Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F007C5EC25811EFBD04D461762E951A.roa
File: 0F007C5EC25811EFBD04D461762E951A.roa (raw, json)
Hash identifier: ltG9jrY7MCkTgIFZu16xmKqJ46n/lHRlPI9YCtlKZyI=
Subject key identifier: 7B:BB:D5:8A:3A:9E:0D:F6:3C:12:15:3D:25:4F:54:B1:F1:66:31:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012349
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F007C5EC25811EFBD04D461762E951A.roa
Signing time: Wed 25 Dec 2024 00:34:54 +0000
ROA not before: Wed 25 Dec 2024 00:00:50 +0000
ROA not after: Wed 10 Dec 2025 00:00:50 +0000
asID: 984
IP address blocks: 154.199.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74569 (0x12349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:50 2024 GMT
Not After : Dec 10 00:00:50 2025 GMT
Subject: CN=676b532d-87bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:19:2c:fa:62:aa:43:1c:de:91:c0:ea:c5:
c3:bb:28:1b:08:26:c8:2a:a8:8a:0d:6a:32:51:5f:
21:ef:6d:6a:b7:e6:ea:d9:2f:16:28:61:3b:52:2d:
9c:72:54:f1:77:a2:75:85:0c:00:94:f8:5e:b0:5b:
1e:b5:de:44:9f:08:d5:dc:7d:02:c0:c9:d3:4d:82:
8c:7b:f4:1e:d5:23:72:52:0a:14:fc:76:15:7e:f9:
5f:58:4e:5b:23:a3:70:d3:4a:88:c0:d1:01:1c:96:
16:13:8a:2c:c6:92:bc:c7:7b:8d:67:1e:f3:a5:cd:
39:fc:c9:12:2b:e2:a5:73:0e:4b:c9:c5:8d:2a:56:
68:cc:e3:d8:77:35:87:15:49:ad:eb:76:9c:5b:1d:
0e:91:00:96:a6:6b:0f:05:1a:f7:80:41:a4:83:05:
ce:87:92:1b:fd:ea:c4:fe:37:bd:1a:a9:ac:83:2c:
0e:69:e7:68:09:7a:f8:d0:bd:0f:c7:4c:da:00:2e:
07:4f:30:39:b6:ab:30:4e:d4:b1:b5:aa:23:a2:0d:
38:86:75:81:f4:4d:a7:98:11:90:75:6b:e6:80:49:
49:85:1e:a9:25:42:51:89:2e:ef:06:37:dd:d2:76:
6f:08:1d:d7:83:a0:26:28:e1:53:57:e2:f5:0a:b7:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:D5:8A:3A:9E:0D:F6:3C:12:15:3D:25:4F:54:B1:F1:66:31:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F007C5EC25811EFBD04D461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.50.0/24
Signature Algorithm: sha256WithRSAEncryption
43:43:7d:76:2c:3f:9c:f8:02:11:fa:61:20:1e:d0:97:16:e8:
1e:7e:0c:86:93:dd:cc:1c:3f:88:5c:16:5b:8a:50:97:22:0e:
9e:3b:af:88:f2:03:c7:c5:31:e2:05:a4:97:a8:1b:b5:1f:d3:
5f:11:3d:98:fb:9e:30:24:d7:e6:12:ac:93:db:53:d5:17:bd:
ab:74:e4:11:3f:48:bd:35:1e:cd:4e:0f:f0:2f:a4:e6:b6:f1:
07:87:3a:5d:6c:91:e8:b0:f0:66:1a:c7:c2:04:6e:60:ea:6f:
ba:ab:49:01:72:8a:71:e7:f4:99:b7:e7:dd:59:f0:1b:3e:3f:
66:f5:c2:4e:52:ca:25:9f:22:ae:5e:3f:46:60:8c:4e:fc:18:
d5:98:b2:27:41:b3:f5:fe:87:0c:dd:81:72:cc:15:dd:50:72:
29:16:53:fc:b1:cf:a6:21:97:b8:1e:cd:d3:09:54:16:de:8e:
1c:f5:38:cf:ea:6b:8f:12:eb:21:1d:98:98:84:08:50:9a:ed:
a7:34:37:79:58:a4:ab:73:99:f9:40:31:3e:ca:95:06:82:5b:
0c:c4:92:08:e5:2f:76:a8:4f:5f:fe:e4:14:41:f9:59:4a:d7:
61:fc:96:70:e6:43:75:e1:a6:c0:d4:2f:a8:e0:e9:0d:3e:e6:
29:74:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client