Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B62F35EC25711EF9352F95D762E951A.roa
File: 8B62F35EC25711EF9352F95D762E951A.roa (raw, json)
Hash identifier: PBbIgYEL+Ou0E7JQAnYp9KDl6HSlgFGnleSYXVBWbp8=
Subject key identifier: 71:2B:6B:F4:9C:22:4C:A4:A6:21:FF:45:30:2C:32:A7:DB:2A:58:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B62F35EC25711EF9352F95D762E951A.roa
Signing time: Wed 25 Dec 2024 00:31:13 +0000
ROA not before: Wed 25 Dec 2024 00:00:09 +0000
ROA not after: Wed 10 Dec 2025 00:00:09 +0000
asID: 984
IP address blocks: 154.199.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74563 (0x12343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:09 2024 GMT
Not After : Dec 10 00:00:09 2025 GMT
Subject: CN=676b5251-eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:d4:c1:12:27:49:d2:f5:5a:0c:fe:4e:76:
c3:c2:93:d0:62:9c:d1:cb:c1:4d:6d:d0:d5:c0:86:
57:27:c9:2a:ea:25:21:40:68:c6:fd:9c:90:ad:44:
91:ac:90:8c:00:70:89:78:3b:03:c0:5c:1e:bf:e9:
ff:e4:f8:43:54:c5:3c:46:c4:de:6d:0a:2e:1b:ab:
20:1f:fd:7c:90:14:1f:e8:ba:ea:27:c0:61:06:08:
03:ef:11:ee:fb:b7:d6:2c:24:55:86:f4:b4:70:10:
bf:33:61:fa:74:26:30:19:b7:f8:0f:00:b0:34:27:
fe:41:49:27:4b:13:4f:bb:a0:e0:3e:9a:7c:9c:80:
63:26:55:08:d9:91:19:bf:05:91:a7:c5:0c:73:4c:
74:1a:18:f0:33:9c:5f:4c:ce:68:23:e5:d4:8d:04:
c3:28:dd:65:8e:5d:19:6b:2c:3f:9f:2a:a7:26:f9:
c6:46:30:72:a1:60:61:5d:0d:3f:fb:ed:c9:da:cf:
f6:ca:4b:b5:35:3b:9d:9e:11:9a:74:42:5c:e4:b0:
95:cd:b4:a4:25:1a:a3:98:f0:ee:de:e0:90:dc:61:
42:7e:28:bd:72:58:7e:ad:6d:cd:67:23:b6:fa:d8:
89:cb:73:1f:a0:fe:33:67:1c:4c:37:53:55:37:e2:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2B:6B:F4:9C:22:4C:A4:A6:21:FF:45:30:2C:32:A7:DB:2A:58:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B62F35EC25711EF9352F95D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
03:22:53:78:6b:02:da:fd:30:a6:36:f7:92:85:50:16:62:67:
5e:d6:59:b7:a5:35:4c:31:62:1e:3b:5b:73:f2:49:1f:d8:d6:
f6:cc:e0:9f:77:72:ed:83:73:b3:05:1b:28:8c:51:19:fd:0c:
d0:58:e2:bf:8b:b6:12:cc:79:98:6b:6d:c0:6c:5d:a6:5e:49:
8e:e1:d2:be:93:f7:3b:2a:12:9b:3a:0a:e6:d5:db:3c:de:8c:
b0:13:c5:a9:10:55:c4:9b:ce:66:ba:23:aa:75:6a:97:10:b5:
20:57:c7:1b:2c:1e:5d:20:db:09:4d:bc:0e:99:a6:8d:48:8d:
b5:78:8b:37:78:f2:06:13:8b:13:e9:b4:6a:8b:72:a4:00:11:
51:ca:34:dd:38:31:d8:3c:d4:3c:92:23:15:6f:ec:9b:79:94:
d8:11:8e:dd:fe:2b:58:ff:3a:c7:44:6a:4b:5e:1a:50:52:75:
f8:15:14:fd:9b:ca:b5:3a:76:53:47:ea:38:06:a4:5e:b3:22:
19:22:ec:e1:9d:1d:f4:63:34:66:41:7c:65:94:45:79:6b:6a:
f4:51:a6:18:8b:c4:36:08:71:15:dc:be:e5:f6:92:18:b1:31:
37:d6:29:57:c9:51:30:93:60:b7:e2:73:1f:72:0d:92:ff:91:
e4:c7:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:40 2025 by rpki-client