Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9328A8C1AE11EFAA797DAE762E951A.roa
File: 3F9328A8C1AE11EFAA797DAE762E951A.roa (raw, json)
Hash identifier: ryNXuTURyI1t334D8u5pjlfg+du8w2cPx2DAvo4WPDo=
Subject key identifier: 0D:AF:AE:98:44:35:B4:F7:F0:68:84:2E:BE:19:7D:C2:C6:7E:E0:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012153
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9328A8C1AE11EFAA797DAE762E951A.roa
Signing time: Tue 24 Dec 2024 04:19:21 +0000
ROA not before: Tue 24 Dec 2024 04:19:17 +0000
ROA not after: Wed 10 Dec 2025 04:19:17 +0000
asID: 984
IP address blocks: 154.193.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74067 (0x12153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:19:17 2024 GMT
Not After : Dec 10 04:19:17 2025 GMT
Subject: CN=676a3649-5946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:17:0a:87:55:bb:fc:e1:5f:09:d4:0a:5d:
09:d0:be:b6:16:ee:cf:27:c9:e4:5a:32:02:32:9f:
38:d7:7d:61:d3:23:1b:51:de:cc:a4:79:99:09:bc:
c6:a7:0b:ab:52:49:9d:ba:58:94:6b:3e:15:d1:a8:
98:79:8a:44:3d:3d:83:36:ab:f3:29:cd:48:26:d2:
41:f2:b5:01:ff:e7:63:b3:6c:29:28:e7:0d:ba:65:
f7:7e:43:cb:9d:1b:34:8c:b5:7c:5d:ab:67:3c:41:
d6:58:4f:73:5f:f6:3d:b9:fa:34:27:f6:a0:0e:08:
fc:1d:79:35:07:96:6d:da:a1:6c:8f:43:25:c2:25:
00:ea:c5:19:5b:5b:91:c1:15:d8:bb:d0:23:1f:a5:
6e:c0:db:c2:69:29:1b:bf:d4:a2:1c:ac:8f:4d:0c:
f9:b6:11:4b:e7:39:c9:45:9e:cb:01:b4:be:2c:8f:
28:df:2e:dc:2d:6b:02:13:bc:70:24:bd:34:06:54:
d7:02:37:b4:c7:a4:57:c9:7a:7e:2e:d7:ff:e0:a8:
67:68:78:d4:4d:a6:f6:9a:5b:9d:69:24:b7:eb:7b:
b6:44:a4:8d:9b:b2:9f:53:7b:9a:81:6f:0b:d1:f3:
b4:11:e5:da:06:52:5f:75:7e:5e:d3:fa:5e:d3:f4:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:AE:98:44:35:B4:F7:F0:68:84:2E:BE:19:7D:C2:C6:7E:E0:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F9328A8C1AE11EFAA797DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6a:49:03:4b:00:76:78:03:c4:c9:04:5a:db:9e:be:fd:66:
18:b5:55:ce:f7:80:90:0a:f8:4b:18:48:0b:02:cf:4a:2d:08:
85:e6:2c:3c:ba:e0:47:cf:f3:59:0f:5f:ee:15:9a:c9:40:4c:
c1:e2:a4:b7:17:6b:27:b6:6c:c1:bf:55:1f:34:52:94:de:fc:
99:7a:f9:45:10:a5:63:b5:3b:8f:fb:76:da:99:66:d9:83:47:
20:0e:d5:7c:25:0e:a5:18:3d:c1:d3:97:04:4b:bd:44:25:47:
c9:55:be:25:e4:be:47:97:cc:b8:a8:d5:17:8c:f6:45:b8:b6:
f5:bc:74:10:84:22:ff:80:e3:1b:8f:1f:f0:cf:c2:9f:b6:77:
81:eb:82:11:c6:56:ad:a8:23:bb:78:9c:6c:43:44:59:6f:4e:
aa:9b:b9:33:9d:5b:0d:62:8e:89:b9:f8:e8:f1:2a:45:0c:3b:
4c:cd:0e:a5:97:3c:49:ec:ab:55:cf:cd:fe:1a:db:ea:0a:ee:
e5:29:bc:03:0f:a4:a3:c2:6c:bd:8a:63:5a:65:d4:53:a1:10:
62:19:f5:fd:a5:62:9a:2a:ca:31:ce:a4:cf:c4:f4:a4:cb:43:
84:7d:ef:0d:f1:89:5c:ff:31:d7:66:f4:80:f5:e8:14:c1:d3:
21:45:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:11 2025 by rpki-client