Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34181952C3D411EF91F99659762E951A.roa
File: 34181952C3D411EF91F99659762E951A.roa (raw, json)
Hash identifier: 9F7iDKl15Ll4mgcv9DvXy7vB8vgao0q2BOJLg6OEcEc=
Subject key identifier: 8C:E9:96:76:BE:7A:EF:CB:77:05:72:A8:4C:46:C2:32:0C:51:0B:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012860
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34181952C3D411EF91F99659762E951A.roa
Signing time: Thu 26 Dec 2024 21:56:05 +0000
ROA not before: Thu 26 Dec 2024 21:56:01 +0000
ROA not after: Fri 12 Dec 2025 21:56:01 +0000
asID: 984
IP address blocks: 154.83.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75872 (0x12860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:56:01 2024 GMT
Not After : Dec 12 21:56:01 2025 GMT
Subject: CN=676dd0f5-3022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:9e:72:46:65:37:95:79:b5:71:de:ac:fc:
50:f9:d5:eb:70:d9:75:ff:a1:bc:2b:03:15:07:dc:
f5:ed:64:36:dd:1b:f6:ac:6c:18:23:78:e7:c2:6c:
ef:07:a8:f2:f0:5e:7c:e9:f9:e4:62:6b:13:e1:fe:
f9:b0:b6:f3:f7:fc:99:83:11:2b:54:ef:c7:41:ed:
84:f1:32:b6:8d:2b:7c:e5:f8:08:66:a0:14:9c:7d:
1a:37:de:17:fc:e2:c0:b7:a2:0c:88:67:37:db:07:
ac:2e:a5:8e:4a:21:eb:b5:36:52:59:32:a0:0c:2f:
10:22:47:b9:ac:ee:90:8d:11:b7:c4:96:65:89:af:
41:7e:93:2d:e2:33:3a:bd:d5:76:e0:db:6c:77:7f:
5b:76:33:2a:22:d6:53:0d:08:7c:f0:82:f2:57:20:
f8:70:76:18:8d:f9:a6:09:69:e4:cd:56:f0:d5:c0:
2d:a3:d2:0a:29:b1:3c:83:94:66:87:9e:c8:de:74:
fb:45:19:4a:d9:ae:18:d0:87:2e:5d:5e:a9:2e:66:
51:89:9c:da:4f:37:3c:39:2c:47:f0:ac:54:10:e8:
94:ab:29:34:d8:45:f1:5c:9a:dd:66:e4:61:0a:54:
9b:e7:ca:08:b8:34:d4:e3:c7:fe:d4:b4:31:e3:50:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:96:76:BE:7A:EF:CB:77:05:72:A8:4C:46:C2:32:0C:51:0B:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34181952C3D411EF91F99659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.242.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:14:7f:36:07:e8:c2:90:07:fa:23:e1:14:90:c1:b3:10:
79:1f:c0:6f:78:e6:d2:a4:2e:64:cf:25:30:6e:0d:6e:3e:ac:
56:1d:46:ef:56:c5:43:82:24:39:be:27:6f:e9:6e:17:f3:b0:
9e:92:13:12:24:01:c3:c5:01:fd:fc:28:a7:d3:8a:24:81:b2:
12:98:b0:20:a0:ab:ed:02:91:b4:81:2f:90:4a:47:1c:8f:34:
90:4d:36:c0:f3:77:8d:4c:d3:35:5f:b5:05:82:e7:a7:19:8c:
ba:01:b7:7f:02:9f:fc:2d:b4:2c:a6:bf:db:c3:79:c6:25:f1:
37:19:69:16:17:20:e3:92:4b:52:6f:c2:51:59:9a:f7:4c:3a:
31:6b:c1:f8:32:dc:5c:e0:66:ce:fa:93:be:63:2b:37:45:da:
08:89:e0:ba:6c:5c:8d:d4:ee:b0:cf:5a:fe:8f:08:30:09:7a:
f5:58:7c:14:e4:e8:ef:48:c9:17:65:ad:6b:6c:dd:30:ad:15:
9e:55:03:23:b0:4a:29:09:32:3b:21:99:2d:1b:ea:68:f8:87:
ad:45:6e:86:ca:01:d5:b6:a2:a3:65:82:11:53:38:da:50:70:
f2:ff:1e:9e:f0:26:17:a1:61:b3:aa:13:79:30:b3:91:85:c3:
46:3c:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:00 2025 by rpki-client