Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421527E2C1AF11EF8A7AF8B4762E951A.roa
File: 421527E2C1AF11EF8A7AF8B4762E951A.roa (raw, json)
Hash identifier: N2jc+eL1560ngKOP3JrqGvvgICHjUD1Q+ZA4TvN+84U=
Subject key identifier: 08:8E:9B:AE:01:A7:0D:11:87:6D:FD:56:71:E8:6B:6B:23:E9:D5:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01215F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421527E2C1AF11EF8A7AF8B4762E951A.roa
Signing time: Tue 24 Dec 2024 04:26:34 +0000
ROA not before: Tue 24 Dec 2024 04:26:31 +0000
ROA not after: Wed 10 Dec 2025 04:26:31 +0000
asID: 984
IP address blocks: 154.193.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74079 (0x1215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:26:31 2024 GMT
Not After : Dec 10 04:26:31 2025 GMT
Subject: CN=676a37fa-7658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:59:ae:0c:3a:74:03:e0:f3:ff:ba:77:50:
85:a1:ef:7f:3f:6b:44:44:63:cf:f3:ba:05:b1:88:
e9:e4:d3:ac:f6:6b:2a:91:58:52:d2:df:9a:78:f1:
86:90:a7:09:3c:09:9f:4a:9d:a2:1e:5f:4f:08:c8:
e2:1a:12:40:a7:7b:c3:36:65:5d:9a:57:51:01:e2:
40:0d:29:26:af:4f:7d:e4:d4:78:2b:c1:1a:5a:7a:
15:01:02:05:8c:42:25:f8:d4:83:a6:5c:c2:95:00:
2f:9b:d5:d8:c0:ff:95:48:bb:2d:77:31:f6:f3:2c:
a6:47:0f:f4:a4:a0:41:04:cb:88:9c:cb:13:e6:ac:
dd:7d:67:0a:de:02:74:50:42:2a:c4:3c:d4:0c:e8:
dc:92:14:8b:5f:49:90:ed:88:fe:82:05:4d:8e:e7:
f1:87:d9:11:8d:5e:e5:ca:a0:f4:b7:ce:eb:6f:10:
9c:55:cc:c9:23:10:e4:e8:b8:55:c1:e6:95:a1:6d:
45:88:7c:38:a2:d3:e1:23:59:bb:7a:81:23:b7:90:
ff:f2:26:84:b1:4f:67:95:0f:76:cd:5d:7a:2f:aa:
83:12:c3:a8:72:1f:96:b7:98:2a:a5:db:6b:59:27:
cb:31:93:c5:9a:f0:a1:97:b6:6d:05:d9:d3:1d:bc:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:9B:AE:01:A7:0D:11:87:6D:FD:56:71:E8:6B:6B:23:E9:D5:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421527E2C1AF11EF8A7AF8B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.83.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2b:33:6f:cb:e2:34:08:59:63:15:76:1a:31:02:e3:7d:3d:
bd:7f:1e:1c:c2:a9:3a:99:9a:3f:fa:07:dc:f6:ac:2a:0a:53:
77:35:bb:1a:f7:31:a5:9a:3e:98:ff:ad:eb:1f:e7:1b:c0:39:
32:7d:bf:9f:dd:ef:52:28:44:49:d3:ce:6c:c4:7e:65:5f:0a:
60:09:b3:73:e3:ec:f8:fa:f8:36:3a:e8:bd:c7:e5:0f:7c:61:
8b:99:ef:0a:d8:a6:ad:d9:15:e0:09:0b:ee:8d:ab:fa:92:42:
63:08:a0:62:2b:42:22:b9:82:0a:5f:5d:1d:41:6b:08:ae:e8:
4c:c8:aa:be:87:33:6a:e2:93:7c:fc:76:80:89:81:b0:1a:73:
9b:0b:7a:95:1d:b4:cd:2b:f4:3a:f5:53:9d:3b:43:65:5a:79:
ae:0b:30:eb:46:3b:8a:9a:ea:70:01:cf:cd:f8:59:01:68:cc:
c7:39:55:0d:f0:9e:52:08:b8:c1:69:cd:a2:23:59:7f:64:51:
4c:b4:fb:c2:af:62:14:e2:7d:ff:58:52:e2:04:ac:b7:eb:49:
c4:4d:83:75:3d:ff:e1:db:6c:22:a8:7e:60:c9:78:32:60:ab:
fe:7f:e1:c8:79:0b:b0:49:47:bd:1b:b8:d4:46:f7:01:37:94:
d4:d8:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:02 2025 by rpki-client