Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335859BEC1BD11EF87146F8C762E951A.roa
File: 335859BEC1BD11EF87146F8C762E951A.roa (raw, json)
Hash identifier: JxG+L47UAb9u20jAfEheCScfeSFxBnu+CXiSZFIYlnE=
Subject key identifier: BE:45:2A:BD:04:93:2A:44:87:1D:35:72:66:F5:24:CE:EE:31:06:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012205
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335859BEC1BD11EF87146F8C762E951A.roa
Signing time: Tue 24 Dec 2024 06:06:23 +0000
ROA not before: Tue 24 Dec 2024 06:06:19 +0000
ROA not after: Wed 10 Dec 2025 06:06:19 +0000
asID: 984
IP address blocks: 154.193.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74245 (0x12205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:06:19 2024 GMT
Not After : Dec 10 06:06:19 2025 GMT
Subject: CN=676a4f5e-1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:4d:5d:22:60:9e:57:eb:be:d7:3e:38:d8:
90:8f:01:4b:3a:57:17:9e:82:2e:dc:2c:5a:c6:9f:
b2:c9:17:e5:2c:29:8b:96:bf:85:48:09:53:b6:f6:
f3:66:3f:e6:20:ce:18:16:fa:dd:49:c1:b9:a6:88:
4a:dc:97:e7:64:40:3a:65:95:74:f6:0f:1f:cf:bb:
1c:1e:c3:b2:3a:a2:15:00:48:55:b5:f1:ec:c2:2f:
a6:cb:1e:db:43:ab:e1:e7:05:e8:d9:87:6d:82:1b:
98:2c:60:39:ee:da:17:72:41:f6:d1:90:92:5d:c6:
65:25:e9:99:3b:02:75:81:16:7d:45:c8:ed:c6:a9:
71:a9:8c:39:35:b5:ec:80:92:35:fc:aa:a1:2e:f6:
26:03:79:38:6a:9f:af:76:85:03:00:af:93:41:5f:
ea:95:7f:5e:02:a7:78:bd:da:06:a9:12:df:9a:db:
b2:93:1b:02:ad:12:4c:e5:1d:3c:fb:6c:32:9a:99:
67:ca:e5:a8:78:6e:21:63:32:aa:ff:56:31:58:f3:
50:d2:d3:03:06:1b:3f:5f:72:7a:e7:e2:85:11:4c:
97:14:05:f0:ce:69:d2:57:78:62:3c:9b:01:0b:dc:
67:38:94:3e:cf:26:cc:e6:14:80:3f:85:93:23:4e:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:2A:BD:04:93:2A:44:87:1D:35:72:66:F5:24:CE:EE:31:06:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/335859BEC1BD11EF87146F8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:95:c5:b1:c1:07:08:f6:fa:e7:5f:c9:1b:de:3f:95:2b:76:
a6:e5:eb:7b:3a:8c:d8:48:e0:c5:57:dc:c7:55:0a:57:38:ba:
08:b0:0e:fa:dc:87:a8:d0:1b:34:97:47:28:1d:c8:ac:49:c5:
b7:72:f0:db:3c:14:66:40:56:b3:e8:44:cf:a3:b4:84:5e:6a:
1e:1d:66:84:87:9d:84:ae:05:a1:e4:bb:11:f3:80:18:86:bc:
7d:5c:5c:da:ba:f3:e0:54:4a:21:c9:bc:dd:0a:7b:81:e6:b5:
bf:da:6d:ae:fb:81:c3:a7:c5:63:96:36:f7:7b:e6:61:4c:e3:
33:d8:65:56:e7:b8:1e:68:bb:24:b1:72:de:3e:8f:82:b1:c3:
d7:6e:e2:00:ed:3f:3f:94:eb:59:83:40:d5:8e:84:74:c5:99:
6d:4e:10:55:59:27:2c:83:b5:ae:81:de:00:f6:4f:93:a9:74:
ac:6b:9d:2b:6a:14:7c:89:14:b7:99:6f:a6:dd:48:74:f8:d6:
76:72:f0:5d:ad:2e:fa:94:ef:fe:2d:dc:de:6a:27:37:9a:e4:
96:01:9e:62:b5:8b:94:9e:34:9d:1c:85:ea:46:3a:f2:7d:0f:
e6:cd:a6:f8:dd:55:30:de:8d:c2:47:68:7e:34:49:41:39:af:
4b:5a:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:08 2025 by rpki-client