Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35290442C3C411EFA7E03574762E951A.roa
File: 35290442C3C411EFA7E03574762E951A.roa (raw, json)
Hash identifier: zOJm9mY2fDEQjCTF1oGCG+8z+82Vn/AHF/fTkjC598U=
Subject key identifier: D3:F7:67:31:01:82:87:9B:E6:CB:FF:A8:2C:B5:95:C2:B3:8F:96:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35290442C3C411EFA7E03574762E951A.roa
Signing time: Thu 26 Dec 2024 20:01:35 +0000
ROA not before: Thu 26 Dec 2024 20:01:31 +0000
ROA not after: Fri 12 Dec 2025 20:01:31 +0000
asID: 984
IP address blocks: 154.82.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75710 (0x127be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:01:31 2024 GMT
Not After : Dec 12 20:01:31 2025 GMT
Subject: CN=676db61e-972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:52:6c:0d:8e:c3:73:4b:a9:0b:f3:40:d0:
3e:1b:6f:43:20:e7:f3:35:29:14:71:24:93:98:12:
4e:2b:d9:0a:95:30:14:9f:e4:40:4c:51:c5:fb:7e:
e6:e9:f8:a2:48:26:a8:6d:9f:c2:71:46:43:42:9e:
66:9a:0a:f0:ca:78:ba:60:f3:24:f9:2e:da:f0:03:
6c:c4:11:d1:9f:99:60:9a:5f:c6:b7:84:ea:84:00:
23:db:b6:2f:cb:b8:52:38:5f:fe:3d:37:be:7d:9f:
b1:b2:58:91:f2:8b:7c:cf:2a:a4:f9:1e:05:22:46:
18:3a:36:d8:0e:a2:46:b5:96:f0:6c:83:25:17:c9:
37:65:27:38:13:97:2a:2e:67:83:07:60:72:14:22:
2a:cf:84:a7:5e:bc:8f:33:05:0a:c6:ff:74:12:35:
ae:da:45:76:0a:61:4e:2e:d6:77:e0:ca:c6:4b:26:
e5:c1:f9:c4:3c:ab:9c:a0:c5:5f:03:84:7e:ca:3a:
bf:3a:a7:19:1c:eb:a0:78:1c:80:45:ba:74:98:bf:
09:f4:38:2d:24:3f:0e:e5:f3:82:3f:5f:be:07:a3:
30:59:ca:56:4b:4f:6f:0b:f3:53:13:7c:48:36:4a:
47:ac:99:03:47:53:67:9e:3c:f0:d3:9d:f3:9c:57:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:67:31:01:82:87:9B:E6:CB:FF:A8:2C:B5:95:C2:B3:8F:96:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35290442C3C411EFA7E03574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:01:ee:6f:16:32:e5:c7:89:9d:93:7d:56:65:87:6b:0d:14:
a4:73:04:c5:22:36:bb:09:c0:f3:2d:80:70:5a:21:47:31:0d:
ba:d6:71:e9:df:87:73:15:0e:cf:5b:58:09:ea:76:ee:8d:7f:
02:81:e6:5c:db:da:b1:ca:c0:3b:0b:2e:63:af:6f:92:34:b9:
d5:27:fd:86:f8:20:06:5f:1d:f8:de:20:55:61:a0:e3:f7:ce:
7e:65:c2:c1:4d:4e:23:a5:f5:92:5a:c1:a8:ee:8f:a3:e0:fb:
ac:30:e1:74:5b:0f:92:71:bd:e1:fc:a9:0f:9b:78:0f:25:fd:
c7:46:4a:07:55:5c:f9:51:11:58:08:02:77:77:50:f1:1d:db:
03:8b:0d:df:41:8f:68:a9:79:f9:82:be:37:dc:d9:55:be:a1:
c7:f8:88:6f:0c:ad:3a:fa:52:0f:e9:4b:69:44:31:46:f7:ce:
ba:fc:c2:2a:2c:02:0a:d7:78:bc:3e:8d:0d:bc:aa:42:7c:58:
28:a3:bc:68:09:1c:3b:1d:47:5b:26:63:cc:f1:79:1c:8f:63:
b1:38:77:cc:4a:df:59:55:48:5f:25:36:be:91:45:6f:47:05:
83:bf:b1:d7:2e:44:d6:5d:16:41:f7:7a:d1:24:0a:2f:23:32:
2c:9c:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:41 2025 by rpki-client