Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FCF830C37E11EF99C9ADBA762E951A.roa
File: 10FCF830C37E11EF99C9ADBA762E951A.roa (raw, json)
Hash identifier: AOmlxuVG88UlLrzjLdYfGgSAREgR2HVM2JOG6ol1nxU=
Subject key identifier: 14:05:7A:BA:43:7F:41:F8:F1:9D:2D:B3:33:63:68:17:7A:2E:70:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012740
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FCF830C37E11EF99C9ADBA762E951A.roa
Signing time: Thu 26 Dec 2024 11:39:29 +0000
ROA not before: Thu 26 Dec 2024 11:39:25 +0000
ROA not after: Fri 12 Dec 2025 11:39:25 +0000
asID: 984
IP address blocks: 154.94.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75584 (0x12740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:39:25 2024 GMT
Not After : Dec 12 11:39:25 2025 GMT
Subject: CN=676d4071-1208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:78:31:b3:49:74:ea:be:c6:88:62:8c:af:c1:
3e:c1:37:47:be:f2:81:ec:74:64:e5:f0:ef:0a:21:
94:47:12:95:e5:c4:7e:af:f0:b8:e4:f6:3d:40:a3:
b7:23:92:fa:5c:4d:a7:80:d4:9c:e9:0c:53:77:e5:
a8:05:5a:81:8e:51:be:a4:ea:90:8c:1e:c4:9c:45:
58:f8:80:b5:30:99:f0:30:dc:2f:c9:ca:7d:cb:38:
f4:d8:70:7f:37:2e:54:7e:ab:f7:93:fa:9a:5f:fd:
82:b3:31:13:45:bf:49:94:67:2a:8e:5d:dd:4d:1e:
99:de:29:fa:32:34:0e:9a:18:0c:eb:31:d3:c9:c8:
dd:f7:11:1d:93:ae:22:15:7b:39:fa:36:75:33:d1:
5b:51:a3:00:ab:a1:ba:67:1c:5e:25:16:54:e9:2a:
99:ed:83:af:f1:e1:be:dd:6c:03:13:86:a8:ae:31:
71:7e:38:9e:35:69:97:fb:6c:fd:ef:a1:51:da:0c:
d4:7e:24:dc:7a:60:b3:41:d6:fa:c4:f9:f0:8f:1f:
92:17:cd:66:f6:3d:25:d3:68:df:8a:3b:d2:3b:84:
cf:70:12:70:92:95:48:ed:7a:3e:20:d4:57:d9:75:
e3:2f:f8:ab:16:5c:d5:62:ee:2e:2b:95:01:55:fa:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:05:7A:BA:43:7F:41:F8:F1:9D:2D:B3:33:63:68:17:7A:2E:70:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10FCF830C37E11EF99C9ADBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.183.0/24
Signature Algorithm: sha256WithRSAEncryption
31:84:20:32:4c:76:f8:d6:ef:c9:dd:e6:bb:cc:ca:19:99:34:
d9:92:e2:42:90:93:6e:41:15:c5:96:38:52:5c:70:b7:6c:ee:
cd:c3:51:d9:e0:c8:fb:a7:c9:54:8f:79:d5:40:aa:09:42:d0:
7a:d9:aa:c8:ef:77:b8:30:a8:fd:6c:ee:52:7c:93:80:2a:dc:
1f:ab:10:37:c7:fa:22:15:2a:ee:14:71:8c:40:8e:70:bf:77:
ef:83:a3:65:71:c6:fa:91:b9:69:25:7a:21:a7:24:9a:d3:53:
fe:04:64:69:45:77:6e:78:15:aa:42:c9:9b:71:46:e1:8f:0d:
9e:28:7b:21:0e:6f:e6:4f:f1:58:0a:06:49:93:99:44:7e:2d:
d2:25:ca:81:32:af:b9:6a:d7:01:c7:c4:d3:39:d5:91:a1:9b:
47:13:c3:29:ec:3e:b9:51:fa:d8:d6:52:d2:c5:4a:cc:93:47:
94:16:70:b6:02:c0:b3:c5:7a:e2:8a:c2:3a:24:fa:e8:08:75:
19:cc:d5:9c:b7:a7:06:fc:67:c5:d0:31:1a:4c:56:f1:1f:56:
8c:3a:1f:db:cb:e2:e7:98:4f:12:cd:13:18:d8:78:b7:bb:0b:
dd:0a:49:7e:14:1b:8e:91:8e:fb:fe:81:be:1b:d4:01:99:10:
eb:9f:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:57 2025 by rpki-client