Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806583EC54111EFB588416C762E951A.roa
File: 4806583EC54111EFB588416C762E951A.roa (raw, json)
Hash identifier: djtg6N6pFpkCy94ocQfb4rqf+vWg/SLK4n9A/4xy6cw=
Subject key identifier: BC:54:2E:FB:C1:E6:F1:B5:A8:0B:34:1E:FC:19:60:67:34:11:58:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806583EC54111EFB588416C762E951A.roa
Signing time: Sat 28 Dec 2024 17:29:24 +0000
ROA not before: Sat 28 Dec 2024 17:29:21 +0000
ROA not after: Fri 12 Dec 2025 17:29:21 +0000
asID: 984
IP address blocks: 154.206.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76927 (0x12c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:29:21 2024 GMT
Not After : Dec 12 17:29:21 2025 GMT
Subject: CN=67703574-1712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:3c:c5:33:46:ac:16:c7:92:7b:1a:2c:d9:
b5:c8:bd:f5:41:01:bb:fc:55:56:32:44:51:0e:11:
51:e3:fc:d6:b8:9f:e4:4e:a5:63:5c:1b:fa:54:35:
52:15:0d:2c:77:f2:7c:66:74:c4:20:98:86:87:c2:
fc:d4:99:f1:83:c6:0f:eb:49:49:99:b4:72:da:11:
6f:12:22:bb:c8:fc:6b:8c:21:02:6a:38:67:9c:29:
8d:07:bf:27:b4:70:9b:c9:55:47:69:3b:6e:6a:84:
6d:6f:1a:a2:ec:0c:4b:a9:3f:25:e9:e8:4e:9f:19:
52:16:4a:e6:16:bf:59:c0:87:a7:83:14:37:87:c4:
54:25:9a:ed:ec:13:73:cf:85:26:26:b6:60:f3:c4:
bc:d5:44:94:74:5f:54:59:97:c7:8e:59:4b:88:bf:
da:fb:e4:e4:e7:66:d6:96:fc:67:8b:01:de:a1:58:
12:4c:83:36:5c:62:8f:bf:df:d6:f8:c6:21:d1:70:
dc:1e:75:27:ee:a1:3a:64:e4:f3:1f:0b:bb:27:25:
45:10:9f:63:c7:b4:95:96:9f:3a:6f:1c:01:3a:74:
84:f2:c1:69:bd:01:c5:ac:65:e5:07:9d:bf:8c:02:
81:47:0c:86:fc:2d:01:40:e2:2f:a8:ef:66:3c:31:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:2E:FB:C1:E6:F1:B5:A8:0B:34:1E:FC:19:60:67:34:11:58:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4806583EC54111EFB588416C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.247.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cd:9e:8c:ec:24:7d:02:97:89:75:c4:ed:60:43:52:a6:b8:
b6:56:4a:a6:8f:f0:ff:08:0c:9c:dd:f3:ec:fa:1a:8e:28:75:
6d:99:6c:64:96:ec:dd:8b:fd:43:91:d0:65:68:a5:4f:5f:a6:
bc:e0:7a:6f:07:42:08:37:d5:28:0a:91:f9:15:33:22:dd:8b:
93:ae:bc:04:fc:1a:b2:b7:68:3d:31:05:21:43:7c:d3:87:49:
47:b2:a0:09:b2:c1:09:e8:cc:c2:9c:4b:7b:d0:de:a5:30:5d:
7b:83:5d:0c:f0:df:02:23:93:cf:76:f7:3b:a7:a5:27:b6:43:
13:ec:1c:bb:e4:74:b1:f2:0c:8d:65:4e:2d:ae:d9:c6:49:f1:
b1:ee:b9:d5:c3:07:6a:fd:88:90:78:7c:2e:16:24:bc:1a:cb:
7b:19:63:6a:48:bf:ce:18:28:e5:d0:12:b6:35:64:6f:64:22:
f3:2e:7e:56:b4:76:48:fe:78:dd:c4:da:f8:30:45:37:0f:54:
33:5b:9a:02:42:51:62:0c:4c:f8:af:7b:f2:e3:81:b3:44:fb:
2a:db:5d:a8:73:81:98:85:06:ef:32:b6:4c:04:88:c4:15:81:
23:7c:8f:18:ee:79:7f:80:d2:1f:58:64:11:99:36:80:da:ab:
c8:1e:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:59:49 2025 by rpki-client