Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF8EAABE9311EF8D366C9D762E951A.roa
File: 12DF8EAABE9311EF8D366C9D762E951A.roa (raw, json)
Hash identifier: rQKtsvfCIF+QagnNs3zhYKPEKjvY83eYYUl6az5pjUs=
Subject key identifier: 37:D5:0E:6E:91:CA:52:35:15:BF:76:A7:35:50:E7:23:5F:1E:51:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF8EAABE9311EF8D366C9D762E951A.roa
Signing time: Fri 20 Dec 2024 05:27:16 +0000
ROA not before: Fri 20 Dec 2024 05:27:12 +0000
ROA not after: Wed 10 Dec 2025 05:27:12 +0000
asID: 984
IP address blocks: 154.82.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72744 (0x11c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:27:12 2024 GMT
Not After : Dec 10 05:27:12 2025 GMT
Subject: CN=67650034-4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:04:7e:9d:6c:e2:a5:11:a6:58:7c:e3:0e:
bd:70:d8:5b:26:22:da:7e:62:f5:42:e7:1f:16:0b:
c2:70:47:3b:b2:7b:9e:17:23:ba:f7:be:20:4e:6a:
67:0f:75:97:79:20:d3:a2:39:ad:aa:5f:c8:d5:30:
f9:8a:fa:70:25:77:d0:30:4e:fc:d7:35:54:7c:25:
2b:70:fe:06:f1:aa:c3:c2:fa:9c:36:b0:55:ca:a8:
c3:ab:57:f1:0b:ed:24:6f:00:95:a0:41:5f:aa:1f:
f6:ed:5c:0f:cf:5f:6b:c5:da:af:77:ce:1b:b4:9e:
ac:d3:47:97:4a:07:f3:fc:62:91:96:b0:0e:39:e4:
4d:02:23:49:46:69:9e:c8:07:df:49:94:2f:73:a3:
30:0b:44:b5:28:8d:0c:e2:c3:bd:35:4e:8a:0c:80:
c2:38:c2:3f:6c:65:3a:be:5f:9b:79:f4:60:e2:dd:
45:ce:64:c4:5a:ab:1a:c1:f4:13:f8:53:68:e0:19:
e5:25:7e:26:a5:f7:93:ae:b3:03:5a:64:b6:46:fb:
3b:fd:dd:02:5f:2c:dc:af:8a:c9:28:42:1c:0f:b4:
b7:9d:84:89:54:2f:c2:9d:65:da:5a:4f:11:8b:ab:
4f:fb:87:ad:4e:6b:e1:16:6b:93:51:af:f2:9e:f1:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:0E:6E:91:CA:52:35:15:BF:76:A7:35:50:E7:23:5F:1E:51:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF8EAABE9311EF8D366C9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.194.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:26:05:d7:98:b0:ed:bc:00:fc:5e:d1:b2:5d:28:26:fa:
c9:b5:d0:b7:75:e1:0c:b6:b4:8d:df:6f:66:28:ef:9f:b5:28:
ae:8b:77:45:12:ea:34:3a:94:1b:8c:d7:9c:2c:c4:5a:6f:97:
3c:8c:08:47:fe:87:5f:3d:00:76:18:c3:dd:74:79:d3:ae:1c:
86:4c:e0:a7:d2:51:6e:35:1a:b0:99:48:cf:52:c3:74:a0:76:
03:34:05:51:6d:4e:68:64:25:8d:34:6d:e6:5b:98:d8:3b:b1:
9d:0a:c5:1b:d2:7a:19:02:35:c4:09:3a:0f:c2:43:18:53:9b:
3f:65:fd:e1:9f:b0:b2:a6:95:58:0e:89:c4:b8:e8:63:50:78:
6a:42:82:c4:79:69:49:3e:d4:5e:c4:f7:9f:27:df:4b:a1:a3:
a4:ef:33:72:87:38:86:bc:1c:6a:87:8f:5a:4b:51:9d:fe:31:
71:04:44:77:85:64:74:1e:3e:86:e1:e7:7b:73:11:2b:29:51:
8f:d6:9c:02:f3:65:5e:44:51:e9:cb:5b:74:47:db:47:4d:2e:
31:33:7e:7f:2a:f6:72:9f:1d:6c:00:39:b7:9e:02:47:d6:94:
ef:ca:bc:74:c3:b9:ba:a3:3f:7d:d2:6b:3f:d1:bd:51:f7:ea:
2e:e5:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:38 2025 by rpki-client