Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76637428C1B311EF8AC48950762E951A.roa
File: 76637428C1B311EF8AC48950762E951A.roa (raw, json)
Hash identifier: dvNLMoZ3vgZUsC6RvR+B9XeWqd/iPyEKuBsWv4CYg2o=
Subject key identifier: AE:46:D8:77:34:F5:A1:EF:C6:1F:2B:39:36:9C:14:6A:3C:B4:A9:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012191
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76637428C1B311EF8AC48950762E951A.roa
Signing time: Tue 24 Dec 2024 04:56:40 +0000
ROA not before: Tue 24 Dec 2024 04:56:36 +0000
ROA not after: Wed 10 Dec 2025 04:56:36 +0000
asID: 984
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74129 (0x12191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:56:36 2024 GMT
Not After : Dec 10 04:56:36 2025 GMT
Subject: CN=676a3f08-7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:1e:c8:2f:42:06:25:a2:d0:b0:c2:75:5f:
6c:2f:41:97:cc:37:e7:6e:67:33:d8:09:b1:d1:fa:
93:f5:8e:b2:da:79:66:82:ea:07:6f:0b:df:65:b4:
b4:35:27:d6:21:9b:42:0d:6e:84:7a:d0:36:da:69:
73:40:26:55:fb:9f:3d:a0:93:b5:e3:27:70:22:7c:
12:b7:9d:d8:8b:c4:83:83:cf:d9:90:9b:00:f5:39:
e3:e8:df:03:88:89:d0:8a:16:28:58:36:e2:42:62:
e0:6d:c8:81:af:e4:63:96:2d:7c:bf:85:0d:5f:11:
30:be:6f:04:e3:d4:ca:1e:42:9d:e1:21:7c:77:39:
a0:94:61:69:26:af:7a:d0:54:6b:f0:5e:8a:d1:be:
fa:b8:f0:52:2c:d4:77:2d:17:97:14:9b:ca:81:83:
29:bd:04:1e:28:6c:b1:b9:f5:f1:09:ca:ea:14:78:
aa:f8:55:b7:60:89:58:a7:4f:2b:e1:fc:e4:49:dc:
e2:22:18:37:cb:8f:c5:5e:ef:f8:cc:27:ba:de:2c:
0d:8d:6c:a6:68:88:3f:51:1c:ee:4e:1c:13:c1:2d:
c1:54:5a:2b:88:25:ee:bf:d7:32:4a:67:9e:16:f9:
8d:1c:da:e7:a0:bf:ab:fb:51:6f:26:e8:69:ae:19:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:D8:77:34:F5:A1:EF:C6:1F:2B:39:36:9C:14:6A:3C:B4:A9:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76637428C1B311EF8AC48950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e0:de:96:66:0c:f2:b9:7c:67:0c:a6:0d:e9:1f:07:18:62:
38:55:19:6e:90:e2:65:77:fa:65:35:7d:1a:53:0a:be:d1:aa:
83:88:bc:d9:e5:4a:e2:59:84:eb:fa:40:f0:14:ec:24:f1:ef:
dc:6c:d9:82:df:89:77:a0:38:b8:55:7c:e8:82:02:7a:7f:1c:
4c:ec:3c:0c:d1:8d:aa:3e:47:65:2a:e1:1e:6a:fc:ac:14:09:
2c:83:d6:67:b5:e4:5b:2c:28:31:af:64:45:98:04:97:d0:0a:
37:87:48:79:3e:28:44:f1:34:36:a9:99:21:ee:f9:ef:d3:32:
81:6a:47:e7:41:41:01:2b:cb:3a:90:06:1b:72:48:9e:dc:c9:
88:a7:47:bf:cf:87:1b:35:a7:a1:01:40:88:24:4a:99:a5:4a:
1f:15:27:04:b9:45:29:f4:07:eb:83:61:a7:3a:88:31:27:c8:
13:5f:3d:de:ec:41:f4:72:5e:3e:22:91:07:25:36:19:87:c0:
2f:b3:52:3b:5f:fd:d0:16:b2:94:da:32:76:26:70:39:d4:22:
0e:d9:0a:7c:1c:38:32:6d:91:fc:54:34:5e:1d:16:86:ed:89:
7c:0f:59:21:ed:35:6c:8c:87:1d:6a:fa:28:0c:8d:85:d8:f2:
53:6f:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:24 2025 by rpki-client