Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E943E20CDB411EFB13E85AF762E951A.roa
File: 4E943E20CDB411EFB13E85AF762E951A.roa (raw, json)
Hash identifier: Lu3CLKoZCYl05vyYKYDwtpN4Jy687Q64QWARMqhcq+E=
Subject key identifier: E6:FE:AB:9A:4A:55:FE:CD:69:23:4F:57:CB:0B:08:47:DF:6B:F4:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E943E20CDB411EFB13E85AF762E951A.roa
Signing time: Wed 08 Jan 2025 11:32:57 +0000
ROA not before: Wed 08 Jan 2025 11:32:53 +0000
ROA not after: Tue 16 Dec 2025 11:32:53 +0000
asID: 984
IP address blocks: 154.196.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79524 (0x136a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 11:32:53 2025 GMT
Not After : Dec 16 11:32:53 2025 GMT
Subject: CN=677e6269-2076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:e8:3a:fb:b4:d5:b4:9f:32:96:d5:c1:c9:
59:b9:99:19:60:b3:ed:f2:06:ef:2d:6a:da:bc:52:
0a:1b:8f:9b:fd:c6:95:9a:8c:52:7b:5b:9e:3e:60:
80:0c:96:4c:f1:99:24:94:3e:3f:e2:98:e2:7e:3d:
9d:56:64:24:a0:5d:3c:51:e4:a7:c3:36:24:26:35:
24:24:58:e2:0e:d4:2a:c1:b8:40:79:a0:6c:f8:40:
b9:fd:8c:6b:9b:a0:05:10:f3:59:17:85:21:31:e6:
e8:73:2c:23:66:12:65:aa:fa:fe:b0:e3:f2:7e:00:
fc:78:92:f2:5f:9b:74:2c:5c:ec:8f:2b:a7:cf:d1:
0d:0c:da:fe:31:55:1e:ed:32:b7:af:37:a8:0c:40:
14:62:5d:22:6b:49:95:f5:03:21:1a:9a:16:88:99:
2b:17:46:95:7b:09:56:9f:f4:12:e5:cb:9a:82:fb:
c7:24:a6:95:36:71:b3:53:7e:a2:c7:87:e4:57:92:
4c:26:ba:18:68:de:12:22:43:36:1d:b5:4b:7c:77:
11:6d:d5:db:77:0e:ff:7c:d8:f2:fa:f9:86:36:47:
93:fe:46:38:33:1d:03:a0:e8:e8:15:86:41:6a:54:
fb:50:ce:ba:bb:38:86:6d:dc:60:7d:f5:a5:ec:2f:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:AB:9A:4A:55:FE:CD:69:23:4F:57:CB:0B:08:47:DF:6B:F4:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E943E20CDB411EFB13E85AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b3:ab:5c:1d:77:b1:cc:d2:19:20:fe:72:3c:40:75:a4:f7:
59:08:fc:1a:ec:85:9f:8b:13:24:c2:fe:ee:32:c5:c9:fb:ad:
fb:0c:f2:4e:ed:ca:af:97:61:45:36:59:94:da:45:bd:37:33:
4b:c0:e2:8f:f3:1b:f2:bb:5a:13:e3:15:4e:58:df:ec:f6:ba:
a9:2d:e5:5e:51:d4:39:5a:db:e5:6c:17:60:53:28:dd:08:dd:
2d:c3:7a:a1:72:56:4d:5c:fc:77:76:e9:66:96:be:c1:dd:2b:
41:93:85:28:fc:56:1c:6c:c7:c3:20:28:80:f0:35:68:5a:1f:
e2:68:74:c4:0d:ae:1b:e1:b9:51:55:74:59:49:3d:b1:df:75:
3d:f0:49:46:c6:20:45:6b:4f:6d:b6:dc:f5:8f:8f:44:f2:42:
16:29:bd:1c:44:cb:6d:cd:76:ef:44:a2:b4:d7:fc:5f:cd:65:
98:bc:6d:a0:0f:ff:c8:1d:19:1a:f5:a4:d3:99:97:84:6e:dd:
97:e7:7e:c5:f6:9b:d4:48:53:14:8c:f1:53:83:d2:99:3e:c9:
38:2d:16:65:01:3d:6b:dd:5b:90:cc:75:2d:ec:f3:33:9a:be:
d1:1d:0c:84:0f:93:a6:38:2d:77:20:ef:be:7e:f3:83:5e:d8:
ca:15:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:19 2025 by rpki-client