Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E646C54C5DB11EF86C474BE762E951A.roa
File: 3E646C54C5DB11EF86C474BE762E951A.roa (raw, json)
Hash identifier: o2bUh678IbHh7jdEiFs9dxfU2W+0v9Sb+4YyasWi/h4=
Subject key identifier: BD:84:F2:68:A5:A6:D4:F7:26:C4:9D:5F:94:88:CA:21:5E:18:57:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E646C54C5DB11EF86C474BE762E951A.roa
Signing time: Sun 29 Dec 2024 11:51:31 +0000
ROA not before: Sun 29 Dec 2024 11:51:27 +0000
ROA not after: Fri 12 Dec 2025 11:51:27 +0000
asID: 984
IP address blocks: 154.210.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77082 (0x12d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 11:51:27 2024 GMT
Not After : Dec 12 11:51:27 2025 GMT
Subject: CN=677137c3-f340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:02:b6:3f:b7:f3:ba:c5:21:5b:ee:09:48:
19:53:3a:02:fc:66:e1:bb:87:ab:81:a2:69:8a:18:
b5:a0:a0:30:24:9a:f9:b1:e7:68:e9:1a:3c:61:0e:
b1:d1:8f:01:86:48:76:3a:a3:e9:e4:9c:6c:47:1d:
4c:4e:f2:c4:da:af:75:ea:e4:37:db:dc:37:0b:89:
b5:ac:9d:f8:11:00:0f:72:6a:3c:32:15:19:24:c4:
82:89:fe:ce:1a:c0:9d:9a:a6:99:65:c8:24:08:32:
1e:5a:24:ad:58:a0:bc:e2:39:fc:05:e9:53:d0:58:
e8:87:93:aa:4d:ed:ac:b2:df:be:09:9d:eb:96:13:
14:81:9b:fe:c9:6b:b5:e3:0b:3c:8b:54:fc:30:a0:
2e:49:0d:de:23:27:67:3f:e1:60:1a:ab:2e:29:60:
4f:1d:1f:3b:0f:25:0f:85:97:e1:dd:d0:e7:89:cc:
dc:43:57:27:dc:da:c3:a4:e3:da:3c:16:88:2c:44:
7b:8a:76:ee:6e:8d:07:50:23:3d:ae:eb:70:08:b2:
d8:51:6b:83:cb:ee:ad:1d:6e:1e:e5:87:b2:c3:f1:
16:ad:e7:1d:b9:e8:eb:fb:e0:36:5e:24:59:57:87:
d2:b4:3b:b7:f5:cd:f5:a8:40:7f:96:62:66:6e:81:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:F2:68:A5:A6:D4:F7:26:C4:9D:5F:94:88:CA:21:5E:18:57:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E646C54C5DB11EF86C474BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.75.0/24
Signature Algorithm: sha256WithRSAEncryption
11:42:4c:dc:64:3f:e7:5c:3d:33:8f:bf:6c:36:9e:36:ca:47:
7c:b7:13:62:5a:b9:40:26:a8:68:4e:83:3f:0e:cd:56:9d:e2:
7c:40:fe:c5:be:bc:c4:fc:fc:f2:ab:bc:50:5c:34:23:e3:e7:
31:01:b8:ee:9d:b7:85:83:1c:a1:d2:f7:8d:0e:9d:56:e7:d6:
5c:17:d5:74:6a:e8:d3:10:ec:1c:23:55:be:96:6c:78:72:fb:
d8:95:c5:5f:cb:f1:86:75:11:1f:f3:28:03:f4:09:ee:d1:82:
64:b6:8d:f5:08:41:88:a5:80:84:c4:4c:29:bf:cd:0d:76:7b:
c1:f2:e5:48:78:23:9b:34:75:ac:d1:79:26:fb:89:ca:32:93:
e3:df:c5:83:bb:fb:40:42:59:d2:1f:5d:e0:a3:5a:b0:ff:45:
fe:3a:3e:27:e7:af:0a:54:72:26:52:88:12:67:aa:3a:87:6f:
fd:b2:29:c1:41:9a:5e:9c:6c:20:f1:54:9d:90:e3:83:08:5d:
4a:ce:b6:64:4f:85:7c:e4:0d:81:24:0b:c0:f8:38:95:63:82:
17:b4:0b:72:56:53:6c:a4:db:7c:57:64:da:d8:66:68:70:04:
33:fe:a8:7c:e4:b9:06:1a:48:d6:a3:4f:1e:a7:47:a8:ff:2e:
59:c0:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:39 2025 by rpki-client