Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C77C5F6C1AC11EF9B59C8A2762E951A.roa
File: 6C77C5F6C1AC11EF9B59C8A2762E951A.roa (raw, json)
Hash identifier: rA8FagfM1BoYvOlf9qZD4DZVpD6JWo2XgNCwiufPzjY=
Subject key identifier: F7:07:CE:74:87:FB:20:04:A6:17:3E:98:1C:CB:E7:0A:D0:4F:08:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01213D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C77C5F6C1AC11EF9B59C8A2762E951A.roa
Signing time: Tue 24 Dec 2024 04:06:17 +0000
ROA not before: Tue 24 Dec 2024 04:06:13 +0000
ROA not after: Wed 10 Dec 2025 04:06:13 +0000
asID: 984
IP address blocks: 154.92.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74045 (0x1213d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:06:13 2024 GMT
Not After : Dec 10 04:06:13 2025 GMT
Subject: CN=676a3339-59b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:72:d1:9d:ec:db:7a:6d:2c:17:37:2d:c9:
c5:da:79:5f:49:3a:98:ec:20:1e:dc:46:79:1d:ba:
ed:33:b5:c1:d3:1c:65:18:c4:5d:73:60:0b:bc:b5:
c7:d8:9f:f5:ec:28:af:6a:6b:99:05:29:a6:56:1e:
dc:fa:d1:e3:4d:aa:fe:1f:ea:79:3f:27:fa:11:0a:
db:8c:7e:a5:1a:aa:fd:88:cd:5a:9f:36:e9:01:71:
2f:a7:5b:98:64:c7:41:ba:ca:bb:98:04:fa:71:c9:
23:8d:2a:f7:ff:d0:d8:f6:c6:b2:53:2f:4c:7c:ce:
65:d4:fe:14:01:e5:41:71:3a:ef:e1:1b:e6:e5:a6:
6b:fb:31:52:c0:dd:2e:51:9f:0b:3b:43:74:0f:c5:
69:12:ed:f4:4a:f1:a1:7d:58:22:07:32:7f:49:fe:
a8:ee:98:16:66:f9:ef:30:e3:24:cd:2a:f7:eb:fa:
b3:b2:0e:a1:2a:54:24:88:3a:6b:aa:fd:14:38:3e:
df:fc:98:ed:47:e4:2f:ba:70:f9:1e:bf:3e:d4:2e:
4e:a0:6a:1a:2a:0e:ff:26:c7:12:e3:23:2a:42:7c:
e4:8d:68:fa:18:55:b5:d5:d4:37:c0:0c:b8:c2:5e:
7e:95:5a:be:7d:f2:ca:0b:d4:ba:aa:f5:f1:d8:f4:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:07:CE:74:87:FB:20:04:A6:17:3E:98:1C:CB:E7:0A:D0:4F:08:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C77C5F6C1AC11EF9B59C8A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.252.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:8d:53:99:19:62:ba:c6:56:d8:8e:a0:35:27:9c:ce:1b:73:
bf:14:da:40:3f:24:fe:84:20:ae:3c:7f:b4:2b:3c:ff:67:71:
8a:f3:c2:32:13:53:a8:99:f8:25:c1:37:af:dd:40:aa:83:08:
ec:b1:6f:9f:60:2d:11:a8:2c:8a:25:33:8b:6c:29:1f:77:40:
97:70:87:df:94:ee:43:30:de:f7:ee:a3:47:7c:73:87:fa:23:
8d:85:30:12:73:fa:3d:86:4a:2e:b6:3f:43:16:1e:bd:f8:64:
48:01:ac:b0:f9:2b:ad:81:0b:d7:84:53:1d:21:e3:f5:c2:0c:
ff:e6:98:9b:21:a5:9c:44:75:e8:71:12:80:80:16:e7:f1:f0:
6c:8d:43:11:71:61:77:5e:f8:96:53:dd:bb:04:41:6f:21:01:
85:1b:90:d6:60:e2:ee:ab:91:29:d0:7f:a8:96:4e:57:2c:44:
1c:92:1b:cd:bb:f9:9c:ce:12:27:ed:82:65:cc:f7:43:cb:69:
56:45:2f:a2:2e:36:69:f9:fe:be:4c:bb:25:fa:9b:a1:99:c6:
9d:f8:ec:d2:6f:72:aa:09:61:bb:a3:26:9b:cd:e2:97:65:ce:
53:94:87:ce:74:a2:1c:37:a5:e9:73:9a:68:80:fc:3c:d5:24:
48:35:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:13 2025 by rpki-client