Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEC6A0CC1B811EFA120AC6E762E951A.roa
File: 7CEC6A0CC1B811EFA120AC6E762E951A.roa (raw, json)
Hash identifier: Zbb7pdIhOZ0n7WkfZeif69GoMDfeBtlHVKf3ZEqhGk8=
Subject key identifier: DF:75:89:E0:1B:87:59:23:D9:5F:D3:5D:4C:9F:3D:AA:E0:A9:61:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEC6A0CC1B811EFA120AC6E762E951A.roa
Signing time: Tue 24 Dec 2024 05:32:39 +0000
ROA not before: Tue 24 Dec 2024 05:32:35 +0000
ROA not after: Wed 10 Dec 2025 05:32:35 +0000
asID: 984
IP address blocks: 154.193.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74189 (0x121cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:32:35 2024 GMT
Not After : Dec 10 05:32:35 2025 GMT
Subject: CN=676a4776-7f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:1a:63:fb:40:c9:d8:e5:74:ac:3f:2e:e0:
c2:5e:d0:6d:f6:a3:09:fd:1f:e7:ef:03:8e:2c:15:
bd:36:a4:dc:72:9f:ee:3b:f6:a8:b8:5d:7e:fb:a2:
61:e2:b2:17:9b:cd:60:46:01:a0:ac:6d:c4:8f:e3:
be:6f:93:25:09:8e:7b:01:29:fd:f8:63:bc:1e:27:
49:08:a8:f8:13:03:a8:5a:e3:87:3d:56:ee:07:a5:
56:b5:af:c2:4a:ae:58:42:fd:ec:95:c1:fb:cd:3b:
ec:b1:5e:92:3f:f5:65:8d:51:93:0c:b8:83:91:df:
d3:68:c2:70:b8:b3:ff:59:75:f5:ce:bc:b7:b6:a4:
24:63:3f:71:49:10:aa:a9:fe:c5:17:1a:52:bc:73:
df:51:f2:b9:3a:60:5e:e3:21:ec:6c:e1:76:ad:65:
43:da:76:ae:9d:a2:e0:88:a0:8c:bc:c0:01:9c:e9:
84:f7:84:bd:89:ea:c8:3b:35:b6:00:60:4e:f3:b1:
8d:4b:90:7f:72:e3:7b:b2:4e:a3:94:51:32:cf:32:
59:09:2c:7e:69:69:00:3c:89:e9:96:d7:2d:9e:d8:
b3:7e:77:61:90:c7:78:4b:53:b0:d4:bc:63:1a:c5:
f1:5d:eb:d4:bc:5d:18:5e:14:c7:3d:53:e5:60:c0:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:89:E0:1B:87:59:23:D9:5F:D3:5D:4C:9F:3D:AA:E0:A9:61:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CEC6A0CC1B811EFA120AC6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:16:15:34:3c:9e:b1:02:9a:91:67:ba:e3:aa:af:82:06:49:
9d:93:49:82:68:70:c9:6f:10:83:e4:f1:79:25:dc:30:f3:e4:
67:e7:47:19:de:9b:c0:52:25:70:85:93:de:21:ad:13:c0:c9:
cb:99:5a:6a:e0:4b:d5:44:d7:20:7c:74:7f:35:54:ae:02:f7:
77:25:0e:e0:e0:09:dd:5b:33:5d:4c:b2:78:43:c6:a3:a0:03:
f2:80:88:24:82:c1:b0:ee:28:dd:3e:4d:57:6d:73:3d:da:85:
14:30:18:50:ad:e3:c3:80:97:50:a4:46:6b:fe:6d:06:46:27:
6a:88:3a:47:e6:c3:22:a3:aa:85:fd:1f:13:79:93:ae:4e:8e:
10:19:e2:0e:6c:4d:e6:4d:f5:fe:9e:a2:07:c4:c2:ba:2c:1d:
b6:cd:14:f3:fe:c8:99:b4:15:ae:c7:61:7b:a3:fb:63:ce:d7:
55:0a:b7:07:aa:7f:90:29:4d:d6:2d:de:a6:f2:c4:2d:34:aa:
56:f1:48:86:fd:06:79:0a:1d:d7:ae:14:8c:62:6d:37:5b:52:
8b:aa:d7:47:30:13:e9:e5:22:51:a9:d1:25:5f:80:0a:6c:c2:
85:d4:4f:27:5b:72:27:b4:80:d3:8e:9e:16:bb:17:f5:8d:e5:
6a:f2:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:41 2025 by rpki-client