Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57962D7CC1A611EFB421F079762E951A.roa
File: 57962D7CC1A611EFB421F079762E951A.roa (raw, json)
Hash identifier: +cH1/e+euQcsLJpWhImKnNobjWuPPFuUAwQlCyLPIzE=
Subject key identifier: AA:C0:F5:64:C5:4F:C1:F1:88:D3:0D:A1:7D:21:A4:BA:FB:B6:90:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57962D7CC1A611EFB421F079762E951A.roa
Signing time: Tue 24 Dec 2024 03:22:45 +0000
ROA not before: Tue 24 Dec 2024 03:22:42 +0000
ROA not after: Wed 10 Dec 2025 03:22:42 +0000
asID: 984
IP address blocks: 154.92.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73971 (0x120f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:22:42 2024 GMT
Not After : Dec 10 03:22:42 2025 GMT
Subject: CN=676a2905-75ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:f8:e0:fa:dd:ca:d8:ac:cf:5d:c1:66:ad:
8b:93:a4:79:2f:9c:d0:f0:bc:58:b9:9c:14:cc:53:
0a:5c:24:2c:e2:98:51:9b:34:68:3e:8f:19:e1:c4:
22:88:28:68:56:3e:6f:b6:bd:79:40:f1:a2:26:4a:
46:8a:ec:74:b1:3a:57:69:3e:6a:15:de:3f:95:9c:
bf:65:32:b9:88:7a:ef:e7:7d:b8:10:d2:da:94:a1:
29:56:c6:82:f4:ea:01:df:7b:20:2f:29:6e:2d:a5:
b8:bd:42:13:be:7b:66:7a:9d:0c:4c:fd:61:33:ed:
62:e7:9a:1b:87:12:73:11:33:11:b7:72:d2:36:01:
ef:a0:4e:9c:73:aa:b9:0d:89:ac:f8:87:1f:dd:6b:
37:ad:d9:6d:81:6b:69:1c:eb:4f:d5:8c:96:7c:9e:
61:67:7f:06:ee:cc:31:a5:1e:b9:82:0a:c2:66:3b:
c4:04:4d:4c:0a:59:0c:fc:3c:4c:25:b6:7c:48:5c:
dc:f8:58:98:da:b6:ba:33:51:4f:0a:63:a5:98:98:
be:b4:ac:8b:06:a0:e8:3e:46:2c:e5:92:2c:c2:0d:
81:f2:16:81:95:81:92:db:6f:7b:33:83:cd:43:62:
a6:f7:85:6b:09:e3:f9:a4:72:0b:0c:01:e2:f2:3f:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:F5:64:C5:4F:C1:F1:88:D3:0D:A1:7D:21:A4:BA:FB:B6:90:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57962D7CC1A611EFB421F079762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.193.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:47:9d:f3:6b:ee:c5:36:1d:ee:0d:95:d7:38:2f:54:48:5f:
99:c2:02:a9:be:d4:cf:86:11:f6:1a:d5:31:fe:b2:86:ca:f0:
bc:12:77:e4:9d:ec:03:4d:1a:c8:28:c0:e6:5a:98:ae:bf:e2:
93:06:8f:0d:1d:db:de:c6:ff:73:df:58:06:f1:af:b6:c3:81:
da:46:d4:3e:ab:59:cf:f2:06:3c:9c:fb:be:10:7e:b7:11:6b:
77:34:23:a2:74:de:1d:ec:95:fb:4e:f9:36:3a:cd:0a:f8:fd:
fc:c7:73:53:e3:22:ad:1d:5d:8c:74:04:19:d4:58:32:03:28:
8a:58:3d:e2:86:3e:2f:2c:8d:8b:b5:1e:4b:b6:b5:5d:21:ae:
9d:e3:f5:da:f0:e4:e9:9b:62:af:de:b3:d9:4f:ce:78:47:9c:
89:43:be:f4:15:a6:62:9d:fe:f4:08:5a:b7:69:d0:6f:0f:9d:
e0:98:77:5b:49:0a:dd:e4:0b:5b:f4:bb:ab:fe:4a:c7:3c:b5:
fc:ab:7a:51:1f:78:fd:6a:bb:58:8b:97:4d:70:d2:03:f9:01:
fe:17:a2:f5:0e:f4:16:67:1a:67:ba:9d:58:64:ea:a9:7d:8b:
c1:da:4e:c7:10:51:f5:bf:26:39:0a:33:be:fe:c7:6e:c5:fa:
ea:3f:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client