Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0AF46C27411EFA779D3A9762E951A.roa
File: 1FE0AF46C27411EFA779D3A9762E951A.roa (raw, json)
Hash identifier: 1FVNdedVook3yHYg+54NbUK6UpGeqC6JQnMdk6OEpeI=
Subject key identifier: 78:59:73:0F:D7:02:B7:68:D0:AF:B8:41:48:8D:C0:47:F0:AE:68:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012486
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0AF46C27411EFA779D3A9762E951A.roa
Signing time: Wed 25 Dec 2024 03:55:48 +0000
ROA not before: Wed 25 Dec 2024 03:55:44 +0000
ROA not after: Wed 10 Dec 2025 03:55:44 +0000
asID: 984
IP address blocks: 154.211.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74886 (0x12486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:55:44 2024 GMT
Not After : Dec 10 03:55:44 2025 GMT
Subject: CN=676b8244-2ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:f8:89:32:af:e0:77:53:2f:da:f9:25:02:
f5:97:fe:b7:cd:f6:2b:2e:c4:ac:b8:ed:cd:d9:2a:
a1:5a:a7:4a:df:74:1b:26:fd:1a:b4:45:4e:6a:5d:
ac:31:d7:73:ee:7c:87:b6:7e:f8:b4:1b:bf:4c:be:
b0:3f:09:0b:60:6c:0c:be:07:bb:50:f2:69:d1:08:
76:00:d6:cb:e9:ad:1f:3c:50:e4:12:12:56:ec:f7:
d5:0f:c9:ae:92:86:f1:90:9f:ee:56:b4:b1:61:27:
42:c4:7d:f8:4d:6a:da:ed:45:59:46:ab:bd:94:c3:
7c:db:ca:7b:5b:07:29:e7:45:08:bb:cb:c8:84:9c:
2a:86:a6:df:b9:a7:93:a3:86:c8:30:e2:94:14:43:
6e:c0:d4:34:db:90:c1:19:cf:6d:7e:e1:2d:c3:b8:
7b:95:66:ac:be:fb:99:2d:ec:df:e9:9e:cc:ed:23:
e3:da:7c:05:bf:bc:42:5b:6a:26:53:ce:19:74:78:
47:aa:47:9f:e5:7f:76:4f:11:09:ea:4d:6c:ef:ca:
ed:14:8d:40:68:83:97:1e:ce:a5:5a:0d:69:15:dc:
05:55:4e:1f:0d:af:ab:42:00:22:e4:81:50:8f:c4:
5d:f3:9d:48:0c:e4:dd:6d:8b:11:88:dc:3b:db:8b:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:59:73:0F:D7:02:B7:68:D0:AF:B8:41:48:8D:C0:47:F0:AE:68:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE0AF46C27411EFA779D3A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b3:2a:1d:8b:94:c4:0f:a9:47:d3:80:7f:5c:73:81:4c:6b:
28:9f:d2:2a:b2:d1:71:cd:d3:77:2c:f6:5d:d2:03:40:b9:03:
be:d3:50:4f:1d:ff:30:df:d0:e1:90:ec:e4:b2:d8:a5:78:06:
ce:0e:81:e5:f1:69:13:8e:c4:34:8a:e2:91:0f:4a:f3:0f:cb:
91:49:a1:de:ef:56:7a:de:db:9c:54:a9:77:7a:63:9e:64:56:
fb:e5:40:09:14:04:86:fe:54:dd:88:8a:8b:4e:23:2a:41:71:
8f:0e:71:b2:94:0e:54:77:f3:36:c6:5e:86:8f:d7:84:25:af:
44:23:e0:16:f3:a7:b6:5e:33:61:12:10:be:98:96:6d:b5:f4:
7d:78:36:ba:3e:02:a9:d5:76:ad:56:11:26:5e:1f:2b:c4:eb:
b8:fd:6c:6d:21:6b:b5:ef:57:4a:d6:45:92:fa:2c:62:bd:d7:
25:37:2a:a8:af:74:19:87:97:1c:14:67:11:17:9d:58:0c:58:
32:72:5c:27:50:5f:84:a0:ad:95:db:8f:7a:1a:b2:58:b0:7c:
3a:10:be:d5:8a:9b:4e:8a:8c:47:e2:09:6f:ad:e8:b0:2c:95:
61:98:54:54:0f:43:32:d6:f1:6c:31:92:5c:59:62:34:56:86:
f6:6d:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:31 2025 by rpki-client