Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BB134EC1DB11EFAB9CBD49762E951A.roa
File: 09BB134EC1DB11EFAB9CBD49762E951A.roa (raw, json)
Hash identifier: 46DuTKOWxISf5HNJbOZ2BYFrjocm8QSmz5wcVgiEjq4=
Subject key identifier: 42:28:C4:A9:93:EE:E0:4F:1A:8D:05:B4:33:81:3A:EF:85:9C:C6:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012301
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BB134EC1DB11EFAB9CBD49762E951A.roa
Signing time: Tue 24 Dec 2024 09:39:58 +0000
ROA not before: Tue 24 Dec 2024 09:39:54 +0000
ROA not after: Wed 10 Dec 2025 09:39:54 +0000
asID: 984
IP address blocks: 154.194.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74497 (0x12301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:39:54 2024 GMT
Not After : Dec 10 09:39:54 2025 GMT
Subject: CN=676a816e-e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:33:b9:a3:09:b3:06:36:db:5c:5a:05:32:
73:15:be:94:5f:25:93:ee:0f:1e:4d:4e:d9:b7:bf:
d2:64:34:d4:aa:d6:a3:e4:fa:6c:53:89:ca:19:0b:
43:46:21:9c:d2:e6:11:b0:b9:37:0a:34:38:78:90:
0b:06:93:9f:f2:70:f7:6e:dd:58:42:f4:bd:ba:7b:
35:5f:1f:6b:f6:67:59:1b:34:60:fa:5e:62:a0:bd:
68:0f:d1:30:af:2a:b7:c9:44:fa:f4:e9:4f:41:7b:
d5:85:45:82:a4:55:ff:b7:1f:32:df:01:a8:20:5a:
cf:68:5c:c9:c4:7f:97:81:1e:ee:f8:2a:3f:ef:fa:
b6:4f:69:ad:a2:41:de:3f:56:4c:b9:11:66:b8:cf:
ed:8c:57:2e:62:30:bd:9d:03:18:7c:21:be:f0:33:
b2:0a:04:21:4c:40:c6:c2:56:b0:52:53:cb:1f:10:
a1:20:97:25:c0:3a:ca:2a:cd:1c:5c:74:52:7a:b0:
9f:9a:06:fc:8c:a1:ec:04:b6:41:25:72:0c:e5:80:
f9:9f:11:86:d9:c0:f0:a9:d4:ab:ba:d1:f0:fc:78:
67:60:9b:a1:df:cf:37:aa:5f:99:11:dc:14:09:5c:
53:ca:7d:5a:2a:85:a0:e0:02:9e:b9:1e:8e:7f:eb:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:C4:A9:93:EE:E0:4F:1A:8D:05:B4:33:81:3A:EF:85:9C:C6:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09BB134EC1DB11EFAB9CBD49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.245.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6a:3f:1b:ae:75:72:ea:d8:44:05:6e:72:69:af:3a:01:13:
3b:9b:75:9b:58:e0:e8:a8:bd:62:48:59:53:78:a2:58:a7:7d:
62:42:24:74:5a:88:3f:6c:ad:67:6f:fb:0a:61:fa:17:7e:8c:
4e:bd:99:d1:62:dd:3a:ae:ed:fa:ad:18:70:d0:36:0f:8a:b1:
27:05:ba:3b:00:7e:fa:91:50:64:33:ae:26:11:a9:89:1a:bf:
fd:80:aa:68:66:fd:fc:c4:6d:36:d1:49:7f:e7:5e:d7:2f:da:
24:40:0f:9b:b0:25:26:c9:82:75:50:55:fa:5f:1c:9d:9b:35:
07:52:59:4b:5d:fc:7e:f5:03:c1:cb:20:fb:77:01:7c:31:cb:
72:62:2c:7f:7b:b3:82:f6:00:6a:b0:83:ad:34:3b:63:52:e0:
f4:58:84:78:94:f7:a9:b5:e0:3d:24:4e:47:f3:60:af:cc:89:
ac:e0:2f:76:3d:19:e2:ad:3a:ad:b6:f5:90:61:13:e5:b2:ce:
3b:17:98:90:ec:c6:68:a8:0a:14:43:f0:69:45:69:b1:5a:8b:
57:1b:46:25:f3:98:55:01:6c:86:0a:cc:cf:3c:f0:cf:2f:78:
03:e7:fb:91:a8:08:03:7d:ae:4c:ff:6b:81:64:6f:25:78:0b:
68:d9:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:11 2025 by rpki-client