Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/777C199CC37E11EFB2360BBD762E951A.roa
File: 777C199CC37E11EFB2360BBD762E951A.roa (raw, json)
Hash identifier: ibkHyxcBYgPBC/FLX5JqWEZD7Rvth8cpw3b+efs3gzI=
Subject key identifier: D6:13:19:FA:B8:8E:3A:60:8B:98:A4:E8:27:86:1A:6A:45:E5:03:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012744
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/777C199CC37E11EFB2360BBD762E951A.roa
Signing time: Thu 26 Dec 2024 11:42:21 +0000
ROA not before: Thu 26 Dec 2024 11:42:17 +0000
ROA not after: Fri 12 Dec 2025 11:42:17 +0000
asID: 984
IP address blocks: 154.94.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75588 (0x12744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:42:17 2024 GMT
Not After : Dec 12 11:42:17 2025 GMT
Subject: CN=676d411d-8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:76:d7:b9:21:78:4c:45:4b:d2:1d:91:c1:
59:e1:04:76:2e:c3:e5:f7:58:8a:3b:59:71:50:9d:
2c:45:f3:81:c2:00:f3:2a:bf:5a:49:a1:00:2a:42:
22:9a:58:84:84:ea:b0:8a:39:0b:02:07:e1:58:c2:
b0:81:81:f0:d8:a3:1b:38:86:5e:2e:06:1a:9d:84:
8e:02:b1:13:d1:40:2b:7f:9c:31:9d:67:23:77:dd:
cf:67:73:9d:de:3e:f3:74:a3:40:c2:bd:d6:8d:f0:
d7:95:1f:09:8a:1c:a3:09:7d:4b:58:1a:d2:0a:90:
3b:a8:d6:49:eb:e8:30:14:df:23:5d:a8:4b:bf:ec:
b3:0a:db:3f:34:c7:f8:f5:e6:42:78:c1:04:f2:45:
51:5b:ef:d5:66:62:af:8e:d2:d0:5d:27:77:ab:eb:
c2:a7:dd:a1:d6:0d:d7:c0:99:90:a0:dc:c4:91:68:
a7:f1:04:89:6d:a0:fb:a5:99:06:ac:02:75:4b:37:
bd:6b:9e:8e:e0:ad:c3:21:56:6e:b0:13:ff:86:b6:
02:2f:ea:fc:8e:b9:db:c1:ba:9a:af:0e:57:b5:10:
ac:71:b8:fd:94:b5:3f:32:b2:25:e4:e0:50:44:1c:
75:f6:a1:2b:03:f8:3e:8b:bd:1c:2d:81:91:e2:fb:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:19:FA:B8:8E:3A:60:8B:98:A4:E8:27:86:1A:6A:45:E5:03:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/777C199CC37E11EFB2360BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:0d:d7:8d:98:03:e5:d9:07:fd:5d:d7:0b:49:10:10:a8:f4:
b8:08:cf:ad:4d:10:86:cb:5d:fc:71:1c:d4:b2:78:d7:74:2b:
3e:39:54:d2:a9:58:e9:5f:22:bc:58:3f:a0:47:bf:a7:ce:79:
5e:d5:fe:8d:b7:ab:8c:ca:56:25:74:20:6c:8e:93:88:02:ae:
ff:4c:da:e2:8b:d3:26:9c:bd:88:ed:29:a1:02:d1:85:f7:a5:
52:2e:d2:07:3a:0c:be:b7:09:f1:39:a7:56:e9:61:ee:2a:31:
3c:01:22:e4:49:6f:84:ec:d8:3f:24:c7:ed:2d:70:22:59:0c:
45:f0:74:7f:89:f3:94:52:84:1f:76:2d:c1:d9:1c:05:e7:fc:
9b:d2:ff:b7:9e:8b:91:cd:84:3a:83:66:37:fb:b0:0d:6d:dc:
d0:7a:4f:b6:e2:38:77:60:81:54:f2:48:5e:a9:ac:8c:1d:e3:
96:e1:8e:a7:6f:3f:7b:9d:20:c3:22:f6:0f:46:cf:8d:63:d8:
2e:b6:41:00:37:b8:c5:51:0e:3f:64:3f:c1:52:61:93:d3:32:
a2:39:67:18:7e:09:e7:e9:68:3f:3f:81:f0:c7:37:72:c0:4f:
83:21:4e:46:62:ec:bc:cc:e3:dc:c0:52:87:2f:57:17:ce:f1:
fe:9f:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client