Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAC56F6C0CD11EF8C4DEB91762E951A.roa
File: 3BAC56F6C0CD11EF8C4DEB91762E951A.roa (raw, json)
Hash identifier: zLzh6idAW9Tis5IEqW8gmrqXdE2i0tbe936JNTnVnok=
Subject key identifier: 94:03:52:03:81:43:9E:13:D5:92:7C:F7:A0:F0:29:17:79:A4:DB:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAC56F6C0CD11EF8C4DEB91762E951A.roa
Signing time: Mon 23 Dec 2024 01:28:37 +0000
ROA not before: Mon 23 Dec 2024 01:28:34 +0000
ROA not after: Wed 10 Dec 2025 01:28:34 +0000
asID: 984
IP address blocks: 154.82.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73238 (0x11e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:28:34 2024 GMT
Not After : Dec 10 01:28:34 2025 GMT
Subject: CN=6768bcc5-08d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:6f:c8:b5:23:75:5d:a8:12:8d:12:07:89:
9c:7a:06:60:ed:06:9d:07:e5:c0:31:fa:6a:ec:11:
2c:fe:16:8c:4a:12:04:2e:87:c5:1e:48:67:ad:e0:
f5:9d:21:84:81:15:e0:71:be:8d:45:53:ba:c9:7b:
01:28:1b:44:c4:69:3f:ff:07:98:7e:a8:66:a4:25:
d2:0a:19:a4:a4:98:62:bf:24:87:93:ab:35:c5:c0:
59:54:71:c5:5a:9f:64:bd:72:a4:b6:4e:f7:f1:a1:
67:ef:e6:2f:4d:8b:c8:a5:ae:bd:6e:3c:a9:91:b0:
a4:cc:86:5f:d1:ba:5d:b1:cf:e5:55:ec:50:d9:0e:
5d:ea:36:c9:9d:44:3c:6e:a9:f2:b2:1e:f0:14:70:
bc:19:cc:57:23:30:c5:9e:d9:db:fb:ec:6f:ae:5f:
79:e6:43:21:a8:00:d5:1e:65:a9:64:ff:c0:5e:ba:
c7:19:bb:b1:81:31:53:5b:5f:37:d1:a5:3b:47:c9:
8e:6a:29:22:76:2a:32:6d:16:e8:fe:fa:98:4e:5b:
28:fd:7d:cb:d6:c8:0c:51:3f:59:8c:b6:3b:24:06:
1d:17:4a:36:0e:07:98:83:44:03:ff:89:46:b7:84:
45:71:b4:39:f7:a1:a9:4f:44:8c:1e:dd:25:28:e3:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:52:03:81:43:9E:13:D5:92:7C:F7:A0:F0:29:17:79:A4:DB:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BAC56F6C0CD11EF8C4DEB91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:15:3d:a0:82:08:4c:c3:5c:c5:bc:7b:2e:07:b9:29:25:0a:
45:ff:38:8a:a6:41:01:d3:c2:ea:e7:8c:0f:9b:46:df:4a:9a:
fe:0b:0f:1b:8e:f8:4f:03:b0:24:46:de:d3:56:01:58:1f:b8:
44:54:18:8b:fe:9b:a2:75:19:3a:76:20:02:56:9e:2c:b5:7a:
43:ad:d8:66:d1:5c:c8:c9:12:5b:11:eb:28:b1:33:b8:c2:3f:
45:5e:de:dd:7b:b4:2d:a1:b9:f0:4a:dd:01:91:0f:0d:0d:a9:
ce:68:be:ec:be:82:8a:67:07:98:8f:b3:af:4a:f4:b9:4c:79:
d7:15:72:14:5c:37:b0:ff:de:f7:67:6b:44:7b:84:02:94:2a:
81:e8:97:cd:a3:a5:99:8a:77:0f:88:59:dc:82:a5:d1:2f:38:
f7:42:ea:d6:4f:ba:c1:06:1a:41:21:f4:b9:b8:b3:3e:c0:69:
fb:e3:20:eb:15:3e:05:cf:41:84:c1:13:a8:49:7d:69:01:24:
e4:c9:be:f5:93:a1:66:9d:9e:12:f9:5a:42:ff:36:39:8a:2f:
d5:12:af:5c:de:fd:dd:85:72:2d:c6:2f:8d:1e:f7:13:56:2c:
82:85:bb:a0:08:0f:50:49:e0:d7:77:5f:fc:5d:10:86:fc:1e:
62:e1:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:43 2025 by rpki-client