Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/237D63ACC1B511EF8F781E5B762E951A.roa
File: 237D63ACC1B511EF8F781E5B762E951A.roa (raw, json)
Hash identifier: 7Ow8pSqYS4e6sBVkiPrQEUaT4DXgz/4H+gCsT2ap17Y=
Subject key identifier: 98:02:E4:79:1D:8B:23:47:F7:2B:62:4E:69:AF:E8:6D:8B:D1:E7:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/237D63ACC1B511EF8F781E5B762E951A.roa
Signing time: Tue 24 Dec 2024 05:08:40 +0000
ROA not before: Tue 24 Dec 2024 05:08:36 +0000
ROA not after: Wed 10 Dec 2025 05:08:36 +0000
asID: 984
IP address blocks: 154.193.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74149 (0x121a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:08:36 2024 GMT
Not After : Dec 10 05:08:36 2025 GMT
Subject: CN=676a41d8-0ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:f8:0c:19:b2:c3:47:32:88:5c:e5:36:32:
04:d4:72:c1:c2:a6:f4:2a:f5:12:a1:7d:5f:5d:5c:
49:eb:9c:94:65:6f:89:e4:c4:1f:98:1f:3f:6d:f7:
bd:30:b7:66:a4:90:f5:b1:67:3f:e0:3a:ff:41:c7:
a0:e9:21:ab:ee:ea:c4:86:73:92:34:72:bf:75:26:
78:41:f9:57:52:33:0d:58:07:d2:f5:bf:2e:25:62:
c0:18:95:5d:97:80:cf:38:d3:27:72:76:1a:7a:f8:
98:b9:a5:36:96:bc:c0:5e:f0:4d:83:fa:03:b0:c2:
b9:96:9e:2f:86:03:0d:ce:21:65:69:8a:df:61:80:
21:0a:ed:7b:c3:68:13:41:dc:c8:a8:03:b1:82:75:
86:93:c6:ab:0c:b3:54:83:e7:93:68:24:f3:30:59:
b4:3f:b6:fe:fd:2a:85:2d:36:4c:d4:23:50:46:b2:
14:f1:4f:76:7b:e0:a6:b5:74:2b:44:89:cd:16:f8:
ca:e4:23:00:6d:e1:21:0d:ad:d8:c0:c9:52:f6:17:
07:84:3f:e5:56:4e:ec:88:99:b0:00:45:22:1b:88:
3f:ee:19:da:18:a8:12:3a:0c:22:0a:9b:77:a2:be:
5b:a8:b2:94:c2:e0:1d:79:dc:0c:35:9f:78:1e:78:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:E4:79:1D:8B:23:47:F7:2B:62:4E:69:AF:E8:6D:8B:D1:E7:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/237D63ACC1B511EF8F781E5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.140.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8d:d5:bd:45:10:0a:6f:df:bb:0a:9d:a2:cd:5f:75:6f:c3:
cd:45:c4:22:3a:04:55:74:51:5f:7e:cc:cc:ef:78:14:6c:0d:
b0:3b:ca:2e:24:bb:99:2e:5c:51:14:b1:7e:fe:4d:e2:2f:60:
81:55:1e:16:e5:2b:69:31:81:08:57:77:2a:66:87:45:ef:06:
db:5d:b4:ef:3f:6f:a5:51:3f:c9:c0:55:45:23:2a:12:f4:4b:
d2:f9:af:c5:bf:74:0e:3f:43:08:cc:c4:a4:13:f2:ef:1d:eb:
6d:af:c9:9b:b0:98:87:e9:63:40:ca:80:48:1e:1f:d5:15:af:
b1:ac:9e:cf:bb:87:3c:4c:ee:6f:2d:38:4f:59:51:1f:05:ad:
f3:77:bb:67:3c:ad:b7:42:a6:c7:90:f0:0f:94:a9:81:fc:64:
5b:8b:57:f1:11:64:8f:8e:1c:56:3d:3e:f5:b5:8c:62:05:3f:
88:ed:82:cd:25:d6:75:98:4d:48:f8:c0:5d:22:15:24:7f:ff:
61:01:15:5e:06:f6:dd:7e:ae:13:ad:4f:0a:36:6a:63:3d:2c:
45:09:e9:09:25:a3:70:14:23:39:79:ef:30:ed:63:60:09:70:
4b:b5:e4:17:cd:11:22:ee:c6:ce:58:62:5c:40:61:aa:ae:c6:
eb:80:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:21 2025 by rpki-client