Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F634644C53311EF94CD9D91762E951A.roa
File: 0F634644C53311EF94CD9D91762E951A.roa (raw, json)
Hash identifier: iS5JXNe1gaUu1kNItBSRP4Q9ZzSuwbCQHrRJFoVqi5c=
Subject key identifier: 44:28:A4:5A:7F:7A:8E:3C:9B:39:C2:C1:47:FC:24:BE:F0:66:C9:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F634644C53311EF94CD9D91762E951A.roa
Signing time: Sat 28 Dec 2024 15:47:36 +0000
ROA not before: Sat 28 Dec 2024 15:47:33 +0000
ROA not after: Fri 12 Dec 2025 15:47:33 +0000
asID: 984
IP address blocks: 154.204.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76795 (0x12bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:47:33 2024 GMT
Not After : Dec 12 15:47:33 2025 GMT
Subject: CN=67701d98-10e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:27:a4:55:da:2c:73:7e:b1:a2:5e:5c:8a:
55:dd:f6:0c:01:3b:73:d4:a9:68:61:33:39:41:bc:
da:d1:48:2c:f1:07:47:95:52:a9:26:d5:4f:29:fe:
ea:d7:18:37:1c:ff:34:62:1f:f0:94:ad:66:5d:71:
3f:12:ba:e0:96:ad:cc:8b:d3:74:34:29:42:1c:7d:
c6:d3:cd:63:10:23:85:52:fa:87:10:e5:b6:fb:41:
ae:95:cd:8b:62:45:b2:68:fd:a8:a8:cd:e9:cc:da:
03:de:70:3d:9f:10:6d:a6:e1:6a:67:6d:50:24:ce:
8e:b1:00:87:eb:52:83:2c:a1:85:2d:e9:c5:b1:75:
c4:bf:41:87:f6:27:d1:4c:a3:ad:a2:3b:03:98:50:
4c:da:66:7b:43:58:95:db:7a:94:9a:21:90:bf:08:
6a:a4:28:39:67:3d:0e:83:d1:08:3c:b9:ba:ef:f8:
2d:2c:d5:49:9e:7b:17:8e:24:d1:da:c8:4c:2b:de:
7d:93:90:68:44:73:b2:7c:bd:b3:d7:18:ec:b6:f8:
a0:bf:15:38:c4:72:26:6d:53:23:ef:6d:1d:c7:ea:
f2:03:8f:fe:a1:83:4c:c7:30:58:20:59:a2:54:bd:
76:d3:b6:c8:bb:03:1a:22:77:e8:da:32:a0:ff:5e:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:28:A4:5A:7F:7A:8E:3C:9B:39:C2:C1:47:FC:24:BE:F0:66:C9:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F634644C53311EF94CD9D91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.102.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ca:13:a2:8b:bc:9d:f8:fc:03:43:85:1e:ed:d2:b7:4b:26:
a1:fd:ff:50:3d:6c:23:e3:c8:62:24:02:98:41:80:00:63:73:
8a:5e:cc:00:e0:b0:a2:41:58:6f:02:4f:4e:cb:48:3c:ff:9f:
5c:d6:58:f9:2c:38:a2:de:b4:c0:cf:ab:67:ba:d6:f2:bf:31:
35:82:be:71:4b:59:af:63:83:a0:d7:33:21:0f:73:a9:9f:9c:
8c:59:18:f7:bc:84:4a:d8:4e:35:11:77:12:fc:d7:90:81:c1:
a4:39:28:41:99:3a:e4:f0:6b:49:80:5a:fb:11:38:e3:a6:da:
14:09:ab:a4:d9:c6:1a:06:4b:4a:75:dc:10:a2:d6:6d:74:d1:
d1:b1:45:3c:17:07:f2:74:d0:12:1d:fe:b5:51:66:81:be:fa:
c1:99:d1:d2:51:45:5a:2a:9b:29:a0:1a:81:b0:7b:0b:c0:b6:
02:5d:a0:aa:96:fc:30:7a:39:18:bd:ef:19:f1:bb:4d:92:26:
cc:34:10:22:f3:81:1d:e8:e0:42:cb:e7:cd:83:31:95:d0:ec:
46:48:29:ba:de:02:f8:06:fa:79:ee:36:e0:b9:2c:27:c1:a5:
df:0f:35:09:d2:68:ad:31:92:b4:47:82:cb:c1:a8:a3:78:68:
e1:2d:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:49 2025 by rpki-client