Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D984D6C1AA11EFBE66B893762E951A.roa
File: 18D984D6C1AA11EFBE66B893762E951A.roa (raw, json)
Hash identifier: tNM075t1OGcVlFWeRNxgyUexmgStYPySsrewgW4eFE0=
Subject key identifier: 25:9E:68:84:4C:D0:6A:58:8A:24:91:81:9F:8D:08:98:40:80:1A:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012121
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D984D6C1AA11EFBE66B893762E951A.roa
Signing time: Tue 24 Dec 2024 03:49:38 +0000
ROA not before: Tue 24 Dec 2024 03:49:34 +0000
ROA not after: Wed 10 Dec 2025 03:49:34 +0000
asID: 984
IP address blocks: 154.92.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74017 (0x12121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:49:34 2024 GMT
Not After : Dec 10 03:49:34 2025 GMT
Subject: CN=676a2f52-c836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:3d:df:a4:a3:e3:8e:30:2b:d7:ff:15:18:
7c:a1:af:83:77:ae:d3:37:45:ec:95:68:fb:f7:ba:
ea:e2:c5:29:e3:40:c2:bb:05:6a:1a:62:52:ed:0e:
bc:b6:10:a7:20:ea:5e:fe:d9:ca:28:67:a9:29:97:
bd:42:0e:95:e1:54:25:ec:09:55:6f:2c:27:b2:19:
22:01:44:6f:80:50:3d:5c:5a:c2:83:e4:97:4a:89:
98:a6:0a:06:8d:96:87:d1:d6:5f:66:25:48:e8:e7:
9a:bf:92:86:b3:4d:41:06:05:29:54:3b:df:6c:2c:
72:29:90:97:96:02:c4:9f:63:d8:1e:8c:83:f0:fe:
7d:94:f0:90:38:20:4e:d6:6b:99:f6:e7:bf:c1:4d:
ac:21:a8:3e:b8:e1:54:f8:16:a5:f6:bf:89:bd:81:
de:6e:cd:37:fe:4a:35:40:7a:fe:79:ed:56:98:a2:
23:1a:6f:e9:98:d8:6e:f8:f4:21:f4:c2:2a:14:65:
a0:26:dd:b7:8f:00:7b:7f:26:e6:74:9a:c9:63:a3:
e3:6d:a6:56:7f:78:6b:01:6a:73:d0:6a:e7:2d:fe:
87:af:18:40:0f:89:31:ec:26:08:9c:fb:40:1a:7a:
35:72:aa:63:ca:3f:f7:9a:7b:d5:d1:88:db:6b:df:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:68:84:4C:D0:6A:58:8A:24:91:81:9F:8D:08:98:40:80:1A:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18D984D6C1AA11EFBE66B893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:45:fe:fe:52:be:ea:9a:a1:5d:da:50:5c:fd:0a:1d:e9:34:
31:2a:10:24:9c:a6:e3:60:38:db:84:ca:0b:f7:ca:31:d0:3e:
b2:f5:0c:17:7d:4d:d0:89:69:d3:50:8b:b3:50:16:4d:5b:be:
cb:d2:73:2c:9b:da:0a:3b:c6:f2:fa:96:33:9a:bd:65:7d:e7:
ee:dd:6f:48:45:80:e4:15:3d:aa:3c:90:da:be:0c:78:df:f9:
db:1b:86:ef:d7:0b:f9:e4:60:9d:01:dd:27:ee:89:96:21:63:
c5:3b:ec:a3:bd:50:fd:ed:44:a4:9a:d0:ce:20:9f:70:37:5f:
e4:d2:93:71:1b:9f:98:3a:97:45:2c:7d:60:ac:8e:d7:52:60:
08:cf:42:29:20:02:79:28:fd:ab:98:e9:d5:99:3c:43:d1:5c:
93:46:9f:f8:45:c1:cc:1f:fa:71:36:6d:5b:51:ae:41:7b:82:
84:34:3e:22:43:74:51:05:9d:82:5e:cb:46:2c:2a:af:42:00:
de:93:dd:78:9a:42:a9:f3:c7:0c:0f:19:6b:bb:cf:c3:f2:c6:
06:e2:ce:cf:82:7d:86:ed:2d:0c:0d:c1:8d:3d:50:0c:17:a7:
b1:5f:13:79:b8:f3:60:db:18:e3:4c:e9:60:29:2c:3d:24:be:
1a:7d:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:01 2025 by rpki-client