Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DBD69D2C26711EF90B0C94E762E951A.roa
File: 1DBD69D2C26711EF90B0C94E762E951A.roa (raw, json)
Hash identifier: RC4922sXZd9TNxqoV7NjGivKE8lO/lmEWsFRZDfKN14=
Subject key identifier: B9:53:5F:7B:C7:8E:7F:4E:66:AF:13:35:16:E7:06:6B:8D:86:A1:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DBD69D2C26711EF90B0C94E762E951A.roa
Signing time: Wed 25 Dec 2024 02:22:41 +0000
ROA not before: Wed 25 Dec 2024 02:22:37 +0000
ROA not after: Wed 10 Dec 2025 02:22:37 +0000
asID: 984
IP address blocks: 154.199.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74742 (0x123f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:22:37 2024 GMT
Not After : Dec 10 02:22:37 2025 GMT
Subject: CN=676b6c71-7061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:1d:54:b5:ca:83:1f:57:de:2b:db:7d:d2:
d2:db:75:76:43:53:25:19:c6:48:4c:ae:92:8a:4c:
0b:19:f8:8b:a3:b9:22:b4:de:6b:15:2b:04:dd:85:
4d:6c:9b:4f:bf:20:ee:da:a0:2d:5d:9a:dd:34:49:
a5:03:26:4f:2d:6c:73:24:00:21:20:ac:d0:88:82:
e1:31:70:d3:fa:23:9a:02:73:2f:6f:8c:8e:98:f0:
8a:73:c3:f7:a0:23:05:c7:c2:dc:69:b6:2d:c6:26:
49:81:cc:eb:35:39:73:dd:1f:a4:0d:d9:fb:b4:cf:
9f:b3:90:5a:49:b7:11:07:98:71:34:b8:50:29:60:
7a:74:1c:b7:2c:98:b9:ff:7e:41:4d:80:bd:87:bd:
0c:0a:6e:4e:83:e5:d7:4d:25:f1:8d:fe:99:38:dd:
81:13:86:41:34:66:86:e0:24:09:fd:2a:b8:73:13:
f7:9a:d3:44:2c:14:08:a6:a6:c1:f1:e6:15:0b:23:
bf:0a:59:45:87:be:ed:0e:c5:be:9d:ce:e3:6a:18:
bb:3c:c6:db:3b:a4:d8:8e:e8:ec:53:73:34:2e:2c:
21:2e:ce:05:5a:b2:04:18:b2:34:8f:e0:6d:70:aa:
c7:7a:d1:19:74:34:b0:c7:82:43:9b:1c:90:76:a1:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:5F:7B:C7:8E:7F:4E:66:AF:13:35:16:E7:06:6B:8D:86:A1:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DBD69D2C26711EF90B0C94E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.204.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a6:bd:17:3e:b2:67:ef:e5:0d:45:1d:73:e1:f6:ef:87:7f:
5c:ac:63:14:1b:27:bc:df:10:03:96:0d:d9:7b:93:dc:46:28:
28:b8:d5:c4:8d:4f:d5:ea:84:e2:0b:04:35:26:fd:2b:9b:db:
94:6d:fd:71:7e:ff:b7:fb:17:93:74:c5:14:95:0d:a6:be:15:
88:99:39:42:19:93:26:ec:b7:38:c2:bd:b0:74:86:35:5e:37:
7b:73:ad:a3:96:08:9b:63:4c:8c:a2:fd:56:84:cc:8d:52:5a:
83:c9:f9:89:19:42:b6:eb:19:8d:8c:ff:9e:75:fb:2b:59:d3:
69:6a:bd:e1:3d:61:2a:8e:be:8b:2e:06:e0:92:18:7c:48:07:
2b:6f:30:e5:dc:b4:fb:aa:1d:6d:53:d1:90:33:9b:d8:3a:0f:
c1:87:39:11:29:82:75:06:70:fd:1b:3e:80:22:4f:42:df:ef:
75:79:33:63:01:9f:a0:2b:34:89:9c:ca:c2:7a:c3:79:a3:5f:
69:17:44:71:3b:dd:4a:a9:ea:18:a4:47:04:42:a9:67:05:13:
81:a7:94:66:1d:91:1c:1a:70:98:25:c6:8e:20:cf:b8:06:85:
82:57:14:fc:14:44:78:3d:27:57:5a:06:ad:b3:6d:ac:86:36:
50:46:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:19 2025 by rpki-client