Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37790F5AB21511EF9E73148C762E951A.roa
File: 37790F5AB21511EF9E73148C762E951A.roa (raw, json)
Hash identifier: gVQTRQ8RAEpGlL0Q9SMD05O/TijgWkpLtbcAjBjJ27Q=
Subject key identifier: B7:A4:37:FE:4C:A5:8B:16:F2:66:A7:D4:F6:2D:C4:69:2C:B7:18:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37790F5AB21511EF9E73148C762E951A.roa
Signing time: Wed 04 Dec 2024 07:56:07 +0000
ROA not before: Wed 04 Dec 2024 07:56:03 +0000
ROA not after: Fri 24 Oct 2025 07:56:03 +0000
asID: 136744
IP address blocks: 154.211.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71632 (0x117d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 4 07:56:03 2024 GMT
Not After : Oct 24 07:56:03 2025 GMT
Subject: CN=67500b17-2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:bd:1b:40:18:e1:c1:cf:cf:bd:d4:49:0a:
e6:ce:0f:3d:6a:82:3e:6c:c2:db:a4:4a:e3:9c:df:
14:8a:e5:1a:49:0a:17:e3:af:8b:d8:4d:40:e1:b5:
1b:7a:47:bc:75:0e:f7:48:95:fa:af:de:7d:21:d0:
e2:2f:8a:21:46:e2:10:e5:44:81:27:47:35:9b:a4:
81:7d:3f:45:6f:b2:64:96:2d:19:2b:cd:8e:7a:72:
f3:50:4e:71:ee:54:f1:bb:92:18:41:a6:9d:90:81:
9c:b2:d8:3f:d9:57:50:96:91:1e:4e:da:08:a6:52:
ca:dd:05:f6:c4:9b:33:57:ef:3e:e8:5c:5f:12:28:
14:dc:36:50:a9:eb:0b:d2:00:3e:d8:0b:25:8c:02:
bf:c5:c3:6e:98:4b:b4:26:9c:c4:88:2b:5c:2b:dd:
b2:c1:2e:a6:37:45:f9:ad:5b:2a:3f:07:52:4d:c1:
67:06:c1:5d:14:47:c1:70:b8:0c:3f:8c:87:9e:22:
43:40:de:52:60:8e:50:64:48:e2:01:2a:d2:01:55:
95:c2:5a:5d:ef:8e:5b:0d:0e:69:ee:c0:54:f9:35:
b3:52:1d:3d:18:2f:f3:b7:ed:90:5e:5e:9e:4e:36:
92:7d:f4:ed:9f:7b:d4:9a:31:d1:17:31:5c:c5:a1:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:37:FE:4C:A5:8B:16:F2:66:A7:D4:F6:2D:C4:69:2C:B7:18:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37790F5AB21511EF9E73148C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.181.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:ee:7c:d9:57:8d:2f:ea:de:e6:aa:b0:e0:e6:99:37:ab:31:
05:f1:5c:ea:87:f4:a7:b2:df:e6:62:0f:38:7a:59:43:15:81:
9a:09:66:0e:6a:24:d4:02:90:e3:78:e8:09:42:9c:04:a1:4d:
3e:bf:11:28:9f:cb:27:a0:71:52:fb:48:07:f9:a9:bd:e1:8c:
61:ce:9f:fd:06:57:b9:a7:d4:28:63:44:a1:00:ee:2f:d7:6d:
ca:f8:b4:17:a0:35:cf:e1:05:7b:6a:60:27:04:19:41:7e:a4:
eb:eb:77:86:e9:11:1c:3e:6b:ec:7e:be:7d:bf:a0:54:8c:7c:
34:6f:0c:27:18:8f:89:f8:08:a9:a3:f8:10:46:b8:32:bf:89:
8d:b7:54:95:11:2c:ce:4e:f2:bc:81:e0:b4:bc:90:f8:ef:91:
e5:4c:90:e1:6e:a4:bb:6c:40:47:d7:cb:46:50:80:59:54:17:
92:9e:58:09:83:70:c5:39:99:30:68:48:eb:dc:9f:4e:ad:13:
1e:f8:cc:ad:79:10:38:ac:8f:d6:d3:87:98:e3:8f:12:da:41:
29:ab:12:13:d1:f8:87:1a:9d:92:3a:23:5c:e0:5d:e9:c1:5d:
ba:fc:ba:e8:e9:3e:c1:47:61:b0:dd:6c:88:4a:28:3d:a0:20:
2c:33:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:02 2025 by rpki-client