Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4A9442C3DE11EFA48DC895762E951A.roa
File: 1E4A9442C3DE11EFA48DC895762E951A.roa (raw, json)
Hash identifier: PuLRt6rLXENQHh4k9YqGBXgWjESQWOSBI6dg3Xq6U1M=
Subject key identifier: C6:C8:1C:62:77:18:A8:E3:1A:76:6D:C3:14:E5:BD:FB:46:17:D9:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4A9442C3DE11EFA48DC895762E951A.roa
Signing time: Thu 26 Dec 2024 23:07:03 +0000
ROA not before: Thu 26 Dec 2024 23:06:59 +0000
ROA not after: Fri 12 Dec 2025 23:06:59 +0000
asID: 984
IP address blocks: 154.86.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75972 (0x128c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:06:59 2024 GMT
Not After : Dec 12 23:06:59 2025 GMT
Subject: CN=676de197-16f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:4c:25:29:90:d0:39:8e:0f:6b:f9:06:79:
3c:61:63:da:f8:c2:d3:58:16:c7:7b:5f:f1:5c:75:
dd:42:32:a8:6d:68:3a:b6:90:b3:e0:a3:38:db:52:
b1:00:34:7e:31:83:91:db:f7:72:45:46:93:21:bc:
53:f3:a0:fe:82:b9:6a:e2:d1:2a:55:06:0e:fd:69:
f0:74:80:a1:08:39:52:59:ae:e0:f8:81:24:12:0e:
c7:d6:ae:d0:36:bc:2a:07:e2:26:df:ca:02:98:55:
58:5f:71:dc:01:dc:a6:64:1a:d9:71:4a:d8:2b:b3:
8e:d2:7f:fb:3c:53:ab:a1:29:42:9a:c8:2c:b3:eb:
67:12:a5:70:97:1b:85:ee:19:9b:aa:f8:2c:56:23:
f0:12:29:b1:03:f0:c2:e0:e2:26:56:b3:ec:67:c7:
b4:68:97:43:89:fa:36:e5:39:97:c9:c5:2a:f9:84:
48:34:02:81:7c:1c:cd:8d:1a:77:fe:ba:14:60:d7:
54:03:13:4d:51:fb:4a:fa:c9:67:54:fa:4a:06:f8:
0c:54:86:11:fe:10:a2:b2:00:25:be:32:d8:24:08:
b1:02:40:74:47:91:f7:97:95:ac:4e:8d:60:93:d6:
31:1e:da:6c:e8:f9:54:ad:6a:6c:c4:8d:1d:34:6e:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:1C:62:77:18:A8:E3:1A:76:6D:C3:14:E5:BD:FB:46:17:D9:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4A9442C3DE11EFA48DC895762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:0f:29:2e:fe:b9:e4:28:6d:c9:d7:57:65:c0:7a:12:e0:e8:
89:97:ae:39:57:d3:dc:0c:1d:69:24:f2:df:a0:22:62:bc:76:
f0:8f:a5:75:9e:67:34:15:1e:54:19:45:ca:1f:9b:e6:14:ce:
e9:1b:bc:33:cf:62:53:c8:a4:bd:be:5b:e9:5b:d0:65:3d:f9:
7a:a0:37:da:e2:f3:d2:ee:48:f3:d3:67:f1:6b:ff:b9:76:d7:
71:8e:b5:82:0a:ae:9a:0c:39:34:fb:bf:37:7e:6c:14:d7:e8:
6e:0e:1c:d0:06:ea:c1:a4:f6:f5:bc:d3:f8:76:67:89:df:8b:
03:3a:3d:e8:2a:e8:02:25:38:3a:6d:8c:ca:f9:e6:e8:b5:9a:
3d:7a:bb:2a:19:de:cb:c8:48:87:ed:65:30:18:67:7d:cb:f2:
9a:38:24:df:f9:ec:6d:5e:a0:c8:d4:7b:42:0c:23:05:06:82:
09:e8:aa:a8:36:a1:10:a6:c8:5c:91:5a:62:96:d1:5f:9e:07:
72:55:bc:c6:f3:d5:a4:89:bd:c3:f4:e7:6d:22:2f:98:30:3d:
c7:7b:4e:51:88:de:bd:e9:68:88:d6:17:d2:be:87:c9:6b:52:
f6:17:c6:f0:24:72:02:57:bd:65:aa:13:e4:ac:99:cf:38:e2:
e7:a6:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:05 2025 by rpki-client