Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3FD6B8C26011EF8C9E9D9D762E951A.roa
File: 8B3FD6B8C26011EF8C9E9D9D762E951A.roa (raw, json)
Hash identifier: w7G+yjCd8QIqiNOaYlIraYgv6ahnf4GZWropJb88okg=
Subject key identifier: FA:65:C7:40:27:5A:93:49:6E:84:A4:39:65:3C:47:06:4F:68:04:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3FD6B8C26011EF8C9E9D9D762E951A.roa
Signing time: Wed 25 Dec 2024 01:35:38 +0000
ROA not before: Wed 25 Dec 2024 01:35:34 +0000
ROA not after: Wed 10 Dec 2025 01:35:34 +0000
asID: 984
IP address blocks: 154.199.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74668 (0x123ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:35:34 2024 GMT
Not After : Dec 10 01:35:34 2025 GMT
Subject: CN=676b616a-7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:98:e8:19:1e:67:b1:1e:e4:df:95:31:66:
76:bb:ec:56:3c:a7:b9:9a:a0:08:2e:e9:70:6f:0c:
35:8a:43:77:7c:af:47:82:c5:c5:6f:d7:87:96:66:
8f:ba:9c:49:59:f9:17:dc:5d:5a:6e:6a:85:f3:cf:
0f:71:8b:84:7a:03:0f:c3:66:93:d8:fc:5a:b1:cd:
15:64:70:e2:88:d1:78:87:7f:ea:90:f1:84:af:73:
4b:5b:3a:b6:8d:b4:21:01:45:55:ab:e4:25:7e:4d:
bc:eb:6e:33:bf:1c:d5:ad:f8:5a:61:f0:5f:77:5d:
67:08:08:89:7d:08:b2:0a:88:e6:57:32:1c:b3:48:
d1:60:55:57:f7:ad:b7:92:95:61:e6:0a:4d:c3:c0:
8f:d3:31:93:9a:a3:8e:00:ca:af:49:84:34:84:5e:
21:39:68:f7:6b:29:af:c8:d3:c7:82:c5:83:05:42:
4f:6c:ba:81:1e:57:83:40:41:d8:9d:ba:82:61:cf:
45:cc:6a:e4:90:82:15:53:ee:52:d2:4e:9c:ad:4f:
c2:86:45:96:e6:f3:03:0b:d9:65:94:5c:8b:7e:3c:
c1:94:ab:c2:55:e5:90:14:20:b0:4b:29:31:72:b2:
4d:e5:54:7d:ba:6a:0c:50:56:07:e9:b8:a7:c2:5c:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:C7:40:27:5A:93:49:6E:84:A4:39:65:3C:47:06:4F:68:04:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3FD6B8C26011EF8C9E9D9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:69:38:02:41:a2:4e:f8:67:c2:78:90:d5:50:78:08:b1:2f:
75:22:6c:fa:b1:08:76:14:2c:0b:95:7f:2e:56:79:86:76:9b:
14:a6:19:20:be:b4:0c:02:ba:63:f8:5d:51:d3:fe:1f:1f:43:
97:d6:a0:a8:6d:1d:38:b4:4f:8b:c2:03:02:21:d5:59:37:56:
92:88:2f:73:b4:b1:b9:ca:3b:b6:37:85:cf:40:23:1b:12:ec:
48:b3:63:29:ff:6d:53:68:2c:8d:ee:7a:cb:f0:82:98:14:6f:
fe:16:b9:91:4d:ed:aa:74:2f:8c:ca:ab:5f:51:fc:3f:8c:fb:
48:87:17:a8:df:a8:87:5b:42:84:ad:dc:b0:e3:57:41:32:69:
13:49:95:a6:c5:33:6c:16:8d:3d:77:b2:12:6e:28:b6:cb:68:
c9:66:2d:dd:fd:17:43:2b:82:b7:e4:2f:f0:48:11:4f:c0:4d:
2f:f8:75:66:07:5c:63:17:d6:6f:6b:12:3c:13:00:20:86:0b:
38:d5:c8:f1:87:8d:09:0a:b8:0c:67:0b:4c:de:b9:58:0f:2a:
5e:09:2e:8e:cf:47:aa:bc:99:87:19:2f:90:65:fa:91:be:66:
6b:20:2c:2e:f6:4c:11:fa:66:3b:87:e7:0e:5f:56:b9:84:08:
a2:28:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:14 2025 by rpki-client