Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A2A648C1AD11EFBFD239A7762E951A.roa
File: 40A2A648C1AD11EFBFD239A7762E951A.roa (raw, json)
Hash identifier: D3vfh6WgW2+mDLwy0aaojjgVanhGF9/yS0LM0dCh+Gk=
Subject key identifier: 47:98:A5:D9:57:EA:03:BF:97:3D:BF:55:37:1F:7C:4A:C8:D9:0F:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012147
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A2A648C1AD11EFBFD239A7762E951A.roa
Signing time: Tue 24 Dec 2024 04:12:13 +0000
ROA not before: Tue 24 Dec 2024 04:12:09 +0000
ROA not after: Wed 10 Dec 2025 04:12:09 +0000
asID: 984
IP address blocks: 154.193.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74055 (0x12147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:12:09 2024 GMT
Not After : Dec 10 04:12:09 2025 GMT
Subject: CN=676a349d-5406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:f2:67:4e:0e:79:f2:fd:5d:21:72:10:c7:
5e:c7:9a:5d:aa:87:9b:9d:d8:1f:b4:b9:f3:ea:3f:
bb:40:8c:ba:a5:a3:5d:a0:aa:0d:59:8b:8c:c3:89:
0a:c2:6e:eb:cc:27:82:c0:3a:d2:ba:1a:99:32:49:
71:12:cf:6b:55:ed:ea:2f:fd:b1:57:8b:46:53:68:
d6:98:73:51:7f:75:74:68:e8:2d:91:22:95:f4:ab:
aa:18:5d:1c:5c:bf:f7:76:8a:34:8c:e6:e0:ff:f3:
05:1e:5b:8d:ce:31:26:93:b0:85:7c:56:51:9c:90:
21:8f:dc:fe:11:6a:b3:34:ce:7a:3d:f6:1c:ab:ed:
6d:76:c9:71:a2:5a:de:7d:c6:21:75:be:3e:dd:2d:
6b:6a:2f:4d:ce:af:ad:a1:a7:55:b1:3c:b3:45:82:
01:ec:7c:64:8b:f6:33:70:a7:76:6e:0f:07:e2:18:
de:5f:86:0d:e7:13:67:1e:df:a8:d3:80:87:f7:69:
ed:74:a0:c1:f7:2f:6d:b6:e2:a2:99:57:3d:33:f9:
0d:2f:4e:8a:7a:a6:ff:2c:be:52:0d:85:44:e8:77:
7f:96:78:57:c8:3b:4b:21:4d:1b:d6:2f:6e:61:ca:
5f:36:09:3d:1e:b8:b8:21:fe:e3:b2:e8:5f:b4:f8:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:A5:D9:57:EA:03:BF:97:3D:BF:55:37:1F:7C:4A:C8:D9:0F:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A2A648C1AD11EFBFD239A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b3:8f:16:0a:94:7b:42:af:2f:09:ff:fd:06:29:64:70:7e:
b1:4c:97:f6:27:16:2c:64:b7:2b:0d:54:3a:78:57:18:e7:01:
c0:7b:19:bd:4f:9d:0c:18:c2:87:e2:d5:47:b3:6a:c0:ff:b9:
03:45:2f:c9:06:9b:88:0c:c9:7c:c1:3f:7f:3c:06:ca:8c:99:
84:a9:a0:7a:f8:20:30:0b:36:03:0c:3f:e3:72:4f:94:20:66:
96:bd:47:41:b1:6d:86:a6:f0:29:2d:dc:f4:de:de:01:6b:0c:
e9:39:4a:5d:79:32:b4:44:46:a9:be:2e:67:13:3c:8e:a2:be:
b2:2c:6e:01:99:78:7f:04:9c:61:0e:e4:ac:15:db:c0:e5:26:
9a:45:58:5d:75:da:db:a8:c9:3c:9d:11:6b:6b:3c:d1:36:27:
42:42:d0:4e:c5:64:c6:68:0a:fe:a6:c2:b1:60:02:53:08:73:
9a:51:c0:3c:92:66:01:a3:d9:84:c6:6c:66:e8:ff:54:f9:0a:
4f:e7:21:63:13:67:64:2c:dd:50:52:0f:81:75:df:71:83:ef:
cb:42:78:d2:91:08:7b:25:0b:9f:b6:20:7d:fe:d4:78:74:68:
46:4c:a1:7d:94:44:e2:fe:c3:71:be:cd:c4:7d:3d:06:ba:2a:
01:1a:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:36 2025 by rpki-client