3e:bb:f4:f4:2d:ae:e9:f3:
76:7f:a9:29:1b:14:6e:c7:55:d9:3c:cd:bc:b2:93:
ce:12:13:74:95:2c:d5:ad:41:aa:d7:7c:6c:b8:86:
82:02:f8:f2:d8:ec:a9:e0:4b:e6:0a:70:2d:74:f8:
c9:ff:b9:c6:da:a0:0f:1a:68:71:e8:f4:8f:97:fb:
a2:70:f6:40:86:e3:1f:d3:4e:fa:78:c6:b4:77:4c:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2F:2C:8A:31:2D:8E:D8:BB:D6:6E:4D:77:73:60:09:15:F6:A6:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDDE63A6C0D011EF93553FAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d3:d2:28:80:a7:51:eb:59:6f:f0:2f:e9:79:f2:d3:1f:0f:
17:43:e5:d5:eb:77:01:b0:f0:9b:5d:5f:79:df:91:56:44:7f:
12:8f:fd:e2:98:8b:78:8f:b5:fd:f3:d9:ac:3a:2b:78:b3:ee:
12:da:b1:b6:e6:90:62:e4:a6:d4:52:aa:c9:69:4b:44:a5:0d:
39:df:3d:20:8f:9c:80:b2:20:6c:f6:e2:3f:66:d3:92:bd:92:
63:f5:de:7e:9c:34:7d:5b:97:0f:6b:2d:89:1e:8e:f2:88:b3:
14:a7:fd:5a:77:77:26:17:4e:46:ee:12:80:af:ed:7c:0b:3b:
41:74:ba:db:f9:0d:b5:0f:33:ae:5e:19:b0:c1:37:88:a6:5c:
7a:48:9a:61:a3:28:10:38:11:ed:3c:f7:33:76:e6:16:c4:54:
63:04:2a:bc:48:fa:d4:87:eb:44:65:f5:f7:96:90:45:ca:91:
63:fd:0d:58:ca:e3:fe:1d:34:4e:bc:7c:c2:50:45:47:24:f3:
b0:42:03:69:5c:c8:18:24:ce:3d:00:5e:08:f4:95:38:4b:3d:
3a:16:6f:bc:e1:4a:9f:0a:14:07:1a:cb:42:ee:05:0e:cb:bc:
61:4b:c6:5e:1f:ae:33:4a:7d:61:a8:f0:2a:22:af:1f:97:5c:
ce:05:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:43 2025 by rpki-client