Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24584398C41A11EF80939FA5762E951A.roa
File: 24584398C41A11EF80939FA5762E951A.roa (raw, json)
Hash identifier: J/YteCTgKAVS0uA+dCX20zH6dAdhF+WY6N5NdWdkWlM=
Subject key identifier: 26:34:33:99:6A:1A:E9:38:1C:BC:33:85:5F:7A:7C:79:5F:D0:BF:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012985
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24584398C41A11EF80939FA5762E951A.roa
Signing time: Fri 27 Dec 2024 06:16:43 +0000
ROA not before: Fri 27 Dec 2024 06:16:39 +0000
ROA not after: Fri 12 Dec 2025 06:16:39 +0000
asID: 984
IP address blocks: 154.198.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76165 (0x12985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:16:39 2024 GMT
Not After : Dec 12 06:16:39 2025 GMT
Subject: CN=676e464b-d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:1e:ac:70:f4:3a:4e:78:3f:d5:63:c6:dd:
53:67:4a:7e:11:e6:db:bd:51:c5:e3:55:76:eb:04:
86:56:91:85:29:49:bc:ab:f8:be:97:40:91:0e:bb:
f6:cc:a5:77:33:e0:20:d2:1e:59:76:8e:ee:dc:9f:
3f:27:17:92:79:c2:c6:f2:ac:7d:d1:90:98:d2:a8:
3d:2e:da:ab:4d:c6:26:4f:64:21:85:e9:f6:23:bc:
de:3c:d2:98:25:cc:44:f7:bc:b5:58:84:89:c5:67:
fb:bc:0f:80:7b:4a:64:08:87:77:8f:ca:10:8b:7d:
c0:61:31:65:97:44:a2:15:7a:7c:2c:61:24:53:00:
21:b1:1b:3e:4a:56:d3:bb:53:7c:88:62:08:c0:31:
cc:dc:13:3b:df:04:27:f0:be:37:b5:a3:8d:31:e6:
53:3b:87:ec:6a:0d:6a:fd:22:47:4e:05:0c:58:06:
49:8a:f5:d7:31:2e:b5:ca:49:43:a2:3c:c0:81:fb:
fb:5e:d0:4d:4a:0b:84:98:b5:20:5f:cb:43:b6:95:
7b:14:46:bf:d2:ae:19:60:2e:55:37:47:2d:b0:62:
e8:0d:05:b7:e3:8a:c7:07:2b:fb:d5:be:ad:64:83:
2f:31:dc:d6:2d:10:18:e7:9d:91:73:7a:ce:bd:38:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:34:33:99:6A:1A:E9:38:1C:BC:33:85:5F:7A:7C:79:5F:D0:BF:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24584398C41A11EF80939FA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:29:64:ed:dc:67:42:8e:4f:6a:b9:43:35:c4:9b:08:fb:60:
c9:66:62:29:d3:97:7c:7d:c3:62:0a:26:9c:0a:ba:cd:57:ca:
c5:54:59:0d:c4:b8:39:6e:aa:87:57:40:6c:a2:d5:97:aa:7a:
b1:10:2a:63:80:63:10:f8:28:71:ea:38:06:3f:ef:1d:bc:3b:
4f:87:c7:64:3c:67:8e:1b:c7:62:57:24:f7:0e:98:ea:70:f3:
55:72:c4:87:48:0e:b7:27:81:78:49:8a:52:3f:42:36:e8:17:
c8:fc:ed:b7:f6:9e:93:ac:28:00:b7:ef:f5:72:d3:e1:0c:a9:
9d:c2:1a:df:58:8b:f6:a5:51:b6:6e:44:78:4e:c9:10:e4:96:
3c:b8:ee:f1:db:b2:cd:5a:47:1e:68:e4:68:03:a0:e1:6e:ce:
d2:fc:f3:b6:cb:6c:dc:d2:73:59:be:03:b6:e7:73:4d:18:8b:
92:6a:39:91:a6:6a:25:d7:e6:be:fc:75:d7:21:fd:9e:22:97:
d9:47:2e:55:9f:be:9f:ce:87:78:0a:97:43:c2:69:f9:e5:3c:
0b:cb:c3:55:3b:86:a4:43:dc:20:21:f7:22:d3:3c:44:37:d9:
e1:bc:5e:e8:48:e4:c4:7c:97:af:17:80:0d:bc:df:b4:02:45:
d8:09:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client