Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F675CD2C53311EFB2E38695762E951A.roa
File: 7F675CD2C53311EFB2E38695762E951A.roa (raw, json)
Hash identifier: JgsqmX+8bZHkkZyK7dUA24zJkoSUf2xg9Rhgr2rMbac=
Subject key identifier: C6:B6:91:5A:50:04:A1:4D:78:DB:3F:51:7D:56:7F:AB:C0:F9:5A:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F675CD2C53311EFB2E38695762E951A.roa
Signing time: Sat 28 Dec 2024 15:50:44 +0000
ROA not before: Sat 28 Dec 2024 15:50:41 +0000
ROA not after: Fri 12 Dec 2025 15:50:41 +0000
asID: 984
IP address blocks: 154.204.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76799 (0x12bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:50:41 2024 GMT
Not After : Dec 12 15:50:41 2025 GMT
Subject: CN=67701e54-236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:28:cb:19:96:e6:b9:84:0d:bf:71:5b:40:
d8:a6:ce:cf:62:d2:6a:19:66:63:ca:40:8a:1c:39:
8c:36:12:ed:8e:d1:27:b0:88:cf:ab:d4:7e:45:6c:
a4:e0:27:97:4e:81:54:0c:8b:0b:ff:f8:3b:2a:b4:
43:fd:5f:d3:41:e1:e4:62:a4:ba:55:ee:cb:ac:52:
5b:85:71:01:f7:2e:53:9d:d8:73:d6:26:65:b4:a0:
2d:be:d7:19:e9:0c:e6:49:df:90:2a:9e:2a:02:85:
69:71:4c:03:6b:2a:94:8c:0b:7c:d8:c8:85:36:eb:
ea:94:d2:8e:e4:62:5d:93:64:cf:d5:85:39:b5:f5:
a3:9d:54:02:f7:89:5a:63:76:85:94:16:f6:a4:bc:
b8:db:4b:9c:0b:5e:19:15:d1:fa:52:b0:8b:f5:21:
a9:ac:83:2c:5a:20:e1:06:97:92:f3:ad:00:5c:b9:
64:b7:0f:7f:aa:c8:b0:e9:c9:04:f4:15:6a:d7:09:
ab:e7:74:c5:b7:32:20:71:83:8c:9b:84:66:2a:07:
af:28:ae:06:1e:7e:13:d5:2b:28:dc:21:58:59:63:
4b:40:51:a9:d5:41:26:87:36:1e:1a:61:db:f3:a6:
eb:c8:4b:62:1d:c8:9d:89:4b:f1:f8:13:46:28:7a:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:91:5A:50:04:A1:4D:78:DB:3F:51:7D:56:7F:AB:C0:F9:5A:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F675CD2C53311EFB2E38695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:dd:ac:75:0d:8f:d2:bb:b8:a0:57:36:f1:63:b3:35:46:d3:
6f:c6:ae:20:fd:13:b2:88:e3:0a:c4:c5:26:2e:e0:fd:a5:95:
01:8c:5e:9e:f9:02:be:3d:ff:5f:6a:8d:20:8a:0f:ee:51:1e:
e5:93:02:09:4f:f6:aa:1a:55:61:3f:b3:e7:1b:3e:83:df:6b:
38:9c:a3:3c:d7:dc:12:5e:2a:fb:36:90:19:af:62:9b:24:c9:
16:c1:62:7a:e8:67:8f:1f:65:c1:ea:bf:eb:36:8c:97:c8:7e:
2e:0b:6a:67:e7:2c:7e:74:ff:3c:ab:a4:d0:5b:fd:29:20:6d:
3a:90:df:b9:15:b3:3d:fd:bd:49:29:7d:ab:95:b8:69:62:06:
d4:50:51:4d:be:24:94:d0:82:ec:39:f3:7e:9d:73:e9:ab:fa:
fa:89:bd:f4:23:8e:4a:a2:2f:31:11:4c:af:d3:6e:12:f7:94:
60:33:b0:07:81:e5:e7:c9:9d:2e:b0:f4:43:87:39:d8:24:46:
6b:6c:bb:59:8d:0a:cd:b9:50:b0:d7:87:fc:75:77:c8:70:ab:
e1:c3:2b:1c:ac:1a:5d:9c:fc:04:d4:26:5c:22:1c:ed:1c:1a:
a7:68:94:34:0f:f0:7f:1e:44:43:86:cf:01:ef:8a:d7:b7:00:
fa:08:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:51 2025 by rpki-client