Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4166EDBAC1AC11EFAF987AA2762E951A.roa
File: 4166EDBAC1AC11EFAF987AA2762E951A.roa (raw, json)
Hash identifier: WNK6svAaHE/mpEDq1ZYATQN53ej8I1C/gRloJ/Lk+/0=
Subject key identifier: BA:41:7C:38:87:EE:81:AE:1D:1F:D3:93:59:E0:13:9B:B6:4C:FF:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01213B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4166EDBAC1AC11EFAF987AA2762E951A.roa
Signing time: Tue 24 Dec 2024 04:05:05 +0000
ROA not before: Tue 24 Dec 2024 04:05:01 +0000
ROA not after: Wed 10 Dec 2025 04:05:01 +0000
asID: 984
IP address blocks: 154.92.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74043 (0x1213b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:05:01 2024 GMT
Not After : Dec 10 04:05:01 2025 GMT
Subject: CN=676a32f1-86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:b1:2a:47:18:75:b3:b4:c8:5c:90:2c:ef:
0a:54:e9:46:21:fc:fb:8e:79:1c:8c:d3:43:d0:b5:
7b:d1:f7:67:5b:c7:33:44:39:ec:7d:bb:75:0a:f8:
4f:2f:0e:86:52:bb:40:d2:33:a3:dd:f0:56:55:74:
0c:8c:b6:0c:22:35:c7:58:8c:cb:df:3f:c2:bf:30:
1b:92:7f:90:d2:c2:de:37:f9:18:76:31:c1:3e:40:
fd:20:8e:9d:a4:18:84:77:4a:05:7f:67:75:cc:e9:
48:10:c9:27:f3:a7:e8:a4:4e:5c:25:51:fb:29:e2:
23:2c:97:81:e3:38:71:5b:72:fc:61:e2:e9:9e:d7:
60:06:3b:f0:dd:42:f7:ef:cc:4e:26:ad:49:e8:97:
fd:19:e5:c3:4c:ff:9c:2b:ec:9e:3c:e5:92:23:91:
14:b5:14:02:f4:de:c8:8b:c4:e9:6b:ed:3c:93:c3:
25:aa:8d:e9:9e:e2:c3:80:59:69:e3:f1:49:0a:b0:
47:54:c6:2d:dd:38:80:8a:59:33:ae:c9:f9:26:f3:
9d:90:4c:d3:46:4b:c8:e2:98:51:65:54:8e:54:f6:
22:36:bb:42:0e:13:01:a4:e9:73:84:4b:5e:c5:4c:
88:ca:98:8b:42:f6:26:21:38:c0:70:59:2d:0e:58:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:7C:38:87:EE:81:AE:1D:1F:D3:93:59:E0:13:9B:B6:4C:FF:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4166EDBAC1AC11EFAF987AA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:64:b6:b6:4b:ff:50:f2:70:0c:d8:b9:b1:0f:46:f7:5a:a1:
8c:ab:25:9d:52:b5:b5:18:b3:31:a8:82:0d:cc:f2:86:57:64:
a6:93:e9:0c:11:6c:44:10:92:10:ea:cb:57:d5:8d:c4:06:e5:
ec:84:55:89:b7:f9:a8:d8:02:80:90:ed:5d:b6:c9:8c:e0:ed:
9d:ac:c9:22:8a:8e:3c:77:3f:6b:c3:a1:6f:95:fe:bd:c9:03:
21:65:08:f3:cd:02:6d:35:13:72:82:d1:cb:19:2f:9e:5f:63:
1c:e7:03:ca:62:09:b5:61:1d:4e:4e:2e:5c:60:9b:13:71:54:
b3:e1:be:04:05:cf:04:5c:2e:16:57:06:10:9c:42:a3:bb:a0:
a4:ef:92:bc:5f:63:2c:18:cb:96:74:0a:a1:9e:2c:ed:0f:a7:
d6:f6:79:a2:d6:45:2f:be:de:ef:36:7b:d4:e0:e3:97:f0:87:
b8:1a:8f:68:b9:65:4b:71:14:71:98:ae:d0:0e:76:cd:0e:4f:
90:cd:c2:02:3c:b8:7b:6c:58:56:7f:bd:cb:41:74:24:28:5b:
cf:6a:f1:e3:45:d0:dd:a4:42:d6:19:fa:a7:b8:6e:4d:75:a6:
87:e1:48:2d:67:7b:f4:4a:f5:af:c2:ee:60:ad:26:56:5a:29:
04:93:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:24 2025 by rpki-client