Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0440DCC26411EF816385BA762E951A.roa
File: 7B0440DCC26411EF816385BA762E951A.roa (raw, json)
Hash identifier: nelEjOZV6paIhu1PD3nq0watFc/fxptuBLujAT7xK1U=
Subject key identifier: 3C:05:15:B5:E2:31:16:84:E1:9F:56:C9:D3:7B:0A:BE:6B:37:76:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0440DCC26411EF816385BA762E951A.roa
Signing time: Wed 25 Dec 2024 02:03:49 +0000
ROA not before: Wed 25 Dec 2024 02:03:45 +0000
ROA not after: Wed 10 Dec 2025 02:03:45 +0000
asID: 984
IP address blocks: 154.199.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74712 (0x123d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:03:45 2024 GMT
Not After : Dec 10 02:03:45 2025 GMT
Subject: CN=676b6805-6a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:68:e3:6a:37:1f:92:ea:59:59:50:d4:dd:
4b:d6:b2:8e:52:a3:83:10:80:00:14:39:d4:7d:73:
cc:7d:64:be:2a:30:6b:2c:a6:70:43:04:97:55:88:
81:93:7e:6c:dc:26:d5:c3:da:70:03:8e:7a:55:b2:
71:4e:5c:90:b7:d2:be:43:3d:f4:56:31:fa:18:de:
15:95:dc:50:00:97:cd:98:c4:0e:c4:5d:e4:bb:9e:
39:93:98:89:36:c2:a2:78:42:e0:46:ab:dc:63:71:
a1:bf:a9:e3:48:0b:57:10:40:dd:e3:84:20:e9:a7:
3e:a7:24:36:e4:b7:99:7a:53:0d:dc:3d:9f:1d:b0:
b6:d9:15:cd:b4:8e:5b:46:0d:09:1e:57:43:4a:f2:
cc:c9:36:15:1e:b0:37:eb:68:1d:c0:0b:3b:fb:30:
a7:2c:70:24:78:d8:9e:b9:4f:98:cf:2a:ef:a7:81:
68:bd:ea:ec:ba:b1:32:aa:54:98:31:41:df:dd:bf:
46:61:5f:80:a8:1f:23:83:7d:f0:3d:fa:0c:72:cb:
a6:5b:97:9c:ab:a7:a5:0b:a4:4d:9f:4b:90:7e:b1:
39:36:89:70:3a:08:f9:89:43:35:2c:a5:1d:40:6c:
20:e7:a3:00:2b:58:ad:6e:35:a2:30:96:34:cf:f8:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:15:B5:E2:31:16:84:E1:9F:56:C9:D3:7B:0A:BE:6B:37:76:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0440DCC26411EF816385BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0d:f2:c5:a2:cf:51:04:e3:48:4e:f1:12:7b:2d:86:06:bd:
ce:95:1c:30:76:a3:ce:eb:d0:a8:fe:9c:57:66:d2:5c:3c:13:
b0:d7:62:d1:a0:b8:ed:b5:f5:b5:cd:c2:7f:5b:68:89:0b:56:
e2:e2:84:df:c5:37:79:98:bb:77:91:db:cc:4b:f5:b0:33:10:
21:99:ce:13:50:02:93:dc:dc:d9:11:8b:dc:f5:62:1f:6c:00:
0b:07:02:7b:31:7c:f6:1e:3b:34:3f:68:f5:46:33:32:28:70:
65:2a:12:a0:9f:a2:e0:19:66:95:37:5f:2e:c2:81:02:ec:ae:
3e:11:8e:45:9b:f8:56:28:0d:a3:99:12:65:e8:ac:38:d5:02:
fa:b7:fd:06:3d:e8:f4:bb:32:20:85:7d:99:df:6e:a4:46:f8:
f5:62:49:d7:02:d8:d7:85:9f:ae:6d:9d:d1:c9:40:9e:69:67:
95:5b:ff:d5:1e:64:92:cb:41:04:d4:87:b6:7e:27:e4:d0:cf:
b3:78:6b:12:e4:c8:13:fd:e7:91:b7:9b:6c:a3:40:2b:fd:50:
02:ca:a7:e7:fc:1f:e6:3b:e4:73:57:0c:12:0a:a2:a4:16:68:
ab:f9:26:1c:63:e8:88:42:b6:5f:69:34:08:f4:2a:64:69:c6:
d3:72:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:50:38 2025 by rpki-client