Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BF2D898C1DC11EF8EDF4752762E951A.roa
File: 6BF2D898C1DC11EF8EDF4752762E951A.roa (raw, json)
Hash identifier: sdybpg2OPeSmnRzuVWiIvIKoOMszq0HmMyoArpPpsKo=
Subject key identifier: 72:46:BD:33:C6:46:71:1B:1F:8E:56:B5:BE:1F:6B:16:2B:F8:DC:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012311
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BF2D898C1DC11EF8EDF4752762E951A.roa
Signing time: Tue 24 Dec 2024 09:49:52 +0000
ROA not before: Tue 24 Dec 2024 09:49:48 +0000
ROA not after: Wed 10 Dec 2025 09:49:48 +0000
asID: 984
IP address blocks: 154.194.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74513 (0x12311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:49:48 2024 GMT
Not After : Dec 10 09:49:48 2025 GMT
Subject: CN=676a83c0-27b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:a3:d7:62:b1:a4:50:2b:00:1f:1f:04:99:
91:81:69:f7:fa:cf:e3:02:02:82:a5:82:b8:e5:fd:
8d:98:52:6e:b9:f3:26:cf:4b:5b:8f:f2:c3:d3:99:
ec:c9:f6:67:f8:a7:98:e4:f0:ec:15:81:41:23:83:
93:04:07:9a:2d:79:f5:53:b1:33:b2:87:b2:a5:65:
77:77:d7:4c:46:bd:7e:2f:62:74:a6:e6:df:d2:e5:
ed:da:ed:e7:74:73:60:68:b6:ad:f2:0c:92:5c:88:
74:76:6f:31:64:ce:05:28:e1:bc:85:47:39:94:4e:
bf:ae:60:ef:05:66:06:fc:93:b8:40:10:32:74:1e:
13:fa:30:c1:a6:18:fd:1d:85:e2:8d:90:e2:04:fa:
01:eb:95:69:e3:7a:c7:2c:e4:47:5c:39:a0:81:8e:
9f:b3:ef:5b:c5:95:a9:96:19:8d:aa:3c:05:18:be:
52:9e:2c:20:3f:c8:5c:23:a2:49:83:ca:b6:2b:1b:
0d:29:64:1c:ea:b1:81:7a:c2:9d:06:ec:b6:81:23:
4a:00:d3:64:0b:76:89:1a:f1:1c:75:5e:a6:4b:5b:
f2:43:31:60:1c:08:d8:ac:ba:9d:ac:e4:b2:d8:6e:
dc:d0:ac:e7:d5:82:12:82:9c:87:54:4e:46:db:f4:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:BD:33:C6:46:71:1B:1F:8E:56:B5:BE:1F:6B:16:2B:F8:DC:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BF2D898C1DC11EF8EDF4752762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c1:ba:12:56:fe:0f:37:c4:7c:52:62:5c:ff:bb:c1:a2:85:
52:dd:94:7a:8f:07:9c:55:1e:5c:b4:82:f7:4d:b3:00:07:7e:
cc:0b:51:a5:86:9f:45:5b:f7:91:53:e3:5c:42:16:09:27:24:
3c:52:fd:ef:1f:75:fb:a9:84:e1:ec:62:64:2a:d3:71:b7:37:
6f:c1:4f:cf:87:55:5b:b5:7d:c8:23:94:f9:59:86:72:fb:86:
71:cc:1d:bd:4a:8b:da:c5:5c:2a:5d:78:bb:06:6e:8d:19:eb:
83:c6:6b:b9:6b:43:86:9d:18:f7:54:7d:e3:55:bc:1e:37:87:
17:99:bd:09:f9:0d:1b:f4:98:16:91:22:c8:70:9c:d6:f6:ed:
cb:8e:b7:b8:47:84:fc:b9:f1:c3:bf:04:12:eb:2e:c3:33:53:
cc:c2:96:34:09:05:d8:09:62:3d:e3:57:0f:d6:46:24:19:f1:
66:12:06:d1:8a:42:b3:14:03:7c:7a:63:8c:31:24:c0:41:c9:
7d:5a:a5:37:0f:0a:82:8f:93:51:48:21:4c:2f:0f:39:9b:05:
04:9d:55:e2:a5:23:55:3c:2c:f4:97:66:00:6a:8b:68:91:4d:
aa:53:a0:cb:8d:d1:c8:c2:de:79:44:ee:14:2e:68:ef:58:d1:
f0:c2:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:11 2025 by rpki-client