Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A48856C52611EF8DFB2C46762E951A.roa
File: 95A48856C52611EF8DFB2C46762E951A.roa (raw, json)
Hash identifier: q+gxMCY4HjrH3FrNR9MEhfji7yfb5Y+Tm6x54MEW/lM=
Subject key identifier: C4:B0:51:54:3C:DC:15:B9:EF:E6:3B:E7:26:D0:DC:F0:38:84:9C:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A48856C52611EF8DFB2C46762E951A.roa
Signing time: Sat 28 Dec 2024 14:18:18 +0000
ROA not before: Sat 28 Dec 2024 14:18:14 +0000
ROA not after: Fri 12 Dec 2025 14:18:14 +0000
asID: 984
IP address blocks: 154.204.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76683 (0x12b8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:18:14 2024 GMT
Not After : Dec 12 14:18:14 2025 GMT
Subject: CN=677008aa-d019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:ad:8f:f5:a4:ef:3c:52:fa:14:12:c3:85:
a6:21:8b:68:f2:2c:2c:1a:35:99:1f:89:a2:ae:ba:
e4:97:4a:fd:6d:79:44:c7:9e:97:e8:69:db:08:84:
29:35:55:c6:ec:90:54:f7:73:47:a4:49:18:24:9f:
58:69:d0:13:da:18:15:2a:37:2c:55:8c:25:0f:ba:
6a:a8:9c:eb:ad:c8:d1:45:80:78:6f:ee:0c:90:a2:
8d:ef:d8:82:c4:ed:7f:15:84:90:82:5f:47:89:2d:
3c:92:4a:99:67:2b:da:32:53:de:0d:03:bd:b8:c0:
de:c2:17:84:73:a6:33:2a:9a:90:03:a7:a5:3b:eb:
22:8a:34:d4:22:07:0f:c6:d8:e3:8c:7d:78:b1:7d:
1a:b1:42:35:33:b1:53:40:bd:9e:24:69:6b:21:6d:
80:4d:0f:14:db:97:67:0c:21:85:cb:73:95:dc:41:
09:62:2c:32:b9:50:b8:1d:9d:3b:65:42:98:18:29:
e1:84:34:f9:6c:27:09:b1:1e:2f:8c:e7:7a:a7:12:
3e:13:16:e2:c5:48:1c:57:d8:70:26:dd:05:74:ef:
b1:2b:ae:1b:06:21:fd:4a:35:cf:38:4c:d0:55:0f:
8b:95:c6:09:b1:20:37:32:33:92:82:9e:d4:e7:da:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B0:51:54:3C:DC:15:B9:EF:E6:3B:E7:26:D0:DC:F0:38:84:9C:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95A48856C52611EF8DFB2C46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b5:18:12:1a:2a:80:96:86:6a:a9:f9:47:1a:b1:c4:8f:1a:
54:d2:5f:e0:44:1b:9b:bc:d4:77:d0:5d:6e:35:4b:52:dd:76:
8e:6d:b5:5f:46:df:db:89:56:47:24:2d:13:18:51:f7:8c:e1:
a6:f8:5e:bf:f3:26:73:ad:f3:e6:2a:9b:92:95:e2:95:c6:0b:
7f:13:3f:98:e9:24:96:c1:7c:9f:08:be:cc:c5:c6:e8:b8:ea:
29:49:8f:cc:c8:f3:5b:52:7f:42:e4:e4:4f:3b:58:ca:aa:cd:
3b:2c:a4:8f:6a:0c:e4:2e:bf:80:36:c4:f6:97:9c:9a:1a:73:
45:d9:e6:38:6c:52:57:0c:07:ea:e3:e2:65:42:c9:35:9f:97:
da:79:7f:8c:ff:7c:2e:bc:2a:db:09:bb:69:95:56:68:09:00:
16:7a:fd:60:37:7f:7d:ef:94:0b:b1:34:9c:a4:e5:79:cc:1d:
b3:d4:e6:b1:76:01:d8:c5:03:34:22:9b:7c:39:44:df:31:8f:
6a:d9:71:df:3f:27:b7:f7:93:77:6e:f3:a1:39:5a:c0:e7:8e:
ef:53:52:4f:18:fb:d5:8c:36:93:13:05:46:c6:06:44:6f:52:
b8:60:2c:3c:37:10:a9:22:9a:04:a4:1a:b3:3f:8e:fe:86:f6:
bd:b4:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:50 2025 by rpki-client