Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6288F62AC1D711EF94D9A6B0762E951A.roa
File: 6288F62AC1D711EF94D9A6B0762E951A.roa (raw, json)
Hash identifier: iKDMu9ABxSoefdGNXLY4eVK5ZPV8hs968raLoUwUGYg=
Subject key identifier: CF:1A:57:70:DA:6F:35:07:F8:40:00:9F:71:63:25:A1:35:62:48:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6288F62AC1D711EF94D9A6B0762E951A.roa
Signing time: Tue 24 Dec 2024 09:13:49 +0000
ROA not before: Tue 24 Dec 2024 09:13:45 +0000
ROA not after: Wed 10 Dec 2025 09:13:45 +0000
asID: 984
IP address blocks: 154.194.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74455 (0x122d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:13:45 2024 GMT
Not After : Dec 10 09:13:45 2025 GMT
Subject: CN=676a7b4d-90c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:b6:2c:df:db:36:54:f7:25:1c:d1:7f:2f:
c9:77:39:95:44:7e:13:f9:2d:7c:22:2b:87:4b:b5:
bf:79:72:58:23:f0:20:30:b5:2a:82:e5:54:f0:f6:
20:bc:a3:61:36:c2:5d:8b:10:b4:83:37:aa:34:97:
8b:0b:93:69:40:4b:93:3d:e5:d6:c8:ab:f5:e3:18:
86:2c:99:37:e1:af:17:fb:6e:39:fc:9b:c4:59:c2:
7f:81:b4:cf:56:fd:75:e5:c0:ed:9b:84:54:2f:b2:
99:fc:87:5b:c9:e4:a5:3b:77:d1:69:74:6b:8e:ad:
f1:52:dc:bd:d5:59:7b:d2:2f:dc:8d:53:0b:fe:e8:
61:52:62:af:cf:be:28:8c:2a:b2:d5:71:02:4b:4f:
b5:3f:9d:72:85:76:32:32:ce:bc:8c:9c:62:8b:e3:
1f:93:6e:c6:ba:47:26:a8:5d:a9:54:ce:88:cf:76:
af:76:98:72:d2:b9:c9:60:97:cd:35:df:12:cb:96:
1e:e4:b7:ef:21:64:9e:f1:27:16:64:2a:dc:8e:bf:
79:ec:92:b8:fe:78:3e:7e:d8:03:1a:6f:75:3f:b7:
75:da:63:6d:0f:6a:cc:f3:35:a4:37:c5:4c:1d:56:
88:ab:05:24:ef:8f:23:d3:b9:e3:bf:33:9a:d0:ce:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:57:70:DA:6F:35:07:F8:40:00:9F:71:63:25:A1:35:62:48:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6288F62AC1D711EF94D9A6B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:83:84:a1:7d:60:a3:fd:b1:d2:dc:b6:ee:da:29:56:0b:
56:35:00:71:36:e2:4d:68:7d:2c:5d:07:1f:c0:f5:b6:56:53:
54:86:82:14:d3:47:0c:6f:ec:e2:30:d0:7b:a6:0c:e6:da:64:
83:b0:d6:9e:0d:24:08:d6:11:7c:f2:fc:4f:76:cb:24:60:8c:
6c:ab:84:8d:ed:57:f4:7a:f9:b3:1e:e4:24:18:9d:5f:46:bf:
4c:d7:68:96:6b:a7:e1:51:8e:37:e6:f4:c2:66:81:e8:54:17:
4c:51:ee:86:28:0d:42:9a:49:3e:1f:eb:4d:f9:7a:2d:45:18:
5b:18:c1:f7:59:31:b2:93:9f:02:9c:58:b6:84:29:70:b3:6b:
b4:46:43:a5:76:28:f5:5d:32:f2:1e:e9:a0:70:91:85:32:b7:
57:cf:04:b8:61:98:ad:07:c4:74:08:5c:47:53:5a:e3:e0:36:
4a:ae:5a:06:9d:e9:99:29:21:32:12:17:f4:69:6e:cf:d7:8e:
ac:41:83:92:9d:2d:a7:0c:a6:6f:60:c4:82:35:6b:ed:b9:5b:
7e:74:de:6e:5c:98:70:4b:ed:a5:aa:db:c7:b0:34:06:76:2d:
e6:3b:a5:94:a8:13:a1:ea:d0:42:fe:68:74:86:3e:60:5e:69:
ac:e2:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:54 2025 by rpki-client