Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/250CE386C53A11EF9DF155BF762E951A.roa
File: 250CE386C53A11EF9DF155BF762E951A.roa (raw, json)
Hash identifier: 4a06L3dX94o0f5qZn+P8G4khAlv8mfPIjSky3zgj6TA=
Subject key identifier: B7:90:F7:B1:7C:09:14:51:BF:64:51:FB:C1:6A:31:82:3D:9E:BF:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/250CE386C53A11EF9DF155BF762E951A.roa
Signing time: Sat 28 Dec 2024 16:38:19 +0000
ROA not before: Sat 28 Dec 2024 16:38:16 +0000
ROA not after: Sun 12 Dec 2027 16:38:16 +0000
asID: 17561
IP address blocks: 154.205.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76861 (0x12c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:38:16 2024 GMT
Not After : Dec 12 16:38:16 2027 GMT
Subject: CN=6770297b-1bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:e1:f0:9c:d5:d1:3a:df:ee:9d:9a:92:1f:
50:08:88:e9:32:30:e3:4d:b3:c9:b1:e3:ec:1a:eb:
f2:52:12:c6:b9:3e:a4:82:fb:85:f1:52:78:f6:4e:
cc:4c:2b:5c:e4:f4:17:c2:53:6a:ac:f6:aa:d3:71:
e9:57:d9:4d:53:a6:84:6a:37:74:e0:a3:aa:07:4e:
69:c8:80:d3:af:b9:5b:3e:62:4a:07:8e:f2:8b:9d:
56:a1:4d:4a:a5:4b:56:bd:32:78:5a:b5:31:17:75:
eb:38:6f:d3:5e:82:34:0c:ca:64:8c:cf:d5:27:e2:
d0:b8:d1:cc:30:27:4a:a9:ed:f9:16:08:8e:b5:3d:
16:94:4d:06:31:0c:b1:b0:2b:59:f1:5d:b9:a1:17:
f7:97:4a:19:8d:eb:cb:9c:13:74:13:06:ab:16:41:
98:a2:e7:2b:13:44:60:57:54:a2:61:63:ce:8d:18:
cb:ac:74:ae:6b:82:57:92:0f:b4:85:35:6a:b5:2f:
ca:f3:3f:f0:db:cc:13:d6:b0:31:ed:a1:fb:b7:26:
e9:bb:ee:f7:00:cc:36:5f:2c:b2:f0:7f:54:1e:35:
33:c6:cd:04:c1:91:d8:c4:2b:8c:1e:7d:6c:f1:16:
f0:1a:0d:27:61:47:64:3c:aa:db:17:86:7f:92:41:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:F7:B1:7C:09:14:51:BF:64:51:FB:C1:6A:31:82:3D:9E:BF:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/250CE386C53A11EF9DF155BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.39.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bf:16:65:8d:53:67:70:b1:d1:5c:01:da:64:69:5e:47:cd:
06:d1:d0:aa:fc:72:71:fe:e4:f2:ed:9d:5e:45:ca:ec:10:e0:
cb:03:b4:8f:92:9d:1e:67:34:45:62:70:c1:19:4c:0e:97:14:
af:ce:81:8e:4f:71:c8:d2:b6:87:f8:6d:73:d1:36:42:da:09:
04:a7:87:6c:2e:f0:62:cf:ee:40:f7:31:2f:fa:3c:b9:0a:99:
cf:c4:de:35:4e:74:ad:04:62:51:a4:11:a7:b7:3f:f6:89:03:
1e:e7:1f:a5:48:e8:d3:ec:68:49:b1:f9:0b:30:5b:80:be:7b:
b8:31:f1:29:e5:12:f4:4c:32:30:d5:dc:01:62:74:95:b5:0c:
48:c5:72:ca:e8:cf:cc:be:6a:ef:ff:c9:2d:cb:4d:15:5e:61:
a9:26:21:70:14:ab:e7:e3:e6:03:7b:e3:4e:db:c3:74:7d:d7:
cf:b6:24:53:1c:97:0e:82:71:74:82:c4:b7:70:25:b0:91:ba:
26:e6:9a:00:1a:a4:df:5e:6a:2e:46:b3:46:e7:a8:6a:82:ad:
ad:9a:8b:27:9c:32:05:b6:24:c8:5a:06:b9:57:c3:80:97:30:
a0:7a:43:05:49:5f:64:c7:74:f5:14:dc:13:2a:80:f9:c0:8c:
57:30:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client