Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631F72FAC41E11EFB7E4D041762E951A.roa
File: 631F72FAC41E11EFB7E4D041762E951A.roa (raw, json)
Hash identifier: hCrvye6dwsUKapxNiuc/NHqw7QNxOKLehr6CQULv/bc=
Subject key identifier: AE:CD:37:1C:F4:FD:9A:C8:69:11:3B:96:F5:BD:0C:F2:A3:00:69:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631F72FAC41E11EFB7E4D041762E951A.roa
Signing time: Fri 27 Dec 2024 06:47:06 +0000
ROA not before: Fri 27 Dec 2024 06:47:03 +0000
ROA not after: Fri 12 Dec 2025 06:47:03 +0000
asID: 984
IP address blocks: 154.201.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76197 (0x129a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:47:03 2024 GMT
Not After : Dec 12 06:47:03 2025 GMT
Subject: CN=676e4d6a-f31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:c9:86:57:d5:25:3c:33:54:1a:8a:14:48:
30:d0:6d:c2:e3:0a:01:40:fe:5d:fe:a1:7b:88:6d:
99:cd:dd:82:ab:2a:17:ed:95:1d:a4:82:d4:01:ee:
dd:e4:2f:28:0d:ed:5e:79:ca:46:db:d4:63:2f:f0:
05:1c:5c:2d:bc:b0:1d:4c:3f:b5:a4:90:87:a8:38:
1f:43:26:8b:e6:c6:28:f0:f2:a8:2e:9e:ab:3f:ca:
c8:4c:22:dc:35:87:dd:a6:f1:0b:ef:dc:37:7b:e8:
d3:d9:80:4b:56:82:10:0f:83:3d:be:30:4f:f9:fe:
e5:71:33:59:01:a2:5a:f0:b6:21:38:05:98:74:8f:
83:af:8a:a6:39:a3:3c:1d:75:ae:b2:78:a1:0f:9d:
65:5a:92:d3:02:d7:62:4a:86:07:8c:31:e7:8e:06:
96:7c:25:5b:ac:1c:f4:16:79:1d:04:67:d8:50:82:
16:56:dd:ec:bc:86:a2:0e:91:41:3b:48:c7:8d:ef:
83:ba:cc:c0:05:6b:c4:99:b6:55:6b:9a:90:26:5d:
dc:e2:5d:f3:f6:41:dc:f9:9c:b2:1d:9e:52:bc:e0:
5a:45:76:0b:ac:ce:18:23:8d:e0:d9:f7:85:63:42:
5c:fe:5e:14:bb:9e:34:3c:51:16:c3:6c:ac:91:9e:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:37:1C:F4:FD:9A:C8:69:11:3B:96:F5:BD:0C:F2:A3:00:69:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631F72FAC41E11EFB7E4D041762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:27:84:5b:f1:51:91:42:21:86:bb:bd:ec:c5:98:d3:c2:9e:
b6:d6:b5:85:00:d5:9b:b9:6b:6f:9c:3e:07:c0:b8:1b:cc:4a:
f4:8f:2d:7f:1f:cf:f6:2f:ed:41:c0:c5:72:c5:87:35:2b:91:
44:9c:4f:ec:91:e9:2b:6e:44:70:1c:0b:ef:66:ec:ac:e6:6d:
00:ec:7a:87:6d:f9:7e:e4:01:f9:56:1d:4f:36:eb:be:5b:03:
70:fb:42:09:f9:e2:89:39:83:95:82:c9:bd:5b:40:fa:c7:6c:
29:38:3b:21:7c:39:1d:13:c5:69:d3:70:bc:2d:43:8e:01:b9:
80:4f:36:a8:65:67:39:3d:0d:9f:09:63:c8:3a:c9:00:f5:e2:
c1:fc:54:cd:a6:81:ce:e5:05:f3:3f:52:df:9c:52:52:89:23:
4f:7f:eb:58:91:1f:d0:d1:d1:68:ce:80:1f:32:97:b9:aa:38:
24:e1:4a:fe:48:04:e5:08:2b:d7:4d:f8:76:83:69:9b:49:39:
96:c3:a2:ec:4a:64:33:45:32:6b:1d:9c:e3:c1:a9:a3:c4:13:
88:5e:9b:dd:6f:63:63:a6:8e:9b:64:36:cf:01:d5:46:ee:30:
77:51:61:6a:4c:f2:14:f7:e5:ff:89:0f:19:b9:3b:bd:63:c1:
4e:cc:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:46 2025 by rpki-client