Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3079A612C1D611EFAD1527AA762E951A.roa
File: 3079A612C1D611EFAD1527AA762E951A.roa (raw, json)
Hash identifier: eatcGQyf/MsPUwyLGV1mDLA/NF45f33T+LjifrxnwfI=
Subject key identifier: 68:B3:CB:20:88:3A:84:7B:1F:64:17:05:65:C5:B0:A9:4E:FC:F2:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3079A612C1D611EFAD1527AA762E951A.roa
Signing time: Tue 24 Dec 2024 09:05:15 +0000
ROA not before: Tue 24 Dec 2024 09:05:12 +0000
ROA not after: Wed 10 Dec 2025 09:05:12 +0000
asID: 984
IP address blocks: 154.194.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74441 (0x122c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:05:12 2024 GMT
Not After : Dec 10 09:05:12 2025 GMT
Subject: CN=676a794b-b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:60:17:90:63:84:f3:80:d9:c3:bc:73:4f:
3d:5c:c1:5d:a8:07:5a:02:1f:39:5f:e5:74:a5:cf:
b8:ae:fa:a4:88:2a:78:db:04:7f:bd:0f:99:14:06:
38:22:6f:44:f4:9e:57:de:2b:9a:e0:51:75:54:a4:
72:1a:4d:2f:72:9a:ed:4e:d5:20:3d:6d:90:ae:69:
d7:1a:c8:4a:1b:b4:5d:ec:4e:54:09:b1:0b:3c:72:
b6:c9:8a:2c:12:ec:16:9e:b1:c5:c0:f6:57:4d:ca:
24:e0:51:8c:eb:23:ee:02:7d:d4:ed:1c:d0:b5:82:
06:cb:00:cd:96:9b:2f:6b:b8:d3:dc:19:10:a9:90:
bc:97:40:48:53:38:8d:d2:c4:a9:cf:17:a0:d4:e9:
20:4c:e9:92:17:80:dc:bd:9c:14:1d:5c:92:fa:7d:
d7:88:4b:4d:b8:4e:01:2c:d2:c7:94:18:25:ce:34:
33:78:b7:9d:69:2f:2f:34:36:d3:1c:54:cd:a1:e1:
00:04:52:0c:cb:13:b2:b6:2a:dc:3a:25:d0:51:92:
ea:1c:68:e9:b1:4d:4c:96:f4:ba:2a:85:30:93:ac:
c1:ab:a9:4d:f9:53:84:e1:d0:ea:79:5c:50:53:58:
9a:3b:32:af:80:4a:e3:13:ec:e6:5b:84:a3:b4:59:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:CB:20:88:3A:84:7B:1F:64:17:05:65:C5:B0:A9:4E:FC:F2:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3079A612C1D611EFAD1527AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:db:34:29:53:ba:69:9b:d6:b8:0e:35:a0:ef:e6:6b:a9:b2:
37:9f:63:81:db:90:2c:57:43:01:03:d7:0c:91:ab:98:c4:29:
ed:85:f4:d8:f1:03:a9:c3:db:06:75:d5:5f:70:a7:c1:3e:7a:
47:da:fc:79:4b:dd:29:e4:e3:0c:b0:4d:69:a9:2d:63:ef:7a:
13:30:e0:ff:2d:0b:94:c2:0d:4f:16:1a:0a:4f:40:66:7e:90:
f9:b0:b6:79:aa:0d:37:a3:19:88:84:69:1e:a4:32:2d:60:87:
8b:ba:09:fd:ca:5a:c2:b7:2e:ee:c1:83:20:91:b6:74:a6:2a:
9d:6f:47:04:86:d5:f1:bc:b7:cc:58:bd:d9:48:cc:33:84:6e:
20:d5:63:a7:04:0c:7d:b7:c0:40:6e:54:4b:fb:b6:c1:02:49:
af:f7:ac:95:a8:d9:23:92:d3:1a:be:61:59:6c:54:31:7c:b1:
ee:e8:80:18:fa:32:d6:fd:ac:89:27:32:b4:79:82:c6:01:2a:
4e:7a:0f:4f:b7:e9:47:2c:3b:29:fa:89:80:d7:9c:88:65:5c:
fa:1c:dc:43:d7:80:43:2e:7c:91:85:e1:6b:cf:f6:14:4c:11:
8e:02:de:63:3e:27:3e:22:59:b1:b7:c9:67:68:fa:83:31:28:
7c:a8:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:21:13 2025 by rpki-client