Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A56C126C5E411EF960CC077762E951A.roa
File: 3A56C126C5E411EF960CC077762E951A.roa (raw, json)
Hash identifier: wkpAB8p7oOIg0IsbQpSPtjHDy4lM3mQe2n7UPqDfLgI=
Subject key identifier: 32:4E:E3:8B:E5:FD:01:5C:6F:6F:EA:02:B2:0A:E7:6C:5C:4F:48:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A56C126C5E411EF960CC077762E951A.roa
Signing time: Sun 29 Dec 2024 12:55:49 +0000
ROA not before: Sun 29 Dec 2024 12:55:46 +0000
ROA not after: Fri 12 Dec 2025 12:55:46 +0000
asID: 984
IP address blocks: 154.210.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77162 (0x12d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:55:46 2024 GMT
Not After : Dec 12 12:55:46 2025 GMT
Subject: CN=677146d5-5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:e2:f6:34:b8:f5:75:27:46:d1:19:6c:a8:
15:fa:6d:fa:73:cd:0d:15:6d:ab:3c:38:e8:0a:6d:
9b:5a:84:9c:8d:b3:d9:27:12:ff:b0:d5:bb:37:7b:
66:70:ec:af:71:40:3b:6b:23:75:ea:d3:f7:77:98:
b1:07:ea:f6:f5:80:9f:c9:97:56:bb:63:05:1d:42:
cf:e4:77:9e:9d:1c:6e:50:bc:e4:3b:1f:1a:a6:13:
3b:d8:9b:a8:a9:a2:d5:58:de:35:26:a6:2c:ed:d8:
7b:dc:d3:62:18:74:99:c6:46:ae:cd:e4:82:dd:82:
3f:c3:3c:f6:e4:6f:37:c5:12:e8:c9:eb:a8:b7:a8:
07:79:ac:d8:d3:2d:3c:fa:70:6f:bb:70:20:2c:e6:
8b:d8:20:d4:b7:5f:60:de:3d:f5:7c:92:47:c9:a9:
80:24:05:59:cf:6b:b6:53:2c:46:65:a7:23:ec:f4:
65:b8:80:00:cc:05:1d:e6:ae:58:2f:cc:26:4a:3b:
cc:54:0a:ef:49:57:62:1a:ce:4d:d1:00:15:72:1a:
4c:17:5d:39:a1:d2:80:ba:56:17:d0:da:b7:fe:2f:
9a:55:7b:81:5f:1b:9e:65:3f:f9:56:fa:af:82:67:
67:09:cd:e5:fd:07:9a:45:c2:cd:a3:61:0c:02:ce:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:E3:8B:E5:FD:01:5C:6F:6F:EA:02:B2:0A:E7:6C:5C:4F:48:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A56C126C5E411EF960CC077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c1:34:a8:e2:cc:c5:d6:3a:fe:8f:8b:dc:4e:48:5a:ad:a1:
df:a8:c3:99:85:3b:0b:70:b7:02:d8:15:a0:cc:7e:42:e8:2c:
74:c3:97:30:de:c9:fb:d3:c0:19:45:1a:3e:b1:c6:f1:05:af:
1f:cc:65:1a:96:f8:34:6e:fd:46:11:3a:ac:23:6a:16:94:07:
f1:f2:4b:d6:68:19:66:7e:d6:0d:47:29:21:0e:0d:70:d4:8c:
31:fa:e0:86:4b:96:e9:36:88:8a:02:25:58:51:b9:ef:fc:a4:
9a:f3:22:00:5d:7c:96:c9:af:f4:84:ab:8d:f0:40:4c:0a:e9:
bf:75:98:6d:53:ce:c6:19:c9:27:ad:37:51:60:e9:b7:6a:81:
61:59:c4:2a:0e:94:0c:9f:35:6d:a2:bd:8d:a0:3b:4c:a9:8a:
6f:a7:82:5e:18:25:e0:85:a7:e4:a1:6f:86:65:c0:f5:75:fa:
03:06:08:82:6f:bc:89:da:5b:75:df:65:48:65:38:51:09:4d:
f2:95:47:03:69:bc:37:4b:28:aa:11:d9:ee:44:52:b7:6a:4e:
9d:e3:d5:66:55:73:f7:24:b3:1d:15:99:5d:f7:c9:83:5b:fe:
79:71:98:3e:3b:06:0b:80:f8:61:20:fe:7c:01:6a:7b:f6:49:
83:1b:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:36 2025 by rpki-client