Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121419C0C54911EFB8238E9D762E951A.roa
File: 121419C0C54911EFB8238E9D762E951A.roa (raw, json)
Hash identifier: uHOVJpRS7sUw/U5wUswye2GpSRRXzvtJ4iMOqFi6msc=
Subject key identifier: 58:F5:C6:82:D0:03:2F:B1:57:01:B1:BF:87:A5:B0:52:7F:DE:F5:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121419C0C54911EFB8238E9D762E951A.roa
Signing time: Sat 28 Dec 2024 18:25:10 +0000
ROA not before: Sat 28 Dec 2024 18:25:06 +0000
ROA not after: Sun 12 Dec 2027 18:25:06 +0000
asID: 17561
IP address blocks: 154.209.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76999 (0x12cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:25:06 2024 GMT
Not After : Dec 12 18:25:06 2027 GMT
Subject: CN=67704286-be0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:f7:74:55:ae:9e:04:6e:f3:c1:4a:51:5d:
2f:74:4a:96:e3:13:20:fd:8e:66:ed:1b:f0:9a:59:
f5:64:17:b5:05:9b:36:fc:18:a3:16:8d:e9:18:0e:
9e:62:57:34:1b:e6:1d:97:85:0a:dd:1d:21:5e:1b:
d2:52:a9:73:4c:97:31:4a:0e:39:49:49:06:b2:de:
cf:78:c9:aa:6b:10:23:67:97:8b:61:ff:d5:d1:4b:
ad:1e:bc:7e:1e:b0:6c:b7:8f:59:aa:da:9d:23:2c:
5a:36:3d:1d:d0:7e:7d:98:fc:13:eb:35:5d:28:79:
09:e1:04:cd:c6:72:89:b3:e9:56:19:04:5c:c5:73:
35:8f:e4:dd:28:98:91:79:8e:1b:9b:27:85:50:32:
15:e2:7f:4e:a3:d6:15:30:6c:38:b8:f7:e6:cd:43:
dd:e6:db:e0:7e:71:07:98:41:6f:9f:96:5d:9c:d8:
d2:44:1f:9a:bd:2a:2c:55:79:67:5e:e9:24:c7:b9:
64:06:b3:61:ce:40:b7:76:a3:6a:ba:60:a1:76:50:
66:7e:29:81:f1:e0:be:e5:a5:cb:7d:fb:7c:fc:fe:
f8:05:52:5b:32:58:8f:a7:39:18:7b:7d:5a:34:9a:
ed:e1:e2:ec:02:c6:95:f0:58:2e:93:0f:ee:4c:00:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:C6:82:D0:03:2F:B1:57:01:B1:BF:87:A5:B0:52:7F:DE:F5:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/121419C0C54911EFB8238E9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.30.0/24
Signature Algorithm: sha256WithRSAEncryption
42:de:fc:b7:81:74:64:b1:8d:48:66:50:1f:65:25:ce:32:ec:
30:ef:e4:9a:a6:ee:e3:dd:17:f7:7f:bd:de:be:f0:89:a8:52:
3a:f3:69:98:db:2b:41:8d:33:33:41:4b:67:04:42:95:44:f4:
85:2e:f7:c0:c0:65:64:f2:e7:a9:8e:23:5b:1e:e2:c9:1c:56:
f4:3f:78:6d:f8:5a:f2:b2:da:80:26:49:b1:f6:60:b5:fe:12:
34:ac:24:36:31:02:71:00:53:41:54:40:b2:2e:d1:24:41:34:
a2:f4:5d:a5:33:3a:a4:b2:55:8f:bc:8d:f9:34:68:23:c3:8a:
a3:cb:23:e0:1c:43:7b:57:ac:06:9e:ac:3f:46:8a:b7:1d:59:
2e:61:df:a9:1c:52:1d:24:ab:0d:77:8a:cb:ff:67:e4:7f:5d:
c9:fb:c0:a9:4f:c4:56:a0:6b:b5:9d:80:cb:ce:25:72:38:86:
6a:77:ff:3e:91:62:74:4d:dc:1f:a0:27:a4:01:6d:d2:7f:c6:
cc:df:d3:42:86:8e:f6:8d:a6:10:89:80:93:4c:15:11:54:12:
b7:0c:ac:f6:6a:59:84:66:5e:98:7a:4f:df:ec:f6:d5:bb:7c:
b8:60:21:ce:4d:be:63:be:56:97:6e:de:ba:cf:7f:68:46:b7:
7c:6a:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:06 2025 by rpki-client