Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81299F64C1B711EF902F096A762E951A.roa
File: 81299F64C1B711EF902F096A762E951A.roa (raw, json)
Hash identifier: +5Z2XwcloNfyRhJCzl79WOVDLDa6iyecgVYqqVqqxzA=
Subject key identifier: 9B:9C:36:07:BF:46:60:09:6A:D5:BF:53:0F:32:D8:B3:A2:AC:F0:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81299F64C1B711EF902F096A762E951A.roa
Signing time: Tue 24 Dec 2024 05:25:36 +0000
ROA not before: Tue 24 Dec 2024 05:25:32 +0000
ROA not after: Wed 10 Dec 2025 05:25:32 +0000
asID: 984
IP address blocks: 154.193.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74177 (0x121c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:25:32 2024 GMT
Not After : Dec 10 05:25:32 2025 GMT
Subject: CN=676a45d0-fd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:81:b8:e5:b2:d8:af:4a:52:cb:f3:81:44:
f0:dd:50:d8:62:00:ae:70:3f:dd:80:74:7d:e8:5f:
81:cb:e3:c6:1f:1f:42:e4:18:18:1f:39:8e:7b:23:
59:64:04:45:df:62:05:61:19:4c:b1:47:ee:eb:23:
42:c3:4b:e3:8f:4d:bb:e5:95:e3:e7:98:81:e8:cb:
5c:3c:fc:96:c2:10:d9:df:a4:b6:e5:14:f9:5b:58:
56:87:8b:b4:d2:40:43:98:96:b8:50:71:ce:b7:ec:
98:44:73:dd:0c:1e:67:0f:5c:fa:73:5a:13:0b:9e:
8c:bf:af:be:16:d5:7c:32:da:c8:35:9f:ca:50:99:
e9:8c:69:56:19:48:6f:3e:d6:77:a0:12:5f:cc:55:
b6:70:ff:24:77:ca:a2:95:7f:84:19:53:82:49:9f:
56:f5:07:9d:97:06:93:62:50:fa:10:95:0e:1e:18:
ec:1c:6d:a3:00:d3:63:c6:6e:c4:cc:a3:ea:58:b2:
1d:3a:89:b7:46:8f:7b:08:94:60:59:66:d3:13:ec:
bb:80:44:39:af:9c:c8:fe:e0:96:15:cd:1d:3a:80:
0e:e2:6e:88:2a:c2:65:b4:49:af:c3:b5:cb:37:36:
9d:60:56:8b:24:51:95:33:8c:da:5a:a3:0e:be:16:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:36:07:BF:46:60:09:6A:D5:BF:53:0F:32:D8:B3:A2:AC:F0:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81299F64C1B711EF902F096A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.154.0/24
Signature Algorithm: sha256WithRSAEncryption
66:70:c0:74:fb:1c:a9:a7:20:59:b3:ad:89:d2:fe:27:0e:fc:
25:3b:f5:65:42:b2:7d:22:57:f1:51:37:33:de:41:d3:d2:6d:
98:98:8e:f9:81:86:2b:36:1b:2d:6d:8c:43:35:98:3a:31:a4:
11:fd:a8:2d:23:db:ec:68:d7:0e:b0:9d:2b:96:14:7f:e0:e2:
98:dd:27:f3:ba:43:f7:70:6b:39:c8:71:6c:ef:e5:31:3e:87:
64:59:7c:8e:74:27:51:db:20:97:12:e0:fe:0a:29:92:27:ba:
68:c6:c4:d9:73:74:5d:60:c1:c3:2a:3f:07:7d:60:23:8e:b5:
43:88:73:b8:55:30:12:df:87:b8:cc:f0:65:58:46:80:73:42:
d3:6d:a9:24:64:55:23:7a:21:a0:ca:a9:47:00:9c:f4:5e:e3:
18:cb:80:82:35:14:d3:6e:76:53:66:25:ec:01:b2:51:87:fd:
23:d1:6c:5b:83:d6:c3:78:7a:e9:b1:d4:ba:ce:46:9a:bd:cf:
78:97:2a:20:f5:c9:47:29:89:6b:08:24:47:9c:67:8c:7a:a5:
0e:47:aa:dd:27:45:64:2c:78:43:9d:3a:de:05:ac:1a:84:9b:
c0:35:95:af:27:0b:37:b1:44:fa:cc:d2:cf:0e:a1:c3:50:46:
11:38:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:09 2025 by rpki-client