Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14894692C1AE11EF870064AE762E951A.roa
File: 14894692C1AE11EF870064AE762E951A.roa (raw, json)
Hash identifier: C85HsvNf8BLWvhzU3u3B5M8y/AcFcFJSJ14hO1lySBg=
Subject key identifier: A2:04:BD:B8:20:BE:CE:DF:C5:08:CA:72:08:C9:99:9D:BF:E4:1D:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012151
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14894692C1AE11EF870064AE762E951A.roa
Signing time: Tue 24 Dec 2024 04:18:08 +0000
ROA not before: Tue 24 Dec 2024 04:18:05 +0000
ROA not after: Wed 10 Dec 2025 04:18:05 +0000
asID: 984
IP address blocks: 154.193.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74065 (0x12151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:18:05 2024 GMT
Not After : Dec 10 04:18:05 2025 GMT
Subject: CN=676a3600-d553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:d8:e2:32:00:4c:75:74:82:0a:dd:d0:30:
f7:4b:4c:64:d8:ad:2d:8e:9f:9b:17:19:a6:ce:74:
de:0c:be:49:0a:ae:8f:35:1c:3c:a1:8f:fc:a6:2b:
c9:48:af:cc:76:5b:de:12:cd:92:d6:44:c4:ff:d5:
36:54:6e:bf:c2:19:09:21:65:43:05:01:86:d2:1b:
1d:c2:f8:01:2c:30:92:cc:1c:b5:24:35:cb:dd:e2:
03:1f:7f:04:94:02:c8:67:e7:2b:5a:8d:7c:44:95:
42:67:44:35:9b:84:0b:a1:37:7f:fe:d5:94:64:ed:
18:50:35:96:ad:d9:8a:64:c2:21:34:c4:86:50:6e:
8b:71:e8:66:58:d5:3a:b7:43:92:7e:5e:ac:46:35:
35:c4:2a:01:d4:3b:b2:84:83:3a:55:05:7f:38:23:
38:c9:ee:a2:46:2c:f3:2e:39:cb:5f:42:b3:0c:c5:
88:f7:0a:18:0b:fa:d2:d7:cf:05:11:2f:32:9b:a4:
a4:0d:01:9f:f6:91:1b:cc:85:f1:73:56:c8:2e:94:
81:39:05:ab:19:50:8b:48:8a:59:c7:39:e8:bd:2a:
56:eb:20:79:2e:3b:fa:13:b7:97:72:4a:67:b2:2f:
03:1b:6b:67:ca:a5:3f:73:d6:f3:3b:81:ec:be:4a:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:BD:B8:20:BE:CE:DF:C5:08:CA:72:08:C9:99:9D:BF:E4:1D:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14894692C1AE11EF870064AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f0:9f:d1:e3:47:8c:70:8f:d9:ce:03:81:41:d8:6f:58:9d:
ff:eb:9a:8e:45:d5:ad:ba:c2:90:de:69:5b:9b:a1:83:74:69:
14:03:14:e1:b2:33:4f:42:95:50:44:7f:a8:db:ec:71:e4:23:
52:aa:3d:db:ea:f4:ad:4a:eb:5f:69:1b:d5:f1:94:5d:6d:b7:
75:6a:86:8a:ba:a5:bf:44:c0:b4:06:69:7f:b4:6f:8a:d4:13:
7d:24:a6:fe:4f:94:19:ac:87:be:17:d2:47:a6:bc:eb:2e:14:
a9:8b:66:a2:8e:81:fa:6f:a6:1f:3f:03:fb:7b:36:ea:65:68:
fb:02:69:6b:83:50:65:d2:19:c6:98:f4:33:18:ae:5d:b7:3a:
7f:49:ff:6b:ac:1c:46:39:7f:d4:c5:3b:e0:07:7e:4a:d9:18:
f5:71:e5:10:90:d5:12:b3:1f:93:b9:3e:cb:eb:c0:b2:fe:7c:
5f:f2:71:28:c8:44:ec:e8:11:68:ed:a3:cc:5c:ff:ac:ac:eb:
73:57:82:27:45:ce:b8:9f:53:26:ca:6a:6d:d2:6c:09:94:6b:
07:e3:a0:00:11:33:15:25:31:44:9e:c4:85:20:b4:25:59:48:
4d:c8:5a:49:3f:a6:44:bc:5d:ee:33:e7:40:3f:0c:33:47:d5:
9c:85:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:13 2025 by rpki-client