Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084252CDF011EFBF584AA8762E951A.roa
File: 45084252CDF011EFBF584AA8762E951A.roa (raw, json)
Hash identifier: 5W4W4XQhLNPAc75FKa7g3XiJLf2V29FkujNEjl9oOPg=
Subject key identifier: 2C:0C:13:2E:88:84:9C:40:1F:A3:19:54:8C:FC:D5:39:D1:BF:54:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013831
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084252CDF011EFBF584AA8762E951A.roa
Signing time: Wed 08 Jan 2025 18:42:11 +0000
ROA not before: Wed 08 Jan 2025 18:42:07 +0000
ROA not after: Mon 03 Jan 2028 18:42:07 +0000
asID: 17561
IP address blocks: 154.197.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79921 (0x13831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:42:07 2025 GMT
Not After : Jan 3 18:42:07 2028 GMT
Subject: CN=677ec702-7e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:16:eb:4e:18:66:ef:24:0a:1d:92:eb:1b:
0d:cd:58:af:d0:5b:b0:4c:dc:c6:74:a2:29:31:31:
d1:75:d3:08:8c:8c:6d:bd:af:6b:5d:3c:a2:74:f8:
83:2d:6f:d6:30:a7:da:93:a6:cf:a2:05:98:12:c7:
07:96:f2:f7:04:b6:c2:1e:e2:17:d9:7e:78:08:fe:
82:29:09:01:37:73:21:74:e2:69:e2:46:58:7e:a2:
a0:1b:4d:d8:eb:25:52:91:63:11:1f:94:84:a3:33:
14:cb:46:fd:39:b2:0c:43:91:a1:21:19:64:a8:19:
2b:cb:d5:8c:c8:be:0f:2e:c8:4f:85:9a:e6:2d:fa:
fd:d3:46:1c:24:b5:7c:7a:2b:38:6c:ae:8c:99:54:
dc:6b:b5:72:ae:b8:eb:e5:7a:46:5a:27:c1:d7:ad:
54:e2:f6:68:19:57:f4:9e:5f:b7:15:f5:5c:7b:c2:
01:b6:0e:23:74:42:b7:61:cd:af:cc:96:72:ab:36:
70:0c:63:ed:e1:21:99:b3:4b:f3:ff:83:5f:44:36:
1e:46:9b:aa:d1:45:e8:f3:f6:88:30:7e:d1:1f:81:
6c:6e:37:f7:d8:96:fa:aa:da:28:7b:8d:9e:70:3e:
f2:2b:94:6e:92:04:43:37:58:ec:33:4d:fa:b2:04:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:13:2E:88:84:9C:40:1F:A3:19:54:8C:FC:D5:39:D1:BF:54:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084252CDF011EFBF584AA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.80.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e8:7d:c3:28:91:a6:09:fc:34:bf:cf:81:ec:db:78:45:59:
24:05:5d:29:05:3f:0c:32:55:28:9a:e7:0a:94:fd:9c:02:99:
d4:ab:ed:63:8d:32:91:95:70:ee:1f:96:9a:42:0d:20:87:24:
67:d5:0e:dd:1f:84:2a:f1:09:13:ef:87:8c:f7:cb:c4:77:3f:
41:f2:a1:6f:4d:06:17:e9:b8:3d:5c:17:1e:80:44:08:73:40:
6e:93:2b:2c:66:7e:f2:73:7a:b2:9e:24:8e:34:00:28:fa:1b:
84:2e:c3:25:f2:53:70:3e:bc:68:05:f6:b7:f7:0a:ab:d4:2f:
fb:ca:15:16:29:64:98:3d:8d:9b:e3:f1:b1:31:50:f8:fa:a9:
6d:77:2b:15:fc:a0:b0:dd:dd:56:83:97:23:1b:29:a5:97:ab:
73:b1:b0:aa:02:de:ee:10:38:c1:ab:c9:19:0e:40:3a:e6:13:
31:45:66:31:19:62:1e:5a:16:d0:55:fa:fa:e7:8e:a8:db:7d:
6e:2f:19:05:cc:5d:aa:ea:7e:b3:6f:7e:09:08:69:ff:16:2a:
cd:1a:47:a3:5d:7d:60:cb:43:d4:87:c4:11:c0:3b:17:7f:74:
3f:f2:7d:00:96:e6:b7:5a:c3:c1:e9:e3:ac:6b:97:8b:22:94:
1c:ee:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client