Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95D72EFAC5DA11EF9B3D39BA762E951A.roa
File: 95D72EFAC5DA11EF9B3D39BA762E951A.roa (raw, json)
Hash identifier: cjVv/SYG7zbVAIwiXb9tKNHLtLAflpI2GyRn01oa+ZA=
Subject key identifier: 58:DA:F3:30:2D:B5:49:AB:09:E2:71:28:66:83:7C:70:84:45:59:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95D72EFAC5DA11EF9B3D39BA762E951A.roa
Signing time: Sun 29 Dec 2024 11:46:48 +0000
ROA not before: Sun 29 Dec 2024 11:46:44 +0000
ROA not after: Fri 12 Dec 2025 11:46:44 +0000
asID: 984
IP address blocks: 154.210.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77076 (0x12d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 11:46:44 2024 GMT
Not After : Dec 12 11:46:44 2025 GMT
Subject: CN=677136a8-54f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:07:51:55:66:58:0e:5e:47:bd:c0:39:74:
c6:1a:dc:88:e9:8e:e0:8c:b4:85:0b:ee:b8:4b:c9:
b0:c9:f7:6d:e5:a7:36:8c:a8:24:16:d7:1b:87:e7:
2c:a9:99:b0:2b:c5:56:1d:aa:c7:01:f1:8a:cd:5c:
2b:d1:e3:28:5c:56:be:0b:36:ed:16:bb:a0:a2:f5:
60:2d:67:8b:ae:81:47:da:b0:4f:e9:12:6d:60:4a:
bc:d9:98:d4:81:96:d2:41:7b:c8:85:f5:73:ea:09:
a1:46:0c:3e:f4:2c:5d:70:88:35:13:fa:73:d5:74:
0f:2a:20:14:f3:77:cb:1f:62:1c:fc:0b:ae:92:f5:
07:f9:67:d4:b0:3c:db:87:17:8e:f3:de:9c:a5:0a:
5d:6a:43:7f:c3:8f:16:9c:eb:53:d2:bb:77:30:be:
ee:7a:97:29:ed:05:a9:c4:58:ef:07:0b:71:9d:62:
42:42:7b:16:b4:bb:9a:af:c1:b3:eb:7a:5d:ac:a5:
4d:c6:29:00:13:0f:ab:25:54:18:6d:34:01:aa:23:
06:6e:fa:1f:e2:74:01:f1:4f:a4:76:c7:f4:e9:95:
3d:dd:b6:19:58:3a:12:53:b3:94:06:50:06:76:8a:
4c:41:d3:a4:22:21:8b:5b:25:d1:10:39:c1:1a:7c:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:F3:30:2D:B5:49:AB:09:E2:71:28:66:83:7C:70:84:45:59:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95D72EFAC5DA11EF9B3D39BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.72.0/24
Signature Algorithm: sha256WithRSAEncryption
54:21:15:fc:f6:16:10:ec:ba:76:0b:af:4e:5e:ec:84:2a:ad:
0d:4e:ca:f5:26:fb:b5:bd:85:33:a9:21:53:d0:7f:54:c1:d5:
fd:ee:d1:3a:49:90:9e:de:c6:fe:fa:c4:66:d8:4e:20:8e:3d:
b1:b1:09:dc:b5:e3:70:4c:bc:6c:44:e0:23:aa:04:97:dd:26:
b7:9f:05:62:85:d4:d8:51:87:9a:6b:4c:f7:64:fd:0a:1f:e9:
61:e0:fa:5e:72:ab:78:ed:9e:75:3c:99:2b:e1:02:dc:bc:f5:
86:f2:14:99:db:66:63:95:95:a8:64:c8:57:dd:aa:47:5f:a9:
4a:77:31:7d:54:f1:8d:4d:e0:59:1d:89:06:c0:20:f5:61:df:
ec:42:9f:a1:84:7f:31:55:b2:01:3d:e3:1d:f4:88:bf:d7:80:
8a:6c:bd:27:45:59:56:3d:1c:7c:16:1f:f9:2e:13:82:40:8d:
19:81:3a:ab:82:f3:b7:06:ad:f0:39:ba:92:13:1d:1c:fc:d5:
5e:04:4a:42:7c:66:5b:8e:a4:dc:57:64:08:94:e8:a8:cb:50:
05:4c:16:ff:72:5e:d2:9f:19:ab:9f:62:f5:ae:51:57:e7:1b:
94:4b:df:ce:89:da:64:cc:79:03:74:15:c1:39:aa:02:ee:db:
d0:38:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:20 2025 by rpki-client