Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542229D6C26211EF9D2239AB762E951A.roa
File: 542229D6C26211EF9D2239AB762E951A.roa (raw, json)
Hash identifier: ecBHRQ7Y1wBu76IeioFyz5bx72N2EBAP31BMtpPSpLg=
Subject key identifier: 2D:5A:91:17:61:5A:E6:AF:E1:46:0E:1A:9B:26:ED:D6:21:2F:57:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542229D6C26211EF9D2239AB762E951A.roa
Signing time: Wed 25 Dec 2024 01:48:25 +0000
ROA not before: Wed 25 Dec 2024 01:48:21 +0000
ROA not after: Wed 10 Dec 2025 01:48:21 +0000
asID: 984
IP address blocks: 154.199.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74688 (0x123c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:48:21 2024 GMT
Not After : Dec 10 01:48:21 2025 GMT
Subject: CN=676b6468-7cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:77:70:a4:08:3a:7d:49:27:39:8a:34:c4:
66:a3:57:27:8d:27:d0:ab:dd:49:10:1e:b7:d7:7e:
a6:99:46:d6:14:55:43:d2:85:a8:95:7d:56:b1:8e:
fb:d9:ab:09:50:b8:67:fa:49:de:5b:8b:8f:81:90:
84:95:0a:2a:f6:77:fa:c3:3d:c6:15:cf:b6:ba:2b:
75:16:69:e7:58:4e:64:99:b9:ba:25:89:43:a3:6b:
21:e3:01:19:58:ca:b9:62:ec:26:95:c1:cb:27:8e:
95:c4:d6:6b:d0:48:5e:9b:88:ac:d1:f4:ad:24:3d:
fa:d7:99:54:bb:ed:b1:71:cb:c2:f4:5c:bc:d1:92:
52:00:22:e2:be:e0:7f:35:1c:b5:c9:bd:d1:7a:26:
4d:4a:07:84:a3:09:fa:9d:b6:dd:a3:f0:9b:db:4b:
1b:88:eb:9e:00:90:bf:34:71:01:cc:26:0c:3e:49:
a9:1b:fb:3e:e4:4a:e8:e4:8e:ae:75:4d:69:3c:ac:
9c:25:82:98:07:03:6f:ef:35:19:7a:20:87:94:83:
a7:c4:5f:80:b1:59:85:6c:61:42:95:a2:a8:b3:be:
0c:85:7e:6c:2d:0f:4c:26:1e:1f:54:e0:f3:58:83:
6a:fb:54:ec:10:34:31:f5:0f:b7:82:20:1a:4b:7c:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:91:17:61:5A:E6:AF:E1:46:0E:1A:9B:26:ED:D6:21:2F:57:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542229D6C26211EF9D2239AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.109.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0f:bc:56:a3:1d:4b:bc:7f:84:b7:af:8e:60:ed:5c:88:0b:
0d:e4:41:62:61:cb:99:da:36:e5:2a:a1:39:bd:a0:7b:91:02:
1e:1a:b5:d1:4d:59:be:60:e9:27:5d:00:bc:24:3f:27:8c:a0:
fa:d3:eb:75:fd:0b:2b:5c:d9:0c:2c:fe:7c:bd:ef:55:99:68:
5e:ee:fa:a0:55:2a:9c:b5:5e:5d:0b:dd:f0:05:ba:22:42:e9:
e7:0d:ab:c6:4b:69:b2:5d:c7:d5:4d:65:a2:39:81:a7:ee:32:
0d:76:1f:67:3f:a4:b9:63:f4:34:68:ed:2c:e1:93:c0:a2:f4:
3e:b4:02:9e:f7:b4:bb:60:70:f1:02:12:c0:fe:cd:e3:cb:79:
8d:b7:3b:09:72:24:e4:32:d3:20:0f:05:f7:0e:e7:3d:81:cf:
33:54:70:02:e2:43:cb:6b:2a:2f:15:c6:fb:8f:bb:0f:81:02:
c4:5b:82:c0:f7:84:d2:c5:99:2b:b0:89:33:7f:c1:c9:c2:8b:
b2:dc:c5:18:e3:d0:42:2b:4a:08:8c:f3:36:f4:95:be:51:37:
88:6b:23:c6:82:26:00:44:2b:0d:d3:6a:15:ee:83:96:12:6c:
02:df:f3:6c:4d:3e:db:08:7d:7f:98:d2:6e:a5:b1:4a:de:bf:
f3:2d:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:52 2025 by rpki-client