Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD33350C25D11EFAC4BFC84762E951A.roa
File: 4CD33350C25D11EFAC4BFC84762E951A.roa (raw, json)
Hash identifier: vL1SDHM5KLLiA0eDbEER3XPs/ZknJBWXXv6g1jD4/Cw=
Subject key identifier: 5D:92:A2:5A:D5:71:31:5C:A7:08:C6:26:74:92:26:0B:15:05:9C:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD33350C25D11EFAC4BFC84762E951A.roa
Signing time: Wed 25 Dec 2024 01:12:25 +0000
ROA not before: Wed 25 Dec 2024 01:12:21 +0000
ROA not after: Wed 10 Dec 2025 01:12:21 +0000
asID: 984
IP address blocks: 154.199.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74630 (0x12386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:12:21 2024 GMT
Not After : Dec 10 01:12:21 2025 GMT
Subject: CN=676b5bf9-a4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:6a:71:c3:33:04:5f:9c:81:c1:eb:9d:90:
ac:e4:0a:78:8a:88:12:24:6a:e7:c0:33:38:b8:17:
69:4d:4a:21:0a:a5:ec:f1:d7:27:8f:43:2f:50:01:
5a:bc:fb:d8:fa:38:c4:f8:24:e7:3e:a7:b7:e1:06:
04:c0:e3:4d:db:7b:fd:84:49:2e:0c:1b:2d:c9:77:
b4:39:93:b1:3d:93:2c:1e:11:b6:88:5b:6d:58:6c:
89:31:27:1e:63:20:74:2a:0b:ea:98:75:a5:2d:80:
7b:52:f9:8e:7a:ec:12:7e:b9:53:c0:f1:ef:c4:74:
9c:5c:45:7f:63:23:85:c5:79:96:0a:85:c4:b5:37:
b5:bc:04:fb:a1:57:9e:5d:38:d6:b4:d2:da:9d:29:
1d:62:44:70:05:88:1f:4a:f7:a5:46:47:24:07:2b:
1c:dc:d2:8d:cd:66:16:44:f3:ed:1c:16:39:2e:d3:
f9:c3:79:e0:56:01:eb:04:c9:8c:8b:79:50:4b:d3:
7f:1f:de:22:e5:ed:8c:31:05:ca:67:b2:f8:da:9e:
99:cc:4e:5a:38:bc:f1:86:b9:ad:0b:fa:f9:29:c5:
4d:2c:75:b3:e4:60:8d:b7:ec:f3:30:1e:1d:92:91:
1f:ed:cd:8c:cf:e2:41:9d:04:a9:69:24:67:4e:34:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:A2:5A:D5:71:31:5C:A7:08:C6:26:74:92:26:0B:15:05:9C:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD33350C25D11EFAC4BFC84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.80.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5c:b1:a9:d0:37:f3:6d:00:03:63:e2:3a:fd:ae:02:c0:e7:
8f:81:73:ba:d7:58:a5:96:74:6f:09:bf:77:99:46:da:a1:55:
87:bc:11:a3:d3:04:bd:a4:86:96:51:eb:09:be:1f:d7:b5:a6:
cc:8a:03:c6:91:6b:94:fd:b9:fc:9e:23:52:be:53:fa:64:b4:
3b:c9:ce:b5:f9:88:ab:e1:52:b5:07:ca:91:33:da:7d:55:da:
c9:a2:a8:b6:b5:71:0b:14:c7:d3:0b:40:9a:23:c2:7a:bc:f9:
f6:05:67:36:4f:7c:6a:90:af:cf:75:47:76:69:34:56:92:0a:
99:57:b6:55:37:0e:ab:13:44:26:a6:17:60:81:db:62:81:4f:
fe:5c:a0:63:d0:3b:db:75:e4:51:bb:e3:44:fe:ad:a8:c8:3f:
35:c3:87:99:fe:52:40:ce:4c:68:d9:33:9c:df:ec:6f:4d:cb:
f9:b6:2b:5c:62:d8:c9:f3:7e:51:06:4f:f4:4c:fb:bb:36:1c:
04:43:ea:f9:46:0c:ae:ff:d1:00:26:63:9c:50:16:ed:82:0f:
0b:e8:ab:de:ac:41:69:9d:59:ed:da:94:dc:d3:46:2b:de:c9:
e9:d7:33:8d:12:c3:66:b7:2f:8d:0c:d1:02:d0:b0:81:9e:9a:
d5:5e:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client