Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B8D896C40711EF8A3102B0762E951A.roa
File: 07B8D896C40711EF8A3102B0762E951A.roa (raw, json)
Hash identifier: 3y3Gfjb0JOQH9lujDvl8iNEbE+b7QcSMGkH6xc67X8I=
Subject key identifier: 71:FB:52:1D:92:94:F3:06:03:CD:99:48:DC:0B:BA:1B:7C:92:CA:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B8D896C40711EF8A3102B0762E951A.roa
Signing time: Fri 27 Dec 2024 03:59:54 +0000
ROA not before: Fri 27 Dec 2024 03:59:51 +0000
ROA not after: Fri 12 Dec 2025 03:59:51 +0000
asID: 984
IP address blocks: 154.194.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76011 (0x128eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:59:51 2024 GMT
Not After : Dec 12 03:59:51 2025 GMT
Subject: CN=676e263a-94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:1a:bd:e7:c0:18:97:dd:09:37:61:b9:5f:
16:7a:b2:cc:4e:41:14:75:54:7e:fa:1f:db:b9:e5:
64:d6:5c:d1:cb:0b:18:e4:01:35:13:a0:96:5b:0c:
dd:7d:4f:0a:97:f2:0a:11:1c:da:7a:11:7c:94:36:
76:ce:d8:68:aa:fb:2d:c7:2e:a1:a2:7e:63:c6:76:
c9:fc:48:45:c2:c7:95:fc:d5:cb:69:39:d6:61:ad:
44:e0:1a:4c:a1:0f:13:dc:f3:81:b0:c2:cd:2c:2c:
4d:45:2a:bb:ad:1a:07:5c:ab:94:b5:fd:ec:16:1a:
db:c9:9b:c7:b8:16:20:72:7d:46:a3:de:aa:30:84:
07:7b:ff:df:9e:5c:2a:92:d0:1d:c8:a0:b2:b5:5b:
be:10:0a:50:7e:8b:97:00:9c:e9:50:58:47:36:b0:
ef:98:9e:6d:fd:ed:77:fc:b3:82:95:d9:69:01:c6:
96:29:f3:3f:d5:ef:1d:f1:e8:43:cc:11:8d:18:7a:
de:68:c2:46:d2:0e:9d:37:27:ac:7b:bb:a0:16:31:
e0:0d:57:b1:4b:d7:fa:4e:d1:40:32:f2:af:e3:76:
fc:99:1b:94:30:10:a4:ad:e1:db:71:c2:45:33:85:
51:93:0d:16:4a:7d:34:26:8a:ec:bc:fc:4f:e6:7f:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:52:1D:92:94:F3:06:03:CD:99:48:DC:0B:BA:1B:7C:92:CA:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07B8D896C40711EF8A3102B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.49.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:fa:8e:b0:d6:43:d0:56:2a:8f:81:ea:bc:20:01:4d:d9:e7:
36:98:41:ee:47:00:43:80:33:a6:ec:3a:26:f9:9d:35:1f:f4:
a5:34:90:0a:d2:f1:db:ed:22:1d:a1:be:14:38:f8:55:e2:42:
3e:29:57:d6:69:da:b5:18:20:46:a5:d8:e2:9c:3f:49:e9:2f:
56:ca:83:c1:32:a8:c2:e0:8f:ef:d5:60:47:b9:78:40:ff:71:
46:f9:e3:16:de:4f:43:c5:72:d8:b7:5f:d1:c8:c7:5d:cf:be:
ea:7f:83:f6:1e:57:8d:e6:ed:5e:36:97:25:58:5c:a1:c3:d8:
08:f8:93:78:9a:d9:73:46:c3:5c:c4:e7:9c:a8:7e:5d:db:06:
ef:14:96:17:9d:67:8b:42:a0:0d:d9:dd:d8:fa:76:37:9a:5c:
a8:9f:6c:cd:2c:ad:2d:bf:c5:3c:24:79:5e:d8:e1:fe:02:63:
db:48:8d:c4:78:35:29:a7:6a:26:36:82:76:f7:ec:5e:56:8c:
8f:b9:ea:4b:8b:39:07:cc:9a:29:75:9c:0d:ec:3d:21:cd:ea:
28:fe:40:44:2f:ef:7d:3f:0d:b0:a1:e0:2a:44:55:5f:d0:cb:
ed:5e:e8:6e:fa:43:74:58:0d:f3:97:3d:02:0d:22:47:b2:ff:
d5:ce:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client