Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D230ADAC1D111EF88E84A89762E951A.roa
File: 2D230ADAC1D111EF88E84A89762E951A.roa (raw, json)
Hash identifier: GWvp20wxj3rz2B2aAWudZwwmZ6Ky38tA0O02f6H//Hw=
Subject key identifier: B4:23:7D:8F:6B:F5:7A:DC:33:07:5C:67:C4:B3:8F:99:F0:4E:0B:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D230ADAC1D111EF88E84A89762E951A.roa
Signing time: Tue 24 Dec 2024 08:29:22 +0000
ROA not before: Tue 24 Dec 2024 08:29:19 +0000
ROA not after: Wed 10 Dec 2025 08:29:19 +0000
asID: 984
IP address blocks: 154.193.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74403 (0x122a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:29:19 2024 GMT
Not After : Dec 10 08:29:19 2025 GMT
Subject: CN=676a70e2-921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:17:3a:f1:2e:cc:01:3b:67:ec:b0:1f:6f:
ee:03:bb:da:d5:c6:53:a2:0c:14:fc:ba:ec:ab:92:
5f:a1:c7:de:0b:5f:6e:35:c0:26:e2:d3:83:a4:d9:
52:d3:61:f1:36:db:25:ce:fe:0a:87:d6:17:a8:31:
ab:04:54:2c:be:77:05:05:e3:c4:45:37:54:92:a2:
d4:8a:15:16:3e:d3:3f:93:20:05:31:f7:07:3b:b9:
3f:2b:32:ea:a3:f1:61:e2:c4:45:0a:3a:eb:bb:72:
d2:7a:30:1c:de:6e:b1:d3:c7:fe:8c:34:d7:d4:f3:
bb:73:60:27:fc:d1:ac:e3:8f:1b:98:21:d7:57:36:
86:a9:8b:09:ea:1e:6a:37:79:63:0f:c6:72:1d:54:
c7:ef:17:33:c0:bd:96:f9:09:e0:0c:0d:3e:6e:10:
9f:de:20:f9:c7:91:0e:5d:41:99:18:4f:99:40:b3:
ef:55:e0:44:ad:e0:0b:6a:67:b5:0f:94:b6:37:c5:
3c:dc:f9:01:8b:ea:18:4b:40:9f:cf:4a:95:1a:73:
d0:23:46:c7:74:2e:a3:2a:8e:a1:70:59:cf:2b:f9:
70:ff:d6:86:32:ff:ea:b8:9d:f8:3d:54:23:b0:68:
34:e7:f9:12:b9:d9:2f:76:6f:72:42:da:98:4e:3f:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:7D:8F:6B:F5:7A:DC:33:07:5C:67:C4:B3:8F:99:F0:4E:0B:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D230ADAC1D111EF88E84A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.241.0/24
Signature Algorithm: sha256WithRSAEncryption
23:31:67:85:14:bc:44:e7:b4:a3:75:88:12:17:56:eb:bb:88:
b2:ed:81:42:17:b7:46:67:4e:15:f4:bd:a1:b5:9a:d2:d8:c1:
6d:10:68:df:71:5c:ba:f8:68:a9:bc:5a:81:57:c8:5b:b8:c1:
18:4d:5c:a1:14:10:a1:69:c8:b5:6b:da:d4:0e:69:78:7f:c3:
0f:8f:ee:9c:7f:f3:c7:33:87:15:18:cb:11:10:47:c3:d6:21:
3e:f2:b7:0e:bd:c9:4c:2e:72:05:1e:23:c2:fa:91:d3:42:6e:
6f:77:9e:4d:27:e7:22:74:29:a5:30:87:79:d6:0f:48:54:fd:
4a:ad:84:6c:27:7d:af:a1:3d:fc:4d:5d:82:4b:cc:54:6f:fe:
3d:41:00:b2:7c:78:56:ed:e7:65:9e:c7:1d:eb:5e:72:78:a8:
59:cf:f5:96:6e:2a:f2:6c:8f:2b:8f:84:44:d2:0f:25:5b:27:
35:33:a6:04:33:8e:8e:bb:8e:7e:30:24:53:7d:1e:2c:e4:2e:
61:45:61:00:ce:a2:d7:96:6f:cd:f8:23:c4:e2:22:6b:9b:0a:
f4:48:81:a1:85:73:66:37:cd:85:5f:ba:89:f7:8e:3a:9c:4a:
53:51:96:67:9f:36:3a:2f:30:2f:29:eb:f2:9e:a0:70:92:08:
0c:ce:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:16 2025 by rpki-client