Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3886018AC27511EFB46E4BB0762E951A.roa
File: 3886018AC27511EFB46E4BB0762E951A.roa (raw, json)
Hash identifier: O5XuD6VmZPcXJMTyqfQICaF9d8LsZyI32p4a8RPldoI=
Subject key identifier: A0:FC:C1:BB:2B:B4:14:97:A4:B5:0E:CD:96:40:32:AE:F3:CB:0A:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012492
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3886018AC27511EFB46E4BB0762E951A.roa
Signing time: Wed 25 Dec 2024 04:03:39 +0000
ROA not before: Wed 25 Dec 2024 04:03:35 +0000
ROA not after: Wed 10 Dec 2025 04:03:35 +0000
asID: 984
IP address blocks: 154.211.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74898 (0x12492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:03:35 2024 GMT
Not After : Dec 10 04:03:35 2025 GMT
Subject: CN=676b841b-f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:f1:64:99:b7:d9:42:3e:d3:68:41:25:81:
96:46:93:da:7f:8e:83:3b:b8:be:69:97:6d:1c:73:
f4:0e:e4:60:26:cf:ed:af:3c:61:93:db:c0:91:6c:
17:e3:47:c6:a4:2e:e2:6b:a9:4f:26:24:ae:5c:a9:
ac:de:27:2f:e0:e6:f9:e6:04:47:8d:29:16:d9:89:
dc:a5:77:25:1a:cf:08:d4:ae:de:36:56:65:c9:ad:
36:33:44:06:bf:50:aa:f4:3c:3c:93:17:52:3d:2f:
6c:99:b2:86:29:87:c3:de:a6:c9:0e:45:63:44:52:
f1:1e:d4:b6:5c:88:71:46:f9:9a:73:45:f6:a8:c1:
27:89:37:b9:00:8e:47:c7:46:02:3c:5a:9b:a8:5c:
c1:4d:8f:96:10:1f:dd:0a:ec:a8:e5:1c:7e:60:ea:
5b:38:b9:8c:14:90:4d:9d:36:6f:ad:91:04:4f:b1:
f5:99:c8:f0:8d:54:97:0e:42:41:ac:03:f5:61:0a:
d1:1f:9b:68:bd:85:f6:de:1f:c8:14:b1:5b:8b:b3:
44:4f:53:43:5f:2e:31:7b:ab:ab:cd:71:a0:6f:98:
8c:0c:24:48:2e:f9:c5:a9:77:c9:ab:df:2c:e5:69:
18:c4:e4:a8:67:bb:50:3a:08:70:d3:70:52:99:a3:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:C1:BB:2B:B4:14:97:A4:B5:0E:CD:96:40:32:AE:F3:CB:0A:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3886018AC27511EFB46E4BB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.230.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:57:45:0e:2e:d5:69:8b:5e:73:33:3a:92:5b:8e:b0:a5:70:
8e:11:86:6e:71:b0:2a:ba:c9:c4:64:c6:1a:0a:16:df:37:62:
c7:9b:07:2a:7b:5f:88:c9:c0:41:d3:49:df:74:28:68:e3:67:
2f:63:22:71:cc:2a:a0:a2:11:d1:49:36:8c:10:2b:5c:46:4d:
d1:ef:a3:53:8c:1d:26:97:bd:c4:df:01:c2:b8:54:b4:8f:26:
d0:b6:9a:c3:25:15:e6:ba:9f:76:84:63:27:9e:67:fc:5d:9c:
f6:95:67:31:4e:f9:ee:df:27:cb:f9:17:e2:29:96:c8:57:fc:
26:cb:47:a4:91:60:88:7c:f9:95:6f:6f:eb:16:a9:89:06:4d:
6e:3b:dc:d8:56:e9:c4:3f:bf:0d:37:3a:78:d8:d9:32:5c:60:
c8:d8:75:11:07:ae:ed:81:15:0b:93:f3:bc:45:54:ae:d0:8c:
d8:ec:2a:8f:ff:09:57:1c:30:52:b6:28:92:50:65:bd:7c:6b:
b5:42:74:7b:7f:9f:cf:8f:c8:81:f2:61:6d:95:1e:85:af:ce:
44:66:5f:6c:6c:d9:69:bb:ce:28:ba:4c:d7:2e:fe:c8:f4:0f:
64:a1:f0:15:80:be:13:bd:52:5f:4c:76:de:f5:77:e5:ed:35:
67:cf:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client