Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30C6052AC1A411EF982F126D762E951A.roa
File: 30C6052AC1A411EF982F126D762E951A.roa (raw, json)
Hash identifier: WwWjXPtMPddtWnLvs1CfPhdaxkK+cFtifwH9gMTEXOE=
Subject key identifier: 02:81:98:42:C8:1D:46:9B:4A:D3:2D:91:AE:D9:12:7B:58:6A:84:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30C6052AC1A411EF982F126D762E951A.roa
Signing time: Tue 24 Dec 2024 03:07:21 +0000
ROA not before: Tue 24 Dec 2024 03:07:17 +0000
ROA not after: Wed 10 Dec 2025 03:07:17 +0000
asID: 984
IP address blocks: 154.92.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73945 (0x120d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:07:17 2024 GMT
Not After : Dec 10 03:07:17 2025 GMT
Subject: CN=676a2569-444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:c0:0a:31:e2:1b:2b:66:a9:6e:7c:51:51:
84:35:78:ee:5f:22:6a:26:f6:e4:b7:d5:29:ca:4a:
00:65:97:a6:0c:e5:1f:d5:c8:a5:18:57:4c:d1:d4:
6a:89:c9:5a:32:fa:c9:89:4f:17:7e:75:8b:07:32:
90:65:4a:5e:bc:42:48:f8:ab:d1:f4:ff:a0:cc:b8:
b4:5a:7c:34:6e:2b:e2:e2:8e:42:e7:03:9d:46:11:
8f:ed:52:4a:09:3b:da:49:53:f8:27:9d:12:23:89:
c0:9d:1b:e4:a1:ab:e0:9e:6c:92:32:15:8a:50:7c:
0c:45:f3:99:a9:3a:80:b7:ea:89:b9:da:f7:b6:c1:
13:86:05:28:b7:9f:ae:38:f7:92:5e:78:ae:49:0e:
36:b0:c3:09:54:2d:07:8e:d1:1a:5a:80:3d:fb:96:
bf:5b:63:90:76:d4:34:48:1e:3e:05:5f:5d:f3:fc:
46:1f:27:92:b8:7e:1d:32:c9:33:ca:91:f0:de:1a:
2a:9f:e2:76:f3:d8:0a:c2:59:29:1b:d2:af:f7:c0:
47:23:44:77:66:c3:cd:a5:04:bb:9c:ea:9d:9d:af:
16:eb:c9:36:e2:bf:7f:de:ed:f7:33:a8:38:03:96:
4a:cb:82:5e:10:ed:19:df:28:08:6a:57:2b:4d:6c:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:98:42:C8:1D:46:9B:4A:D3:2D:91:AE:D9:12:7B:58:6A:84:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30C6052AC1A411EF982F126D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:22:17:86:b4:c4:8f:a1:f8:49:25:7d:6c:37:a2:76:93:3d:
72:b3:84:32:ed:d6:10:09:05:e9:90:2f:b8:83:c2:4a:a6:b9:
fa:c8:b5:94:82:bf:16:25:85:ba:6a:21:75:a1:5b:e8:cd:6c:
02:c5:91:e0:56:ec:b8:37:ff:ba:b4:1b:04:74:e3:64:27:eb:
8b:cc:cd:04:1c:7e:32:32:d6:18:60:9a:f6:d1:ae:42:fa:f3:
dc:25:80:ef:6f:91:24:02:bb:d3:2b:4a:36:c2:4c:e4:44:5e:
f8:c0:52:b8:2c:0f:34:fb:2d:4a:5d:92:07:8a:4d:7c:45:82:
ed:a6:b7:e6:91:99:0e:89:bf:38:a4:ad:dd:db:c5:3e:c9:a3:
01:c8:32:4e:c0:e8:4f:6d:ff:84:c2:99:ef:59:d3:3f:d2:b7:
1a:53:4d:28:aa:b7:78:83:bc:16:31:b7:4f:67:a2:86:4a:aa:
c9:78:cb:32:0f:47:1d:26:8a:e2:71:2a:de:de:29:d5:ec:32:
0f:bb:8e:a6:4b:c8:23:da:f2:d2:8a:de:88:b9:a0:45:66:53:
db:7d:2a:17:55:f4:96:15:14:bb:af:aa:27:65:d0:0c:c3:8d:
94:f3:8b:d0:43:29:8d:8a:46:cb:ec:e7:77:07:5c:90:f5:c5:
47:e4:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:50:29 2025 by rpki-client