Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/838B208AC1BB11EF8217A381762E951A.roa
File: 838B208AC1BB11EF8217A381762E951A.roa (raw, json)
Hash identifier: Nv4hzrEzN1/9PQSiRrQZ2SrSxWDq842rJnpSjmK/5pk=
Subject key identifier: 2B:27:C8:06:E9:67:51:2C:D3:A2:5D:C1:6F:3E:FA:EF:21:5F:8A:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/838B208AC1BB11EF8217A381762E951A.roa
Signing time: Tue 24 Dec 2024 05:54:18 +0000
ROA not before: Tue 24 Dec 2024 05:54:15 +0000
ROA not after: Wed 10 Dec 2025 05:54:15 +0000
asID: 984
IP address blocks: 154.193.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74225 (0x121f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:54:15 2024 GMT
Not After : Dec 10 05:54:15 2025 GMT
Subject: CN=676a4c8a-eb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:ae:a9:d2:9b:67:82:4b:d0:f6:85:ee:e3:
f2:83:75:35:8b:89:8c:da:97:b3:08:67:7d:14:bb:
9d:9d:71:28:b4:d7:47:9c:13:4d:7a:a2:80:ef:89:
6a:f1:ad:19:52:df:32:74:98:06:3e:71:fb:0a:0b:
48:76:47:26:8e:1e:6d:89:de:8e:a0:2f:fd:4c:10:
19:7a:e6:45:72:81:19:3f:c5:aa:45:86:24:06:b4:
26:9c:d5:b6:2f:ab:a3:a1:36:38:82:86:62:0b:70:
b1:b3:06:ef:c4:65:35:67:05:4a:05:0f:64:9d:1d:
da:35:b2:13:2b:c5:bf:eb:13:bc:0a:e9:31:91:d1:
8c:9b:0c:3b:71:58:4a:57:dc:0e:77:bb:a1:6c:82:
72:97:ab:14:f4:71:c7:62:ee:4a:e4:67:1d:77:9d:
69:66:25:8f:d8:7f:37:f8:ec:e0:4f:a0:0e:0f:bf:
d7:2c:da:e2:4d:ea:81:67:5f:a6:46:11:ba:9a:13:
77:c0:3b:5f:04:ec:94:91:c9:3a:cc:3c:cf:f4:8b:
32:d5:fb:1e:84:28:de:53:01:7e:53:a5:1e:af:0c:
16:2c:ec:43:0a:70:3e:ef:0f:0c:0e:29:be:bd:a1:
3b:97:d3:8f:f0:42:5b:db:ea:51:07:7e:df:14:30:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:C8:06:E9:67:51:2C:D3:A2:5D:C1:6F:3E:FA:EF:21:5F:8A:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/838B208AC1BB11EF8217A381762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.178.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b5:49:8d:5f:e4:2c:84:61:3d:9b:e6:dc:6f:92:30:80:1c:
85:03:c4:c4:04:88:f9:0e:e8:7d:94:19:c2:50:ba:19:8a:a8:
1c:14:fc:62:28:93:f4:35:24:3f:83:ba:25:f5:e3:26:a1:9e:
b5:fb:75:20:09:14:cb:51:a3:9c:18:d4:c3:97:17:d7:ae:d2:
62:0d:e6:0d:f0:63:69:ad:e5:5e:3a:bd:73:45:2d:5c:7d:c7:
70:95:3f:75:c6:c4:db:20:44:e1:f8:28:eb:df:46:bf:26:a8:
94:4d:36:9d:a6:1a:8c:ee:cb:cd:e8:04:ff:46:e0:1e:d3:c7:
33:f6:67:c5:9d:db:4e:98:21:22:39:f9:e0:9e:dd:7a:47:94:
d6:e7:2f:d4:61:8b:ff:6b:ef:33:4c:30:42:a8:8b:b0:9b:65:
9d:b7:f8:c3:8e:b4:e9:0f:02:a4:ea:29:32:68:27:46:c1:7f:
15:20:1e:3c:06:d9:a4:d4:ff:36:9d:fd:ae:d8:69:96:68:1f:
3d:85:1f:c4:01:8a:75:9b:90:93:e8:dd:47:a4:51:bb:b3:a3:
19:38:d4:d0:13:ca:c8:06:6d:0c:28:10:4e:8e:2e:70:ca:b2:
38:49:77:f9:52:1d:11:aa:77:3b:fa:83:69:bc:0a:3d:a0:9b:
76:0c:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:07 2025 by rpki-client