Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93246A10C8A011EFAC172C52762E951A.roa
File: 93246A10C8A011EFAC172C52762E951A.roa (raw, json)
Hash identifier: eQ65kdb7+ncp75pZULiWLY5M3W50fBWbxq/atoENcpM=
Subject key identifier: 63:AB:16:13:FD:AC:DE:2F:11:90:4E:96:FD:B2:5F:94:4D:51:B3:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01311A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93246A10C8A011EFAC172C52762E951A.roa
Signing time: Thu 02 Jan 2025 00:29:06 +0000
ROA not before: Thu 02 Jan 2025 00:00:02 +0000
ROA not after: Fri 12 Dec 2025 00:00:02 +0000
asID: 984
IP address blocks: 154.218.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78106 (0x1311a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:02 2025 GMT
Not After : Dec 12 00:00:02 2025 GMT
Subject: CN=6775ddd2-3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:7f:bb:2b:a4:37:bb:90:37:a5:f5:69:55:
b8:42:60:9f:31:87:46:47:68:ea:42:2f:4e:85:29:
7f:04:da:1f:70:e0:e8:ab:a2:a8:81:c1:fb:f0:98:
4c:79:55:29:d5:6e:73:cf:71:7c:f3:2c:3b:f5:15:
64:ee:da:6c:72:85:93:6a:34:0c:db:61:84:b6:51:
26:97:5e:28:19:c1:00:c8:dd:65:7b:94:27:29:ba:
50:c8:63:eb:1e:ea:aa:71:ee:8a:a3:2f:fc:46:f2:
46:f9:8c:47:b2:45:35:5b:33:b3:65:04:04:40:ca:
0c:ff:72:ab:25:90:dd:e7:2f:c4:32:c8:6a:82:9c:
7c:ee:27:b1:54:a9:c5:d4:4a:1f:73:e1:1b:fb:38:
79:bb:c5:1f:07:24:18:a6:94:14:b4:1f:f5:66:2b:
78:db:4b:5f:9c:f2:99:52:9d:95:dc:f0:e6:bd:86:
56:22:60:f3:e8:89:6a:86:88:2b:b0:92:88:49:1c:
fc:bd:48:d2:54:51:b4:db:a8:6c:31:ca:b3:ca:65:
30:24:25:17:18:46:d3:6b:68:23:da:71:c0:89:16:
88:b4:80:d2:9b:75:2b:83:93:0f:0e:5d:7c:3b:0e:
ca:6c:08:b7:11:2e:ea:50:79:96:ee:62:41:1a:43:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:16:13:FD:AC:DE:2F:11:90:4E:96:FD:B2:5F:94:4D:51:B3:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93246A10C8A011EFAC172C52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:72:db:47:92:13:e4:b9:17:57:c0:7b:3b:0f:31:d6:6b:27:
91:93:bb:6a:d3:7f:b0:46:7f:b2:bf:9b:be:4c:4e:4f:1b:fe:
86:c3:c2:61:af:f0:eb:f7:17:2d:2b:e0:10:84:69:a0:1e:fb:
2a:65:c2:5f:a3:dd:22:d9:49:00:c0:3e:8b:3d:02:bf:16:0f:
75:30:a1:1e:f9:4c:3a:46:39:19:36:0e:31:6b:18:5f:d6:45:
ed:22:84:a7:3f:10:5f:9a:6f:93:33:74:a2:27:76:7c:b8:53:
24:16:b5:3f:25:ad:a8:2d:49:3a:62:01:78:bc:8b:84:51:b0:
32:39:13:70:7c:3b:a0:c6:de:99:63:d3:a8:53:cd:8f:77:37:
2d:55:5f:8b:69:b1:39:10:b7:85:13:fd:78:3f:7d:aa:2e:9d:
4d:cf:61:6c:34:67:bd:63:3e:0d:4d:4b:d6:a2:03:d3:9c:09:
e2:d4:04:2c:f1:bd:3a:f2:0a:7e:c7:28:34:d9:91:6c:93:24:
f5:0d:ca:0b:a9:0e:1d:93:bd:db:34:f5:d2:e1:e4:0c:70:ee:
5c:78:6c:c5:df:64:e2:00:28:82:98:a0:77:78:0c:15:fc:9a:
f0:2e:26:5d:4f:00:bc:b1:5d:77:ca:fc:63:b2:25:e0:c8:87:
6c:ef:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:33 2025 by rpki-client