Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24176BB6C1A911EF9DC4938D762E951A.roa
File: 24176BB6C1A911EF9DC4938D762E951A.roa (raw, json)
Hash identifier: CoHuwKkTxWw/XfhiQdn3yKFv01u7Uklkf1iFprDRep0=
Subject key identifier: 63:D4:BA:D3:7C:DF:84:47:7F:B5:94:D5:C6:40:6A:15:12:6C:36:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012115
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24176BB6C1A911EF9DC4938D762E951A.roa
Signing time: Tue 24 Dec 2024 03:42:47 +0000
ROA not before: Tue 24 Dec 2024 03:42:43 +0000
ROA not after: Wed 10 Dec 2025 03:42:43 +0000
asID: 984
IP address blocks: 154.92.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74005 (0x12115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:42:43 2024 GMT
Not After : Dec 10 03:42:43 2025 GMT
Subject: CN=676a2db7-ceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:77:87:f7:f3:62:f0:4f:c3:fa:0e:5a:48:
de:cf:1a:fe:29:a4:77:a9:28:ed:66:ee:8f:d9:fc:
19:a9:02:39:6a:74:21:cd:6d:c9:ab:d1:b2:4a:a9:
94:91:cb:00:11:4b:7a:42:2c:3e:eb:af:9b:45:11:
0e:88:6f:4f:07:9a:4a:63:b3:36:28:2d:56:5f:12:
53:36:3b:d0:ec:89:1e:6c:b7:bb:af:15:b2:3d:20:
0c:b0:24:d2:ba:1f:a2:20:91:6b:0a:4d:28:c8:19:
c5:c0:99:6a:8c:86:5e:3d:ef:69:f1:9e:7f:2d:b1:
a3:87:48:b1:3d:9b:eb:d4:67:e3:99:d3:af:8c:77:
b2:e0:42:0f:0f:cd:5b:2d:02:3e:d8:d5:ae:b6:fd:
0e:0e:a9:ab:64:64:57:d9:28:8f:d6:c0:ca:94:56:
c2:45:75:e8:1c:3a:7e:8e:53:76:ce:f2:58:ba:41:
7d:7c:5b:10:cf:6c:37:db:af:5b:04:e1:be:6f:f6:
2e:61:9c:f7:4d:ba:f0:3e:ae:9f:c7:4f:03:fb:f4:
ca:58:2d:5d:79:c4:92:b2:84:7c:4b:ff:6f:e5:b5:
b5:68:aa:27:cd:d9:65:14:74:a1:79:37:8b:ab:10:
2c:08:a1:63:e9:2f:3f:f4:9c:a2:19:32:70:ec:37:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:BA:D3:7C:DF:84:47:7F:B5:94:D5:C6:40:6A:15:12:6C:36:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24176BB6C1A911EF9DC4938D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8c:90:ba:44:28:ff:5b:bd:94:11:dd:bc:f1:f9:bd:81:36:
d1:3d:6b:59:84:9e:48:3c:1f:22:ea:93:73:03:50:93:7d:39:
d4:da:1d:3e:4d:a1:91:d6:2c:f7:71:19:56:6c:92:65:bb:ed:
0d:4e:1d:ae:3a:05:a3:98:e4:5a:f0:47:e8:50:5e:e3:9d:a5:
64:29:36:3b:b3:92:e8:64:0c:5b:af:b9:80:33:55:3b:c5:68:
03:77:8d:57:94:b5:f7:e5:d8:4e:ec:5b:78:9a:a3:5c:ed:11:
4a:83:b3:cc:c8:26:e9:fe:8a:99:11:d3:93:59:2e:ce:1e:f3:
de:b1:98:77:9e:cf:37:5c:e3:f9:64:80:bd:ca:0b:73:c2:31:
ed:4d:d9:94:ea:96:72:8f:5a:dc:18:f0:a0:2f:04:55:f6:ff:
8a:f3:22:a1:6f:f7:8a:e2:31:cc:bd:90:14:2d:22:0b:a5:58:
52:92:d6:b4:dc:ee:48:a3:d7:a7:0e:f3:6a:19:69:18:3f:6d:
9e:fa:1a:a2:04:d9:39:4c:b2:6d:47:aa:54:cc:f9:03:f5:d8:
ea:da:0d:f0:f7:3b:25:be:c8:07:ff:b8:ce:07:23:81:9f:ac:
69:d5:5c:5a:73:c5:96:e6:d3:78:c9:f3:b9:7f:b2:f8:49:9d:
8a:bb:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:55 2025 by rpki-client