Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0974BA72C8BE11EF9E41EBA3762E951A.roa
File: 0974BA72C8BE11EF9E41EBA3762E951A.roa (raw, json)
Hash identifier: NV2g5kmM7IO4HItTHWq3eruYhxAkY/GmfdJdddtwo60=
Subject key identifier: 0B:80:B2:BE:41:F0:A8:7A:4A:48:50:14:D3:44:E8:1D:97:3C:39:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0974BA72C8BE11EF9E41EBA3762E951A.roa
Signing time: Thu 02 Jan 2025 04:00:00 +0000
ROA not before: Thu 02 Jan 2025 03:59:56 +0000
ROA not after: Mon 13 Dec 2027 03:59:56 +0000
asID: 17561
IP address blocks: 154.221.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78312 (0x131e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:59:56 2025 GMT
Not After : Dec 13 03:59:56 2027 GMT
Subject: CN=67760f40-3c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:02:ce:d5:0a:d7:70:2f:aa:88:23:7b:5c:
8c:48:58:4b:d2:69:32:12:12:8e:d7:01:e9:33:57:
8b:51:bc:ca:19:a6:4c:0c:41:54:14:f9:25:ba:29:
1b:79:9f:95:ae:4e:d0:a0:bb:7e:f5:67:30:49:e9:
3b:28:90:6d:73:97:95:32:90:40:d0:0b:77:5c:31:
77:80:0f:34:fe:ae:bf:25:6a:67:eb:d6:69:62:f4:
a6:05:16:64:fc:29:1a:0c:6a:ec:3f:fc:07:65:fa:
9f:f1:29:a6:5d:1a:51:4f:77:e5:6b:05:30:c0:c4:
f3:69:67:d3:15:72:df:ba:40:5a:6a:43:64:8f:41:
bd:05:5f:77:c6:64:c8:42:fd:b8:e6:a0:a7:6d:79:
ed:c9:ba:7f:e4:09:41:12:6a:98:71:a8:0d:7f:d3:
53:21:be:91:f6:35:13:14:e4:67:69:a8:ce:60:e2:
f9:ce:f3:87:3c:a8:e2:89:a4:9b:53:fc:a8:1a:17:
e1:d9:7b:40:4b:9c:0b:20:2c:00:96:ee:51:9f:a7:
a1:84:0d:23:59:bd:ac:cc:05:59:a6:36:55:bb:b3:
b4:03:41:bd:0a:12:6a:14:04:bc:33:63:ae:ea:cf:
09:d3:70:06:30:cc:cd:28:3e:f9:73:08:cf:8b:32:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:80:B2:BE:41:F0:A8:7A:4A:48:50:14:D3:44:E8:1D:97:3C:39:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0974BA72C8BE11EF9E41EBA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:8b:ff:b2:04:53:ae:1a:3b:b8:8d:0a:36:02:c5:34:b7:2c:
15:15:ba:1d:02:21:cd:2d:56:00:6f:eb:ef:e2:ca:b6:fa:3c:
dc:08:83:6a:46:76:26:f7:4f:f3:1c:0d:29:9f:d3:4a:f9:8e:
fe:1a:aa:19:79:25:27:47:3f:c3:bc:c7:76:ad:03:65:4f:9e:
64:ca:be:de:17:06:3d:6d:03:be:2c:89:72:1b:48:ba:1e:51:
18:2e:e8:7c:b0:7e:b2:54:99:2f:2b:11:13:87:e2:4c:24:28:
52:f2:40:87:48:d0:36:51:27:70:b2:d9:47:7b:92:1f:11:d8:
62:13:ec:e9:10:a4:5d:a4:13:f2:d5:a9:ac:e1:c8:f3:0a:d8:
c4:96:df:64:d1:e3:95:57:52:cd:bc:9b:17:44:36:fb:9e:3c:
b2:74:38:69:21:d2:dc:80:c8:81:d2:75:91:8f:ec:07:56:f6:
7d:b9:85:7c:28:c4:c9:29:32:5b:8a:a9:19:f3:a9:f4:a7:32:
ea:a2:21:d3:bd:85:ac:ca:d1:c2:8e:60:3a:e4:76:cb:5c:b2:
f0:36:4c:cf:86:59:61:62:af:9d:e6:83:14:2a:0c:28:d0:85:
bc:17:7e:ad:37:5c:41:c6:fe:b6:b4:2f:4d:f9:a7:2c:ac:d9:
ce:98:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:06 2025 by rpki-client