Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F83D36C1DB11EFAEDB2A4C762E951A.roa
File: 91F83D36C1DB11EFAEDB2A4C762E951A.roa (raw, json)
Hash identifier: /bV5Q52CglfAdOSodAghgZnU3NRbwyl9VK+H8hGTfbU=
Subject key identifier: B4:D9:D4:A5:32:C7:22:DF:69:AB:B3:43:85:1E:75:B2:DF:5C:18:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012307
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F83D36C1DB11EFAEDB2A4C762E951A.roa
Signing time: Tue 24 Dec 2024 09:43:46 +0000
ROA not before: Tue 24 Dec 2024 09:43:43 +0000
ROA not after: Wed 10 Dec 2025 09:43:43 +0000
asID: 984
IP address blocks: 154.194.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74503 (0x12307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:43:43 2024 GMT
Not After : Dec 10 09:43:43 2025 GMT
Subject: CN=676a8252-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:c0:03:57:3d:20:8f:fb:93:cc:67:7d:b6:
d6:f4:a0:20:f0:42:a9:6e:bd:28:db:e3:83:b1:66:
3e:8e:84:e7:16:5a:89:32:53:56:90:03:b6:66:dc:
4b:e7:86:be:d7:5b:9b:0c:8e:cc:65:4f:7a:76:42:
b4:29:04:3d:3f:7d:8b:11:53:14:e2:30:0c:6b:96:
29:93:1a:fa:e5:91:7b:27:d1:8f:ba:2c:a3:90:10:
3f:96:5d:be:00:40:b4:e4:f5:1a:45:df:d6:9e:6d:
45:da:9f:6f:0c:73:be:a8:75:15:b0:c1:fd:b1:de:
a8:33:55:d4:1a:04:21:bb:36:8a:3d:01:6b:4d:7f:
a3:02:6b:0d:4e:8e:46:6a:a1:35:0e:27:94:f6:c5:
38:1c:3b:e0:d7:f4:fd:ad:c4:10:d3:95:84:c7:bd:
12:f3:08:e1:c4:57:d4:1d:05:b8:12:66:a3:5c:73:
37:63:98:22:f6:f8:02:e9:fb:fa:f2:33:c4:a8:4e:
fa:c4:0f:11:fd:89:28:6e:a5:93:64:80:d7:15:44:
e9:14:44:eb:89:bc:28:eb:f4:98:04:ce:95:f0:7d:
5f:b3:7a:e8:df:da:35:0d:30:5c:f3:30:ff:3f:ce:
e9:a4:a1:83:b9:9f:05:05:22:6b:d3:2c:0e:50:ca:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:D4:A5:32:C7:22:DF:69:AB:B3:43:85:1E:75:B2:DF:5C:18:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91F83D36C1DB11EFAEDB2A4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/24
Signature Algorithm: sha256WithRSAEncryption
60:36:3e:5b:f8:14:8a:20:d1:44:d0:5a:79:01:28:e5:ac:6e:
6b:ad:b8:da:8a:c9:49:b8:b4:85:78:b0:87:77:de:3a:f1:10:
82:62:85:59:e2:7a:41:4b:07:c6:26:43:96:e9:0c:9d:78:a9:
23:3f:20:b6:29:7f:fa:54:b5:94:9d:ae:f2:2f:cd:97:c7:d2:
03:d0:6e:f1:ea:c5:bf:e0:7b:bf:79:99:da:33:42:94:7d:dd:
3f:26:a6:b0:bd:16:ff:c9:c7:d9:62:9a:be:ed:24:ba:29:1a:
e2:83:b9:7c:aa:76:97:26:96:36:0e:07:50:52:89:2d:55:42:
9d:13:f3:27:48:4d:5b:20:f7:58:46:ba:8f:3c:b2:35:1e:5f:
82:19:21:42:42:33:5a:1e:b1:cb:a0:57:47:de:fd:83:de:3b:
0b:d7:3b:ba:5d:2d:f7:76:36:41:ea:19:1c:ac:5f:c9:6d:16:
54:96:1e:e6:f9:f9:6f:f9:e7:29:f7:6a:d8:2c:b5:d2:f3:a0:
4e:e2:7e:f9:dc:aa:19:7a:c8:aa:80:26:bc:75:45:0b:80:77:
59:d7:db:de:e5:9f:38:33:c1:13:c7:41:72:1f:86:8e:48:ab:
7e:b3:05:86:67:bf:75:86:10:f4:0f:77:35:88:98:a2:7a:7e:
4e:e4:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client