Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309CFE0AC8A211EFBC45E55C762E951A.roa
File: 309CFE0AC8A211EFBC45E55C762E951A.roa (raw, json)
Hash identifier: 9QRF6fhoZOG+c1luzNa5hDcz9EjylXELL0crAiXgoKI=
Subject key identifier: 2E:F5:AA:74:66:F9:87:5D:40:C3:CC:7A:E6:2A:99:70:97:D0:FF:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013128
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309CFE0AC8A211EFBC45E55C762E951A.roa
Signing time: Thu 02 Jan 2025 00:40:40 +0000
ROA not before: Thu 02 Jan 2025 00:00:36 +0000
ROA not after: Fri 12 Dec 2025 00:00:36 +0000
asID: 984
IP address blocks: 154.218.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78120 (0x13128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:36 2025 GMT
Not After : Dec 12 00:00:36 2025 GMT
Subject: CN=6775e088-3a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:59:7c:eb:33:42:0b:db:97:71:6d:27:48:
f4:7a:3a:a9:f4:28:3f:2e:02:1d:7e:71:40:09:47:
27:d2:f2:f6:f3:f4:84:23:ce:3e:15:d0:5c:6f:f2:
27:ce:96:76:5f:eb:bd:f3:d5:e8:c9:18:b1:d7:a9:
48:a1:b1:b0:fa:8c:c0:24:de:08:1e:e3:e7:25:6a:
5b:e7:18:4a:57:d3:c8:ed:93:53:e9:4c:60:3a:91:
ec:97:31:fb:d2:50:a4:2f:e5:22:c8:d9:15:04:e0:
50:75:b7:77:39:48:f3:04:b1:6e:5b:78:a2:9e:2f:
01:db:b8:2f:ba:32:8a:28:f1:68:14:40:99:a9:a6:
cb:b5:4a:52:4c:68:76:b1:4c:2e:f8:0f:5c:27:ed:
cc:bc:e0:f9:c8:8a:99:6d:b4:f2:0a:e5:00:18:cb:
79:5a:7e:2e:9f:18:fb:1b:d7:a2:69:27:5c:63:6b:
e0:4f:50:32:9d:6b:97:7e:cd:98:13:b1:36:51:e7:
b8:28:50:cd:8c:5f:08:fe:9a:2c:6f:08:7e:26:43:
51:84:3b:24:55:b1:af:c7:1b:60:7e:e2:ba:9f:83:
d1:bd:5b:b9:78:67:af:8b:88:60:ef:ea:da:99:b4:
b5:23:6c:56:a9:27:9f:73:cc:27:4a:01:02:0d:6e:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F5:AA:74:66:F9:87:5D:40:C3:CC:7A:E6:2A:99:70:97:D0:FF:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309CFE0AC8A211EFBC45E55C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.48.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f4:1c:c3:18:a0:f8:10:88:86:cc:40:4e:bd:7e:2a:66:d9:
04:61:d6:36:4b:81:91:5e:f9:c5:3a:57:8d:6c:06:23:87:d5:
c1:fe:7e:df:f4:b4:2d:ca:09:d1:a6:1c:89:fe:f4:07:bc:7b:
80:30:b7:45:5b:19:b0:9c:ba:d7:69:ca:b7:29:ef:58:44:a1:
c1:0f:4c:13:b4:a0:b6:e1:18:21:09:06:1c:25:97:32:c1:a9:
22:3c:84:17:a8:a0:17:24:c0:60:6e:2e:86:00:94:5a:bf:c9:
3c:5d:5b:72:a2:9f:db:18:70:e7:5f:2f:b1:32:d7:5b:8e:ca:
a3:cb:29:76:2b:9b:d7:9e:78:91:4e:20:f7:67:bb:0c:8d:38:
5e:1c:65:aa:72:30:fa:8f:5f:84:7d:e1:f4:63:0b:6e:af:1b:
01:5c:81:c0:70:72:a3:87:e2:45:1d:d4:80:78:1f:d5:8e:16:
9e:a9:8d:24:2d:9e:85:00:dd:0d:a8:27:62:d3:b0:18:ce:e7:
78:b0:13:6a:83:92:50:03:ad:a6:3e:1e:94:52:84:1b:3d:78:
f2:bc:2b:7c:18:c5:da:ce:9a:7b:57:4f:01:9e:3c:d1:8d:52:
a2:94:59:42:b5:88:71:fd:2c:ec:4c:0d:9b:f1:18:7d:a3:b4:
d0:43:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:42 2025 by rpki-client