Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4922E16AC63B11EF90D1BA97762E951A.roa
File: 4922E16AC63B11EF90D1BA97762E951A.roa (raw, json)
Hash identifier: hqTr6AMFYYH9jC4pA33XqNyEJEeOa6D5VPDJy+4bfxg=
Subject key identifier: C9:21:E3:C0:CA:A5:BE:CA:BF:9A:C1:38:9D:E2:15:62:37:8E:CE:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013047
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4922E16AC63B11EF90D1BA97762E951A.roa
Signing time: Sun 29 Dec 2024 23:19:00 +0000
ROA not before: Sun 29 Dec 2024 23:18:57 +0000
ROA not after: Fri 12 Dec 2025 23:18:57 +0000
asID: 984
IP address blocks: 154.218.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77895 (0x13047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:18:57 2024 GMT
Not After : Dec 12 23:18:57 2025 GMT
Subject: CN=6771d8e4-e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:26:ca:85:30:5f:d7:5d:d2:57:bf:08:9f:
dd:b3:bd:56:f4:f5:4f:7f:bb:99:d2:19:2f:e8:03:
af:98:50:24:6f:35:ad:c6:75:7a:b7:6d:08:54:0d:
97:55:2c:dd:ff:b8:a5:62:c4:72:86:70:c3:97:f2:
17:46:83:4e:ce:9c:a9:0a:f7:ff:21:a0:ae:12:c7:
9a:ab:4d:3b:96:7f:ed:fb:a2:f1:a5:8e:19:bb:f3:
f3:35:14:63:13:af:bb:31:39:e4:7d:d9:b3:2c:ce:
cd:7b:a7:ac:0e:1d:81:cf:58:51:da:7a:11:00:6c:
7d:8e:a1:e5:3f:86:28:14:85:97:e9:41:ec:cc:ec:
6a:a4:a0:6c:e1:ed:32:a0:22:16:1b:ea:92:94:42:
33:59:b0:78:ba:a4:63:b3:c4:90:4a:ea:88:9a:23:
0d:9d:43:b9:bd:f2:01:9c:6f:3e:71:db:e0:34:32:
c1:2b:b9:c9:9e:44:38:40:36:53:b2:3f:1b:66:39:
a1:16:b5:44:19:cf:ab:92:d6:96:f9:c3:19:1c:72:
c8:35:84:09:27:8a:4b:66:1a:cc:c8:68:c0:6f:4c:
9c:5b:62:8f:b9:2a:a8:2b:b8:47:9c:c2:ce:03:6c:
6e:35:1f:de:86:bd:f4:85:d7:df:40:4a:f6:67:ff:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:E3:C0:CA:A5:BE:CA:BF:9A:C1:38:9D:E2:15:62:37:8E:CE:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4922E16AC63B11EF90D1BA97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
11:da:c3:f3:2b:d7:7b:9e:5e:35:e4:e0:d5:4c:38:92:0f:39:
a2:fe:13:f8:31:6d:c1:26:39:06:e5:86:79:8c:8a:f4:24:2b:
b5:82:32:78:b2:c4:5a:3d:8c:0c:7c:72:05:50:30:36:72:dc:
54:64:a1:60:88:b1:2d:e9:9f:30:9b:6c:2e:a7:11:0f:5d:2e:
7d:76:c3:0e:61:7d:ee:f6:e8:42:35:38:82:b8:59:15:c6:ee:
9e:bc:fd:c9:c7:ce:2d:c6:92:7f:9b:9f:25:00:50:7a:15:01:
78:77:34:53:77:f3:06:1a:d7:d4:6b:c8:5c:35:1e:99:fa:38:
0a:20:d1:f2:89:f4:b0:9e:2e:1e:21:cd:4f:ba:04:e4:05:9b:
95:ff:6a:7a:46:d7:6f:b8:8f:fd:03:06:3a:01:7d:e0:e3:b1:
63:10:53:bb:02:98:19:9c:d4:a1:dc:0d:9f:a3:9d:c3:74:d0:
f5:93:dc:84:6a:d0:d1:cb:82:26:4f:fc:a0:68:bb:d4:2f:17:
de:a8:d1:ab:85:2e:56:7d:0f:d1:18:43:3b:29:cc:a7:7b:80:
e6:12:8e:f5:00:78:97:b3:9e:e5:f2:77:b5:94:8c:b5:79:c0:
2c:c8:40:22:18:5c:23:ec:72:14:a0:c3:20:52:90:e2:4c:2c:
ba:93:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:06 2025 by rpki-client