Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243788C4C3D911EFA572A577762E951A.roa
File: 243788C4C3D911EFA572A577762E951A.roa (raw, json)
Hash identifier: /w8fDoT+clFEcqqGcMswzkaBQhXHAtIdikqiDXfmzt4=
Subject key identifier: D5:AE:1D:66:0F:C3:E3:54:EA:BB:E7:12:77:3B:1F:79:24:CC:EF:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012892
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243788C4C3D911EFA572A577762E951A.roa
Signing time: Thu 26 Dec 2024 22:31:25 +0000
ROA not before: Thu 26 Dec 2024 22:31:22 +0000
ROA not after: Fri 12 Dec 2025 22:31:22 +0000
asID: 984
IP address blocks: 154.85.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75922 (0x12892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:31:22 2024 GMT
Not After : Dec 12 22:31:22 2025 GMT
Subject: CN=676dd93d-3210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:93:10:52:5f:fd:06:17:0b:5c:87:ca:c0:
45:c9:ec:94:2d:e8:0c:23:5b:67:0e:4d:7f:84:c5:
23:3d:29:e4:97:bc:9c:02:61:22:54:ca:91:52:42:
b8:31:ec:51:2e:3e:a6:7b:d1:f9:6c:2c:49:ba:7c:
e9:fe:74:9e:5e:63:9b:da:05:bb:57:66:90:ef:bf:
0d:56:09:4b:3f:c8:3d:7b:94:21:78:b4:d4:8c:4d:
63:cd:4f:e1:9b:8d:59:0c:64:6c:36:34:ce:56:83:
af:7c:20:92:db:d9:23:76:61:15:e2:17:de:9c:22:
c2:77:99:fe:33:58:15:aa:b9:13:3a:49:9b:ec:36:
66:ae:0c:8b:0c:2b:55:3f:50:60:2f:fb:43:af:70:
c6:3c:b9:1a:7e:7e:fc:8b:53:36:05:5b:6a:aa:a1:
8b:db:d2:8f:2e:bc:d4:fc:d6:ee:74:fa:54:70:cb:
fb:09:8c:15:95:63:fe:09:48:8a:d2:83:14:45:f7:
ab:f7:2f:38:a3:4b:1c:47:f7:fa:35:9e:6b:3b:e3:
62:ad:fe:d9:df:db:e3:c2:0d:6c:6a:f0:d8:61:ac:
02:58:9c:25:ad:e7:a3:db:ec:37:3f:ef:7f:f5:e7:
04:e7:a1:be:cf:78:d2:e0:97:f8:27:e8:00:61:ee:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:1D:66:0F:C3:E3:54:EA:BB:E7:12:77:3B:1F:79:24:CC:EF:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/243788C4C3D911EFA572A577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.19.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d1:cf:a9:dc:46:93:37:47:af:03:53:d9:45:6d:4a:58:15:
d4:bc:77:7a:58:b4:07:b7:2f:6f:2c:03:56:fb:32:63:08:12:
4b:8d:05:7a:f0:be:73:b6:26:cc:be:e9:37:30:f1:f4:6a:aa:
ae:ad:53:dc:44:ad:96:48:17:98:ec:2f:b6:87:e2:4a:95:01:
54:68:0e:c3:12:9c:54:60:78:d6:ba:15:6b:26:bd:50:0b:fa:
25:df:15:26:b2:af:73:f1:ae:db:41:a3:a1:a4:c5:12:44:a6:
4a:6a:3f:2d:e4:bd:d6:43:d6:65:4a:48:c6:2c:c3:f6:04:83:
a2:19:b6:63:eb:bf:fe:1d:3a:c3:ac:01:70:6d:18:13:fb:60:
3b:76:19:6a:45:14:e7:36:86:b5:a5:51:13:a0:08:c7:68:71:
64:9a:40:3c:c9:2a:a5:4e:cb:48:51:18:18:04:ae:5f:d5:b2:
63:ab:6c:42:69:78:8a:7e:14:69:61:ff:9e:b9:57:93:0f:a7:
23:51:91:14:5d:01:a6:fc:8f:3b:13:57:d0:0a:c4:d3:c0:2b:
d0:b1:7d:f0:d3:5c:d7:44:89:c8:45:95:5b:af:c3:ea:6d:6f:
4f:1e:c4:dc:52:75:7a:af:44:eb:6d:e4:10:35:43:00:dd:40:
2d:6e:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:11 2025 by rpki-client