Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2487CC52811EFAB4A0151762E951A.roa
File: 46A2487CC52811EFAB4A0151762E951A.roa (raw, json)
Hash identifier: Yp7VBEshgVJ8DKJrd+qMdZ1OC0wOI1RwLBdBdOgzW9g=
Subject key identifier: C3:D3:A0:F1:F9:1B:F4:87:E6:C7:A6:1E:96:57:A3:29:71:DD:D3:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2487CC52811EFAB4A0151762E951A.roa
Signing time: Sat 28 Dec 2024 14:30:25 +0000
ROA not before: Sat 28 Dec 2024 14:30:21 +0000
ROA not after: Fri 12 Dec 2025 14:30:21 +0000
asID: 984
IP address blocks: 154.204.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76699 (0x12b9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:30:21 2024 GMT
Not After : Dec 12 14:30:21 2025 GMT
Subject: CN=67700b81-5c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:b3:da:6e:02:ac:fe:f6:62:61:38:3b:f0:
f9:29:a2:31:fe:7c:ef:e9:2c:37:26:de:ec:44:15:
f1:ef:48:8d:0d:2f:12:19:ab:55:5b:c1:95:b6:dc:
2c:a4:4a:88:b2:ea:2f:46:2c:ff:45:f9:43:e4:bc:
64:ab:6e:fc:e4:a5:52:e9:43:55:df:9a:68:9b:0f:
6e:03:ad:b4:ea:b3:fb:5e:4f:32:7d:84:1c:11:a7:
71:8e:e6:ed:53:37:a6:8a:4d:30:b7:41:f9:ce:e5:
13:e4:18:4f:35:1e:e9:b5:33:c8:6c:32:08:d7:05:
aa:9d:f1:38:8f:aa:c4:88:df:2f:d3:64:64:aa:17:
4e:b3:ce:ec:20:0d:50:54:94:18:80:39:c4:48:08:
8c:11:19:34:bb:6a:22:d6:f7:47:48:67:9a:40:06:
2b:6c:19:74:ac:73:ca:3a:98:8f:de:87:62:66:ff:
64:f6:59:37:72:11:7e:a9:e4:98:00:7d:d0:5a:01:
78:2c:2c:6c:58:b4:0d:a5:e7:a2:41:35:41:f7:0f:
36:af:06:b0:13:f5:5e:20:81:55:5f:fb:63:98:50:
86:77:46:d3:ef:13:ca:f3:f9:70:1c:27:f2:e7:63:
4e:07:76:f2:32:71:e1:28:dc:12:b9:6b:b0:1c:25:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D3:A0:F1:F9:1B:F4:87:E6:C7:A6:1E:96:57:A3:29:71:DD:D3:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2487CC52811EFAB4A0151762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
74:59:cb:1f:2f:7a:85:9e:e8:d6:0d:b0:81:3c:ad:14:85:82:
d5:25:61:55:cd:da:70:9c:85:3b:8b:98:45:79:c0:e6:34:a8:
7c:e2:67:09:89:e4:b3:20:b9:90:e7:1f:f9:33:ba:b3:db:9a:
f6:42:d1:ea:3b:4b:1e:be:00:17:57:1c:54:1e:03:65:45:6a:
8c:41:11:85:d5:35:a3:1c:c9:05:21:7b:f1:9f:d9:e1:0e:d1:
bd:55:58:10:b2:17:f5:3b:b1:7f:ad:4b:da:6c:46:7e:0c:87:
8e:69:f6:17:8a:26:90:9e:77:4e:c2:17:26:3a:3c:cc:f6:1b:
2a:02:6e:a8:20:e9:f3:68:c5:81:b1:0d:55:7e:2a:68:17:ec:
d4:7d:a2:61:35:60:1a:b6:b8:36:6f:5f:63:5e:f8:9c:2a:ca:
98:a0:e5:05:44:4e:fd:e3:72:74:7a:3b:a9:89:07:1d:6a:9d:
f5:7d:92:a2:d8:15:3c:43:7d:a3:3e:2f:ae:47:5f:35:89:4c:
5d:f0:13:7d:82:c0:74:93:c4:e4:74:7f:33:92:d2:97:db:0d:
b4:09:a3:a5:00:a0:fe:6f:1a:e4:a1:e4:e7:67:c7:6b:b3:a7:
bd:8f:4a:b2:1e:f6:3f:f6:8b:c4:35:54:7b:38:d4:e2:fa:f9:
3a:23:46:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:13 2025 by rpki-client