Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2370B2C38211EFAC2C3856762E951A.roa
File: 2D2370B2C38211EFAC2C3856762E951A.roa (raw, json)
Hash identifier: zjHpkqN0P5640RjqsFPvb2F2/iIZ8tPeO2R4VNwyOs0=
Subject key identifier: 8B:1E:F7:70:F9:76:29:C2:E3:B5:2D:91:BD:2F:8B:7B:D0:C5:23:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01276A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2370B2C38211EFAC2C3856762E951A.roa
Signing time: Thu 26 Dec 2024 12:08:54 +0000
ROA not before: Thu 26 Dec 2024 12:08:51 +0000
ROA not after: Fri 12 Dec 2025 12:08:51 +0000
asID: 984
IP address blocks: 154.94.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75626 (0x1276a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:08:51 2024 GMT
Not After : Dec 12 12:08:51 2025 GMT
Subject: CN=676d4756-c25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:f3:3c:40:42:3a:33:15:5f:69:ea:91:48:
0c:f6:de:12:41:01:18:23:58:27:9f:15:95:bc:93:
b7:fb:a7:89:48:d7:a5:bd:cc:9a:94:6d:7f:ca:0e:
4b:26:13:bd:c3:64:43:9c:b4:58:91:04:98:cf:cc:
21:be:20:bf:4a:46:d2:b3:93:1a:63:34:26:28:09:
d4:e9:d2:c2:31:ea:0d:5c:42:3f:70:c3:01:e4:b2:
47:0a:32:52:53:92:1c:e3:10:30:bc:6e:b0:0e:d5:
0f:26:b5:da:6a:d6:e6:9d:63:6a:57:ae:92:bd:36:
a9:15:f3:e0:ec:d2:f2:d5:b6:59:3c:da:88:9d:64:
7d:ac:62:c8:13:58:a4:c3:2e:d8:62:41:f3:55:2f:
02:5c:39:7a:3b:17:b7:80:40:cb:5e:cf:cb:88:2b:
28:ab:76:dc:fe:71:c4:ff:f9:a5:a0:5c:d8:6c:29:
04:0c:20:eb:7c:3e:d0:b6:3f:a5:1e:24:a1:3b:41:
74:e5:ff:c6:62:79:ea:a4:33:7a:fb:eb:17:f9:28:
4d:02:6d:0c:06:13:58:67:6f:bd:1b:26:ec:40:dc:
0c:6a:ef:bc:35:6d:1c:b1:01:b1:70:93:e8:fb:5e:
9a:0d:c7:42:32:39:40:ff:5e:d2:34:e8:61:89:d9:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:F7:70:F9:76:29:C2:E3:B5:2D:91:BD:2F:8B:7B:D0:C5:23:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2370B2C38211EFAC2C3856762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.204.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8e:f4:31:e4:4d:28:6a:c8:20:f8:7e:da:6d:27:6b:c9:65:
3e:27:c7:de:61:d3:d4:1f:9a:60:96:b1:e4:96:d1:bc:7e:95:
83:8a:ab:d0:1f:94:6f:01:d2:b0:e5:ab:92:62:f2:c7:de:8f:
cc:ea:00:6f:54:99:92:6a:9c:46:1a:02:4e:d0:8e:d4:0f:18:
72:23:00:a7:87:00:b8:35:65:f3:c5:2e:8c:2f:ad:af:e1:9e:
4c:de:45:e5:99:6a:3e:8f:01:e1:31:97:ee:2c:fa:0a:c1:59:
88:5d:05:e9:2d:b3:9c:e6:7f:b8:66:e1:3b:4c:2e:7e:56:1d:
a3:60:4d:82:63:29:65:0f:70:86:de:6c:8c:5f:ce:73:50:00:
5e:ab:fd:08:6b:c1:83:bd:ac:a8:bd:cc:d8:d5:b6:65:1a:f3:
5c:10:0d:76:a1:36:61:7f:98:19:3c:6d:b8:f1:45:af:6c:11:
74:b0:49:85:9b:55:3c:c6:58:fb:51:a9:38:3a:af:89:54:f1:
76:33:66:49:3d:80:d1:2a:aa:00:7d:25:b1:1f:ac:3e:29:1f:
16:a6:6c:82:ab:0d:81:87:5f:3d:50:39:70:77:91:17:04:64:
22:ee:ff:21:7a:a5:d9:27:17:7b:38:1d:4b:87:5e:20:58:05:
c3:bc:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:56 2025 by rpki-client