Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3791A232C1D711EFB11DD6AE762E951A.roa
File: 3791A232C1D711EFB11DD6AE762E951A.roa (raw, json)
Hash identifier: pQFbN7aGSwpO9z2l/NQ9wOKJDED9XKRydej9Jy18lVo=
Subject key identifier: F2:DC:FA:15:F3:E8:F1:73:1F:F0:6A:2A:D7:B8:BD:7C:EA:9E:16:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3791A232C1D711EFB11DD6AE762E951A.roa
Signing time: Tue 24 Dec 2024 09:12:37 +0000
ROA not before: Tue 24 Dec 2024 09:12:33 +0000
ROA not after: Wed 10 Dec 2025 09:12:33 +0000
asID: 984
IP address blocks: 154.194.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74453 (0x122d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:12:33 2024 GMT
Not After : Dec 10 09:12:33 2025 GMT
Subject: CN=676a7b05-d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:f9:0f:3f:51:07:8f:85:08:66:40:26:e2:
43:31:51:02:ce:0f:86:60:60:f1:e7:33:2c:b3:e4:
9a:1e:44:27:9a:5e:1f:cf:2e:9a:a6:d1:23:4f:27:
b9:82:0e:47:37:a7:4d:b7:5d:c5:4e:5b:81:ae:44:
2b:50:48:36:38:09:b7:68:97:66:24:91:a6:2d:87:
8a:f7:1f:5a:49:0f:6b:8c:95:07:e6:a4:6c:48:58:
79:c4:2b:aa:f1:73:df:d7:d9:9a:38:65:c2:89:bf:
72:40:8c:3f:aa:77:3a:b9:31:ad:73:b3:c6:71:b4:
b3:e5:ba:e3:04:0e:94:62:4b:46:c5:c6:02:09:e4:
49:d2:42:c2:0e:3b:e3:fe:61:3e:2a:0e:ec:33:e3:
0a:51:b8:1b:7a:5e:29:28:0f:2e:78:11:6e:da:1e:
3d:d3:8a:f3:a1:1f:ef:b0:da:fc:32:3c:3f:e8:86:
e1:3e:b0:a1:58:d9:44:7c:66:1c:44:7c:1e:06:eb:
e1:64:18:7c:b9:ad:74:2f:38:08:fc:56:66:d0:41:
e4:d9:1a:72:a7:40:00:ca:f1:e2:92:60:22:02:c9:
c3:82:73:0e:8e:3b:6e:16:a1:78:a7:8c:cf:92:bb:
ea:5b:c9:17:5f:e5:b9:b7:3f:ad:e5:ea:65:cc:91:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:FA:15:F3:E8:F1:73:1F:F0:6A:2A:D7:B8:BD:7C:EA:9E:16:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3791A232C1D711EFB11DD6AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:32:b1:7f:e4:84:7e:d1:4b:e7:41:d1:0c:8a:30:ed:7b:3d:
b5:07:0f:de:b9:0e:42:09:58:d9:33:42:74:4c:ff:42:d9:d1:
72:db:b0:43:c3:2d:f9:bd:63:45:35:eb:d3:e1:f7:aa:70:c0:
4c:28:9b:61:75:bd:a1:67:5e:3c:07:55:75:83:ab:38:98:6a:
0f:b2:48:2a:a5:a9:52:e2:4c:2d:4e:99:1e:c0:63:5e:c1:ec:
4a:18:f9:20:8d:03:77:ae:cc:eb:59:ea:13:eb:de:eb:6d:d8:
0e:08:0b:d2:eb:65:47:f5:32:49:b7:23:7c:df:b1:36:1b:6f:
b5:34:c8:7f:c7:54:26:a5:c3:39:9c:e3:d8:e3:88:ef:1f:9c:
22:19:bc:19:dc:cf:4d:a9:f7:9b:91:64:45:1d:14:0e:6f:a1:
cb:73:87:d0:32:b2:dd:52:7c:80:9f:e9:52:aa:1e:7d:e1:6e:
2a:80:22:e7:54:55:23:f2:d6:18:96:98:11:30:27:71:d5:6a:
76:bd:70:8c:a9:43:4b:6c:c1:31:ad:a3:98:1c:de:7e:d3:04:
6a:e0:fd:1c:78:41:e7:fd:41:72:a2:66:a7:16:1f:cf:82:92:
96:65:f0:62:00:5d:dc:79:37:c1:70:98:df:37:d0:f9:ab:f7:
75:db:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:12 2025 by rpki-client