Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF18078C25E11EFB942798E762E951A.roa
File: 6CF18078C25E11EFB942798E762E951A.roa (raw, json)
Hash identifier: tATxjr5SC6bDPvAMa+q1nkr686b23cGFPThqn7EAv0g=
Subject key identifier: E2:FE:ED:F6:F9:44:C9:C4:6C:4A:69:13:8A:FB:1F:92:B6:9F:0D:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012394
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF18078C25E11EFB942798E762E951A.roa
Signing time: Wed 25 Dec 2024 01:20:28 +0000
ROA not before: Wed 25 Dec 2024 01:20:25 +0000
ROA not after: Wed 10 Dec 2025 01:20:25 +0000
asID: 984
IP address blocks: 154.199.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74644 (0x12394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:20:25 2024 GMT
Not After : Dec 10 01:20:25 2025 GMT
Subject: CN=676b5ddc-06d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:f0:69:01:40:ca:9e:84:bc:67:f3:c2:5e:
53:d4:19:b3:c3:f4:8f:86:5e:17:a4:e5:b3:5e:a0:
95:d7:f1:ee:e5:59:80:91:12:83:c4:0f:d7:85:f5:
1a:53:2f:df:bc:9b:eb:df:0d:94:41:4a:ad:5f:1b:
7e:a4:ed:a1:ee:ca:a5:7b:1d:22:26:2e:ad:6d:ab:
5d:ef:ff:5d:d4:7d:01:bc:de:e0:a0:8b:ec:e9:a6:
fd:4d:ca:7c:7a:b3:52:d0:51:d5:0f:6a:12:af:e6:
80:90:05:ad:e4:8c:61:a6:0b:31:d5:5a:42:5c:45:
6c:cf:a2:8e:ee:23:4f:31:c2:7a:3e:6f:42:aa:0e:
92:b3:e3:01:7c:33:27:37:77:89:61:66:10:88:48:
64:7e:db:fa:6e:26:da:99:7b:3b:55:2c:05:d1:53:
d6:68:49:6a:dd:a5:fb:ea:80:c3:d7:ba:d2:02:b7:
95:ef:9c:2f:24:2c:21:c9:65:c7:52:60:75:23:80:
d3:95:c6:c4:05:d1:f8:a2:84:ae:cc:2d:00:bd:16:
cf:c9:c4:74:f4:fe:91:50:98:8a:8e:95:07:e4:38:
97:96:ca:02:69:26:48:20:38:d6:83:df:5e:45:6e:
62:8f:76:a4:0e:78:d4:db:b5:75:cb:cf:39:e8:f7:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:ED:F6:F9:44:C9:C4:6C:4A:69:13:8A:FB:1F:92:B6:9F:0D:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CF18078C25E11EFB942798E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:b7:70:fe:5f:73:c3:9a:42:67:02:e0:30:df:e4:12:82:
3b:18:8e:1b:6e:38:e3:cb:33:88:11:b8:4c:e6:4f:21:34:13:
b9:a0:12:f1:3a:e0:b1:3b:49:56:64:5f:5e:b1:56:25:d7:16:
f9:1f:ab:92:79:44:02:5a:15:e9:25:fe:7f:51:36:0a:bf:42:
9c:40:66:7f:a4:bf:53:ac:4e:c0:95:92:87:d1:09:7d:07:bb:
a0:fd:bb:b8:fd:b8:ec:72:fa:a2:52:03:0a:a6:03:9c:a2:21:
8d:f5:c0:f4:48:f8:16:1b:58:ae:d3:8d:91:d0:ca:98:0f:c3:
b2:fe:72:b7:36:e0:52:48:52:d4:8d:bb:d4:cc:19:0d:77:5f:
c6:35:0c:49:45:55:ef:09:82:36:0a:9f:62:2d:62:e5:7c:cf:
8b:8d:6d:77:dd:c9:80:5c:4c:30:3e:d9:77:33:c0:6f:49:5c:
f7:4f:3c:8a:82:fe:98:a7:ca:a6:92:b3:20:d4:67:28:07:09:
50:b2:d0:a2:b4:74:aa:bd:27:fa:d2:94:42:f3:e5:70:e0:d2:
d4:8f:7f:a4:6e:60:b7:be:d3:28:6f:24:8d:b6:41:d1:9e:0a:
6b:c0:c4:c9:da:e1:ee:8c:db:1a:63:3d:f9:c4:a7:cc:7b:ad:
4c:69:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:52 2025 by rpki-client