Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D938C8C0C911EF8C738E73762E951A.roa
File: 09D938C8C0C911EF8C738E73762E951A.roa (raw, json)
Hash identifier: 2b5hB9AHO33dyfICu5iBlsr94v9zFltaO9J7pSfWig4=
Subject key identifier: 21:AD:26:87:E3:EF:5F:55:59:82:DB:9B:CB:54:D5:00:32:24:7E:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D938C8C0C911EF8C738E73762E951A.roa
Signing time: Mon 23 Dec 2024 00:58:36 +0000
ROA not before: Mon 23 Dec 2024 00:00:32 +0000
ROA not after: Wed 10 Dec 2025 00:00:32 +0000
asID: 984
IP address blocks: 154.82.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73182 (0x11dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:32 2024 GMT
Not After : Dec 10 00:00:32 2025 GMT
Subject: CN=6768b5bc-7e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:e1:86:e4:13:d5:5b:93:2e:b4:87:6e:02:
2c:ac:50:ef:33:f7:a0:1d:70:ec:e9:67:b5:97:bd:
d5:5d:d6:2c:de:b6:49:62:cc:54:b7:88:54:61:ec:
8c:97:06:03:ec:d1:6e:6a:8c:50:ac:30:54:1b:98:
06:6e:23:22:d9:58:40:29:ab:9b:9a:31:2f:85:2f:
07:60:37:86:a0:b5:2e:b2:5b:a3:6d:ca:88:be:42:
34:6d:93:3e:4d:45:2b:47:71:6d:d9:0d:07:b0:99:
c8:a4:35:0a:26:d6:e1:49:e9:84:9c:a9:83:ee:ac:
dd:1b:94:89:44:0b:f1:f2:8f:71:8a:80:42:66:03:
ed:0c:e9:46:cd:d8:2e:f8:fc:d8:dd:8e:70:c5:c4:
ca:4e:c4:47:e2:98:da:bc:13:ee:f3:4b:09:e1:65:
1e:05:e4:b4:4a:2b:b6:f2:18:ef:f5:fd:42:30:fc:
e6:21:6d:30:bc:23:43:e0:d9:95:27:c6:86:f5:15:
4f:29:b4:67:7c:82:c5:45:6e:8d:d5:f7:27:e8:5c:
58:bb:02:fe:f4:3b:b2:7e:c0:1b:c1:46:3d:51:1d:
35:30:8a:24:e7:25:99:6c:55:69:39:74:e7:a5:e6:
0d:7d:87:9d:54:aa:2c:0e:8f:bd:18:63:3e:0f:97:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:26:87:E3:EF:5F:55:59:82:DB:9B:CB:54:D5:00:32:24:7E:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D938C8C0C911EF8C738E73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.226.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:96:0e:84:c6:08:34:95:10:4d:a3:21:17:d8:74:61:77:b7:
b1:41:5c:ad:2b:39:80:c0:64:4d:b5:59:77:5e:a7:17:c5:31:
75:95:a0:5e:ce:46:7f:ec:42:67:bf:83:60:d2:e2:9f:51:f7:
fc:89:22:36:58:a8:0e:37:57:de:10:23:f7:3c:b6:56:85:8a:
81:4b:9f:ae:fd:9b:3a:d7:33:73:b7:c4:ca:db:ff:17:12:64:
1c:e4:9c:07:fd:f1:06:f6:fe:cb:2d:a1:82:4d:bb:9a:d7:33:
c6:a3:5f:1a:85:d7:76:91:d2:24:f1:29:c9:eb:69:c6:13:fb:
43:45:d4:34:51:5a:34:f2:12:1b:64:4c:af:4b:d5:15:17:5c:
bb:56:e9:68:b5:eb:4b:91:ab:e0:2d:2e:16:df:9a:f8:15:86:
53:36:13:73:44:a3:46:c3:7f:df:2b:83:85:99:d2:4a:12:9d:
dc:45:da:c0:dc:05:59:6c:ae:bb:9f:61:a5:38:ea:9c:c0:14:
bf:0c:92:34:11:57:6f:de:b8:01:d3:02:43:bf:c0:8f:b7:f3:
db:5f:91:a6:c8:ef:85:dd:64:76:b3:49:75:7f:1d:c8:15:1b:
ae:68:0b:c6:2e:db:2e:90:e3:4b:45:6d:94:7d:ae:0c:c8:4f:
0a:d0:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:59:13 2025 by rpki-client