Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BDFECDC411EF876E4B93762E951A.roa
File: 30E9BDFECDC411EF876E4B93762E951A.roa (raw, json)
Hash identifier: WWughCE3DwkojMOSuSaxRxomhTRZtlHmDR5TUJastWg=
Subject key identifier: F2:EF:9F:23:E5:E3:90:8C:CD:0B:B5:C2:DF:42:AB:BA:3D:5A:F9:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01372C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BDFECDC411EF876E4B93762E951A.roa
Signing time: Wed 08 Jan 2025 13:26:39 +0000
ROA not before: Wed 08 Jan 2025 13:26:35 +0000
ROA not after: Tue 16 Dec 2025 13:26:35 +0000
asID: 984
IP address blocks: 154.200.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79660 (0x1372c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:26:35 2025 GMT
Not After : Dec 16 13:26:35 2025 GMT
Subject: CN=677e7d0f-6c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:5e:fc:bd:fa:75:b9:65:2c:fb:83:03:7e:
ad:a9:7a:65:50:00:e9:9b:70:14:1c:4d:9c:7f:f8:
c8:fc:33:f1:a6:a2:28:95:04:d4:29:e3:d1:16:db:
75:59:90:4f:b0:e0:51:39:1e:cb:02:7b:83:84:4b:
64:f0:05:de:16:42:ad:99:a9:4a:5f:3c:42:1f:a3:
52:62:5f:bc:40:dd:dc:a9:aa:08:15:19:f6:68:bf:
f8:bc:9a:a4:8f:ed:fc:cd:05:c1:98:26:53:cc:d2:
b3:9f:eb:26:b8:70:42:be:11:9a:30:02:94:50:ae:
5f:e3:92:d8:50:ff:18:37:ac:fb:09:99:f3:57:eb:
3f:1b:e9:29:ae:ab:90:c5:f1:e1:b8:e8:62:25:9d:
5e:c6:cd:b7:34:10:4a:9f:89:0e:90:c9:7a:21:29:
70:83:e8:99:8d:0b:ee:10:a3:08:de:89:52:bc:e2:
a2:f5:fa:9e:af:77:c4:ed:fd:e2:e1:87:c8:1f:69:
50:d0:8d:8f:ee:ea:8e:b2:34:01:b6:cc:07:0b:0b:
aa:13:d8:5d:ea:9b:c4:4b:54:da:a6:96:2a:a4:0b:
08:39:58:8a:e3:cd:54:fe:a2:b7:ea:02:70:8a:0b:
9a:87:78:c5:77:a1:fb:26:99:56:69:87:3b:7f:c7:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EF:9F:23:E5:E3:90:8C:CD:0B:B5:C2:DF:42:AB:BA:3D:5A:F9:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E9BDFECDC411EF876E4B93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:17:1a:06:c5:ef:0b:ef:ce:af:6e:c5:9d:c6:8f:31:98:ce:
7d:04:b3:b3:6d:5e:22:f7:e9:93:72:bd:7b:93:fb:f4:77:7c:
e6:35:ca:b8:0f:13:1b:10:0d:6a:28:11:62:65:5c:54:18:7d:
51:3d:79:8c:c8:96:99:bb:60:ce:4d:6e:40:f2:da:e3:ab:df:
b4:2d:28:42:94:4f:29:da:13:35:eb:88:e5:8b:fb:63:1b:84:
e3:bc:86:d6:85:29:d1:32:96:4b:6c:0b:53:e2:9e:b4:1d:04:
38:58:61:b4:c9:a6:1c:ee:7d:a2:e0:cf:c2:c0:8b:d8:7b:8e:
94:6e:05:54:53:01:6c:31:8e:ec:e2:ad:95:a1:c1:e6:fa:81:
67:4d:f8:42:15:c1:96:0f:3b:ed:41:e4:c7:69:15:95:05:c4:
2a:c8:9a:f0:74:13:b8:98:23:a9:af:7c:e8:c1:99:c7:db:96:
10:7b:8a:bb:81:c4:85:cb:4a:ae:25:1b:45:58:80:96:af:33:
21:6e:33:0f:ab:b0:c5:86:b2:c4:9c:45:48:f0:c2:cc:bc:98:
b9:68:91:04:f3:5b:13:2e:52:ac:c6:f9:23:1f:a6:97:20:f8:
d4:53:59:54:8e:fa:a5:94:fd:da:5b:c9:77:37:8d:c4:05:ab:
bd:36:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:48 2025 by rpki-client