Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42544E62C1D811EFB607D4B6762E951A.roa
File: 42544E62C1D811EFB607D4B6762E951A.roa (raw, json)
Hash identifier: vWl+MWGcqiQTjvTwm2HCl+EGRc8sPClfAWCmr2ZMrzY=
Subject key identifier: EB:6F:E7:89:0C:3B:C5:51:FF:10:E3:9A:63:DD:E6:69:B5:25:E6:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42544E62C1D811EFB607D4B6762E951A.roa
Signing time: Tue 24 Dec 2024 09:20:04 +0000
ROA not before: Tue 24 Dec 2024 09:20:01 +0000
ROA not after: Wed 10 Dec 2025 09:20:01 +0000
asID: 984
IP address blocks: 154.194.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74465 (0x122e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:20:01 2024 GMT
Not After : Dec 10 09:20:01 2025 GMT
Subject: CN=676a7cc4-43d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:14:1c:fa:f5:ca:e5:9f:4e:6f:51:55:91:
a8:ed:d1:2d:d2:b4:f9:f8:3c:c7:48:33:c0:fc:c7:
a4:dd:65:95:8b:24:81:8c:56:b9:4c:ce:e3:35:de:
eb:2c:03:fc:89:2f:fc:2d:d7:9d:6a:eb:a2:ed:58:
9c:1d:42:a3:0b:70:a1:f3:4f:cc:03:87:96:8b:1c:
9e:85:b9:1b:d9:92:53:df:48:4c:0a:aa:43:12:ec:
30:08:64:60:a4:ec:20:de:3e:ec:bf:f8:32:f0:81:
27:b3:2b:a7:33:d3:0f:fc:5a:45:b4:88:4b:37:4f:
bb:c0:1e:0e:13:38:52:1e:61:c2:b1:06:4c:b6:08:
ab:5c:e9:97:59:68:58:f2:44:d6:6d:b3:93:15:f5:
64:24:d2:02:68:0e:5f:98:ca:ed:cd:e5:c4:55:a4:
8e:38:c9:91:78:bf:8f:46:82:c6:85:54:b8:45:aa:
94:93:d7:22:df:23:5c:29:22:6f:ff:d8:0a:ce:a5:
5a:55:b2:9c:c1:0e:bd:4f:0c:bb:90:f3:c6:90:fb:
d3:5d:6d:8d:40:d2:62:dd:ed:ea:69:bc:92:84:37:
6f:1f:b3:1c:98:89:94:19:6f:43:e3:d0:cb:b0:49:
9f:a8:64:4e:41:2e:b9:ff:c9:aa:de:16:ce:5c:0c:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6F:E7:89:0C:3B:C5:51:FF:10:E3:9A:63:DD:E6:69:B5:25:E6:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42544E62C1D811EFB607D4B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.229.0/24
Signature Algorithm: sha256WithRSAEncryption
91:14:94:6f:87:b5:2e:51:87:10:52:3e:e9:33:60:a5:27:ee:
68:2a:f4:92:f7:04:11:b5:b5:de:da:09:9d:d9:22:c8:59:22:
76:62:11:b5:58:08:54:a1:bc:62:6f:ae:31:ce:53:54:0a:66:
6f:73:dc:81:5e:7e:6b:c8:b2:aa:a5:7b:6d:ff:0e:ff:1b:54:
56:36:18:90:f1:5f:95:d5:7f:df:be:5f:31:e9:84:6d:b9:48:
3a:cf:67:d9:29:37:90:c7:df:e0:4c:4d:55:cd:99:87:4e:e7:
fc:cb:79:d7:dd:78:57:71:97:d1:91:b0:49:9a:16:13:ff:65:
71:95:52:f5:94:f2:09:83:b4:f4:e3:0e:73:7b:20:c7:c7:c5:
05:2b:ff:de:70:05:1d:23:e1:49:82:7d:22:0a:a3:35:f7:3e:
31:a3:7e:b8:08:c5:1d:1b:f4:36:8c:7e:90:6a:e1:de:44:e4:
33:0f:11:b5:af:96:08:d5:e5:1d:a2:27:94:fc:f7:de:4a:7e:
f7:7f:60:24:6d:ff:58:8e:38:10:aa:50:1e:0b:33:60:0f:98:
bc:ac:4a:78:a1:b6:07:ec:0c:36:d6:35:bc:d5:21:db:2b:2b:
d0:ce:68:a3:c8:4e:19:0c:7a:a4:b8:70:4a:49:14:92:db:f8:
da:c8:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:20:16 2025 by rpki-client