Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F72B98C26011EFAEF21F9B762E951A.roa
File: 30F72B98C26011EFAEF21F9B762E951A.roa (raw, json)
Hash identifier: 5Ar8+s/9ESQ1jJyVICj/nK/dTyGkwHl+n3bUkHjZcH8=
Subject key identifier: 9E:5F:48:EC:13:2C:62:6C:10:23:77:F3:00:93:06:1B:6F:67:68:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F72B98C26011EFAEF21F9B762E951A.roa
Signing time: Wed 25 Dec 2024 01:33:07 +0000
ROA not before: Wed 25 Dec 2024 01:33:03 +0000
ROA not after: Wed 10 Dec 2025 01:33:03 +0000
asID: 984
IP address blocks: 154.199.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74664 (0x123a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:33:03 2024 GMT
Not After : Dec 10 01:33:03 2025 GMT
Subject: CN=676b60d3-8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:55:8a:12:aa:c5:cd:34:ce:61:81:e0:04:
43:ea:5f:7a:9e:f1:c3:12:48:74:87:de:37:f5:26:
2f:60:b9:61:f4:d2:f4:9a:7c:53:af:23:cb:fa:fb:
73:75:b4:7f:cc:5b:e8:b5:19:43:ca:25:d3:0a:01:
9c:ef:4d:25:55:8f:03:89:b6:ab:da:66:58:74:f1:
71:1d:75:5b:f7:e0:a9:24:13:b0:07:48:93:4a:e9:
02:57:f6:e6:7d:23:6e:d7:3b:37:38:5d:37:22:60:
a2:bd:38:d7:b3:f6:45:a2:82:f0:17:e2:f3:76:aa:
17:4e:2c:0d:2d:cc:23:e0:20:2c:02:11:4f:cb:bc:
b9:b4:73:2e:41:08:fc:a6:5c:9f:6d:0b:f5:e0:20:
2a:31:39:23:a1:a8:cb:93:d6:df:d8:94:fc:66:6c:
df:d4:0f:73:12:f2:f0:50:a7:ca:c6:ef:60:03:90:
ac:c7:37:aa:5e:e0:de:28:cc:74:72:4f:d4:a6:16:
7d:42:2b:10:f5:33:cb:4a:4c:a1:4f:f1:e0:35:2f:
54:df:79:92:47:ea:08:01:10:03:a9:bb:7c:d7:21:
8e:d2:3f:f4:e4:4b:a4:1e:f2:24:17:fe:eb:01:65:
d2:ad:df:d8:ea:a9:19:6c:41:b3:a8:4d:35:98:55:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:48:EC:13:2C:62:6C:10:23:77:F3:00:93:06:1B:6F:67:68:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F72B98C26011EFAEF21F9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:96:97:c1:51:b2:59:d0:2e:c4:d3:c6:5c:09:8d:3a:87:26:
6a:f1:48:8e:d4:d7:31:fa:bd:f5:55:00:3c:22:ff:36:78:d9:
70:33:08:37:77:3b:a2:b5:08:c2:5d:ae:2f:48:39:b4:b2:9b:
f0:4e:d2:a9:4d:86:12:bc:f7:6e:b0:07:3f:71:6b:fa:8a:e6:
46:d2:3c:ca:31:9e:3b:2a:83:fa:80:49:e6:4a:80:bc:a5:dc:
f2:56:b4:3b:40:92:97:27:c2:fe:2b:86:47:51:49:c1:33:80:
ee:0b:73:c2:c8:c8:b1:71:a9:b8:98:50:e3:95:72:b5:36:09:
cd:91:a8:19:94:17:6f:7a:40:ae:68:52:d6:cc:6c:50:bd:fd:
ea:82:20:27:04:8a:a7:19:6c:40:d6:4f:ed:2c:71:c3:98:4d:
5e:cf:2f:f4:a1:66:9e:20:5d:17:8a:9b:18:93:27:6e:1c:3c:
32:69:21:02:47:71:c8:b3:48:54:be:ea:ab:7c:ca:68:1e:6e:
45:91:76:42:20:9e:eb:f3:8b:d2:49:35:c3:fc:6e:f3:13:1f:
2b:15:57:9c:8f:2b:fe:69:e1:6b:8f:b5:13:63:35:0b:47:e3:
61:9c:b8:4f:4e:05:12:07:5b:58:40:aa:6e:19:78:79:3b:96:
3f:e1:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:45 2025 by rpki-client