Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818EBB2EC0CC11EFB61AD78C762E951A.roa
File: 818EBB2EC0CC11EFB61AD78C762E951A.roa (raw, json)
Hash identifier: cweidl2B0Jzbai/wrdY9Vb4Wo+5uJ+iQd8EZQCFN30U=
Subject key identifier: A1:D5:DD:23:6C:12:7B:03:51:32:2E:98:82:6B:89:74:86:02:38:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818EBB2EC0CC11EFB61AD78C762E951A.roa
Signing time: Mon 23 Dec 2024 01:23:25 +0000
ROA not before: Mon 23 Dec 2024 01:23:21 +0000
ROA not after: Wed 10 Dec 2025 01:23:21 +0000
asID: 984
IP address blocks: 154.82.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73228 (0x11e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:23:21 2024 GMT
Not After : Dec 10 01:23:21 2025 GMT
Subject: CN=6768bb8d-eabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:fb:f3:58:c1:f1:f9:fd:51:8b:e2:e3:61:
28:3c:1c:c0:a8:9a:48:52:95:6a:75:8a:3e:35:6f:
86:ab:05:8f:62:9d:79:38:1a:b2:d4:06:07:15:ec:
70:43:b4:7e:18:7f:3c:8f:63:38:5a:73:0e:4a:a9:
28:2e:c6:de:4f:3b:3c:dd:b3:42:09:c9:31:ed:b0:
12:6c:43:af:84:66:9d:14:6b:f2:1a:0d:85:6c:ba:
7f:b5:36:22:08:89:37:47:89:0a:11:af:13:22:1b:
34:57:c9:e8:ad:0e:9c:00:cf:94:ad:89:bd:35:01:
40:dc:f4:5c:cf:a0:3b:15:69:9a:4d:2b:c4:6c:35:
ce:72:5b:34:46:d4:b3:53:6c:76:2e:f3:78:12:d7:
96:12:57:1f:0c:40:71:ef:a0:7e:90:bb:5b:ff:6d:
7e:2c:65:61:72:ed:3e:5e:ac:72:2e:ba:fa:43:72:
73:bf:b6:b9:02:79:24:ab:37:97:40:d2:92:8a:11:
72:a9:4b:e1:cb:6e:3e:50:3d:66:c6:ff:e3:8a:84:
f0:37:b1:24:05:d4:44:8d:a2:48:ec:2b:ae:48:a0:
96:4a:52:d8:5a:30:44:ec:99:d7:75:fe:32:7b:d5:
2c:b6:c6:16:b9:0a:a3:c9:ec:61:db:9c:9f:ea:78:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:DD:23:6C:12:7B:03:51:32:2E:98:82:6B:89:74:86:02:38:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818EBB2EC0CC11EFB61AD78C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b2:1d:93:10:17:48:7d:c9:fa:fa:d8:9d:ca:ea:9e:eb:c7:
ad:66:3f:3c:86:0e:52:9c:8e:70:02:96:93:a4:cc:63:73:7c:
86:d2:77:bf:37:99:e0:fd:9e:e4:b3:a1:61:99:75:29:5b:dd:
9d:59:3c:f2:ca:54:b5:f7:50:d9:5b:13:3a:00:8b:db:31:26:
6b:ae:c8:c9:9f:ba:43:c8:75:94:94:90:c1:d6:51:83:1f:5d:
a4:0a:51:e5:a3:e8:02:0b:f8:84:f5:03:72:e3:05:e5:a2:08:
0f:22:62:73:54:5b:d7:ec:48:71:64:c1:48:8c:d5:40:4a:b3:
70:23:5e:06:c9:cb:2d:83:35:84:7b:a7:2d:63:8d:52:cf:50:
c9:69:84:52:6a:65:e1:d1:b1:73:75:fc:d4:f1:cd:07:58:a3:
93:cf:78:b8:58:7c:01:45:77:aa:f0:7b:ad:69:de:04:09:d8:
33:bd:a7:8b:be:41:66:a7:c7:de:a2:02:ac:21:e8:ba:26:cc:
d4:2d:23:8a:97:81:26:48:27:7e:80:c9:91:64:b5:96:3f:e0:
06:a2:e7:49:83:8b:1e:ab:9d:a6:47:20:57:ab:57:45:2f:3a:
68:16:f2:a3:72:f2:64:5f:c6:1f:33:48:ce:28:75:aa:13:35:
29:73:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:55 2025 by rpki-client