Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF9732C3D011EFA79014BE762E951A.roa
File: 12DF9732C3D011EFA79014BE762E951A.roa (raw, json)
Hash identifier: hKRsc9jMUqLAu8OVd8nkfKA2iUdycoA+F2wrz6KdIQk=
Subject key identifier: 76:02:27:64:0C:F8:5C:F7:10:1B:C3:43:1B:5F:41:E3:71:D7:44:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012836
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF9732C3D011EFA79014BE762E951A.roa
Signing time: Thu 26 Dec 2024 21:26:31 +0000
ROA not before: Thu 26 Dec 2024 21:26:27 +0000
ROA not after: Fri 12 Dec 2025 21:26:27 +0000
asID: 984
IP address blocks: 154.83.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75830 (0x12836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:26:27 2024 GMT
Not After : Dec 12 21:26:27 2025 GMT
Subject: CN=676dca07-9b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:4c:85:b4:d1:af:3d:69:37:3e:6a:ce:78:
1b:88:28:c6:15:07:e0:48:d2:a8:1f:2d:4e:bb:57:
86:6e:4b:4d:5f:1e:e2:d6:3c:9e:a2:c2:22:93:6e:
89:b2:50:34:1e:4b:cc:c5:4c:87:32:60:32:3f:0b:
54:bb:49:a9:ee:0f:52:60:c3:21:b6:ad:72:68:9e:
ba:ed:d3:df:c7:b5:62:4e:a2:58:b3:bd:b0:e7:4c:
48:04:e9:d9:82:38:60:d1:ec:67:7f:12:45:9b:e1:
5c:e9:a4:6e:1b:f3:64:3e:9d:1b:cd:3f:a8:68:93:
7e:39:a0:66:be:e5:bd:50:af:60:8f:9e:d7:df:49:
a3:9f:6f:bf:77:98:09:6f:1c:69:2a:56:5e:3e:19:
ec:4d:9d:31:47:36:2a:b4:af:b6:fb:fb:c6:19:0b:
2a:57:df:e9:e0:9a:d6:7f:36:d7:ec:23:b5:f9:d7:
47:8d:47:15:cd:46:44:91:81:5a:a3:1a:ae:d6:b6:
42:68:9f:ac:ce:5a:11:84:ea:76:96:20:02:1b:68:
16:45:fe:68:c5:c3:38:b7:65:5c:4d:b9:fb:f3:68:
a5:90:24:94:ee:32:ea:db:81:a9:93:e0:2b:b1:a0:
7b:2e:9c:81:84:82:c7:2f:cf:f8:16:8c:1f:5c:b8:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:27:64:0C:F8:5C:F7:10:1B:C3:43:1B:5F:41:E3:71:D7:44:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DF9732C3D011EFA79014BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.177.0/24
Signature Algorithm: sha256WithRSAEncryption
25:14:d4:36:cf:58:6c:1a:4f:f6:e2:99:a7:ec:af:a0:93:32:
27:78:ac:1c:b2:61:ca:4c:c9:19:fa:99:2f:49:88:38:4a:b0:
e1:b2:fc:54:93:70:51:9d:2c:13:e4:03:48:63:68:5c:a5:4c:
1e:4d:1f:c0:93:8b:f6:0e:f5:96:c5:26:76:09:c4:6d:ae:90:
18:a4:f3:60:af:22:2e:3d:7d:05:73:b6:47:f9:52:83:02:c1:
b6:63:bb:eb:48:2f:de:6a:1c:39:4c:7f:62:c1:85:5d:34:32:
91:51:0c:07:15:fd:55:63:85:0b:b4:6f:a4:47:b3:89:d1:89:
34:62:ed:6f:d5:12:8f:d2:dc:f9:e2:dc:96:b6:ca:8d:b1:e0:
6d:53:6c:a2:2c:07:49:16:55:ab:7e:b2:25:2f:c7:27:71:57:
c7:cf:4f:fc:20:04:a1:43:f5:fd:97:ce:32:3d:32:76:2a:25:
72:a1:b0:d2:77:12:cb:60:e9:35:a6:a2:2a:2a:59:27:e6:72:
41:98:21:60:80:bd:4a:02:cc:91:ac:40:2a:1b:68:9c:b8:d7:
1a:0c:27:e5:23:c8:19:8a:5b:dd:b2:7d:a4:67:0a:57:b1:a2:
10:28:a1:7d:df:88:1c:c8:b0:63:37:73:eb:7b:2a:aa:a9:4e:
56:53:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:55 2025 by rpki-client