Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/605202D0C0CD11EF8D682B92762E951A.roa
File: 605202D0C0CD11EF8D682B92762E951A.roa (raw, json)
Hash identifier: 5mmr/kdvHKtNPWvSo71vX9M2a0U48FtErrCzgyMDjjM=
Subject key identifier: A2:23:4F:49:95:27:BC:E6:EC:A2:A7:05:41:E0:65:DC:6C:8F:CE:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/605202D0C0CD11EF8D682B92762E951A.roa
Signing time: Mon 23 Dec 2024 01:29:39 +0000
ROA not before: Mon 23 Dec 2024 01:29:35 +0000
ROA not after: Wed 10 Dec 2025 01:29:35 +0000
asID: 984
IP address blocks: 154.82.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73240 (0x11e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:29:35 2024 GMT
Not After : Dec 10 01:29:35 2025 GMT
Subject: CN=6768bd03-2a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:82:af:34:fc:86:01:57:9e:56:ab:bd:df:
0b:f4:0a:b2:dd:d2:67:4f:f0:65:ee:9d:39:df:a9:
cc:d6:be:ef:08:8b:1b:f1:9a:3b:bc:28:eb:f6:fd:
60:85:c8:e5:08:2f:f4:84:9d:4d:26:05:89:34:64:
d0:b2:5d:73:d4:6c:2a:b8:bb:dc:a6:4f:50:4d:1b:
8d:4c:da:64:4c:25:75:f9:82:f3:b9:09:2d:8f:2e:
bd:d1:4a:29:be:30:fe:44:68:16:a7:b7:b6:f6:5e:
b7:0c:cc:d8:b0:ed:46:47:2f:bb:0b:da:fb:1c:ae:
2b:a7:7d:b4:ec:59:77:02:6c:7d:dd:f9:59:bc:97:
51:c5:5f:f4:70:91:7d:9f:0b:61:b6:e3:ea:19:77:
c2:79:c4:01:53:36:7e:7d:18:e1:55:65:86:fe:56:
9a:e6:8c:a6:41:0e:77:dd:17:45:5a:0f:c2:f6:8d:
5e:8a:dd:7c:ab:34:bc:fd:ef:11:fb:41:8a:9f:e9:
64:62:38:ea:8c:7f:24:23:43:6e:6d:d8:d8:79:b8:
ee:70:da:90:bb:89:56:f5:ca:7a:fa:ae:85:04:4a:
df:0d:83:74:20:69:49:5e:8d:c3:9d:a0:88:da:0c:
e0:b5:62:c3:44:09:b9:63:25:1d:d8:16:b8:d0:cb:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:4F:49:95:27:BC:E6:EC:A2:A7:05:41:E0:65:DC:6C:8F:CE:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/605202D0C0CD11EF8D682B92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:40:60:18:a1:a9:58:e0:da:be:c3:22:f0:8e:c9:7f:ad:65:
26:9b:1f:bd:dd:86:0e:8a:44:09:5e:37:53:fb:42:9a:e0:14:
c6:3c:c7:f7:a6:e3:01:aa:c7:02:6b:2b:e3:be:61:a8:00:e7:
89:50:b8:bd:4d:1a:c3:65:b1:92:4f:59:28:2e:bc:78:ec:46:
9a:18:2d:b9:fd:ff:67:77:dd:74:3d:85:25:63:bb:38:07:b7:
e4:ad:87:f4:2f:f9:0a:83:89:2a:64:91:7d:05:c5:e1:30:49:
6e:1f:6d:75:c3:62:b5:38:bc:a0:ce:d6:a3:b8:46:80:03:d5:
a3:16:f9:e4:29:bb:44:e2:5a:4a:bc:3d:2b:0a:d1:66:9e:9c:
4b:61:52:f6:34:e4:68:db:15:03:4e:82:10:a4:48:d8:8d:ab:
09:a2:5c:ac:c1:f2:ed:e0:96:2d:35:d4:5b:4c:b9:b9:0d:30:
94:8d:cd:cc:e4:8f:86:ce:f7:a6:b6:e2:5f:7f:c4:d4:98:75:
08:d7:9f:21:12:f1:77:9a:21:ca:42:0d:66:24:81:f5:2a:33:
53:df:ca:f9:1a:5f:75:70:ff:55:e0:ac:f4:c8:22:02:cc:78:
ba:29:f7:7c:cb:5c:94:80:a9:38:74:e8:0f:30:02:20:54:99:
59:b6:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:05 2025 by rpki-client