Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E2B180C25511EF8DA95251762E951A.roa
File: 96E2B180C25511EF8DA95251762E951A.roa (raw, json)
Hash identifier: 7mheSY4261ojmjsD7eydpaHvjWShaHgZSHlaqfsswzw=
Subject key identifier: 79:E8:44:C9:B3:78:8F:80:93:C7:DA:39:6E:9C:79:ED:73:34:32:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01232D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E2B180C25511EF8DA95251762E951A.roa
Signing time: Wed 25 Dec 2024 00:17:13 +0000
ROA not before: Wed 25 Dec 2024 00:00:09 +0000
ROA not after: Wed 10 Dec 2025 00:00:09 +0000
asID: 984
IP address blocks: 154.199.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74541 (0x1232d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:09 2024 GMT
Not After : Dec 10 00:00:09 2025 GMT
Subject: CN=676b4f09-3903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:41:16:8e:21:77:7d:e0:ef:9b:cb:dd:e1:
df:86:90:25:27:de:0e:c6:70:e3:2c:a0:0a:db:73:
c7:30:7d:37:40:ea:ea:3a:c8:98:47:15:1d:32:fd:
29:af:91:d4:43:12:87:40:6f:c1:79:a5:12:08:77:
1b:55:a0:aa:51:64:03:9f:be:7a:b0:d2:20:9d:61:
02:fe:13:82:ab:fb:8c:c9:0c:e7:f1:74:b1:6e:9f:
9d:52:97:ab:f3:6c:18:c2:e8:47:d1:a1:5c:1f:ad:
ae:33:e1:20:1a:2f:7d:b7:08:b9:67:94:a3:70:68:
72:79:ef:25:49:c3:2d:cb:2e:2c:b5:09:ff:50:56:
f1:39:97:4e:b4:8c:67:51:b6:09:1a:55:66:91:82:
36:80:9e:84:2c:d6:2c:68:a2:14:6c:f1:5f:fa:49:
ea:fd:1d:36:8e:ac:03:56:10:d9:52:cf:1f:ed:51:
f4:e1:45:12:ba:10:3d:99:72:63:7b:ac:fa:00:e1:
90:4a:5c:42:d9:7e:0b:5f:6b:c3:63:6f:cd:bd:7c:
0d:26:f0:f5:35:51:c5:83:f3:fe:c4:a1:32:c6:f4:
28:86:b0:ee:7a:54:15:53:cd:42:88:02:34:60:54:
1e:ab:0d:91:86:f8:f4:bf:83:08:2b:6c:5f:20:95:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:44:C9:B3:78:8F:80:93:C7:DA:39:6E:9C:79:ED:73:34:32:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96E2B180C25511EF8DA95251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.35.0/24
Signature Algorithm: sha256WithRSAEncryption
41:97:c2:ed:32:41:e7:f8:61:5c:4a:35:d7:fd:1a:59:f3:e0:
14:d5:5e:4e:1c:e0:04:5a:ba:c7:19:cf:cf:54:cf:61:b2:32:
1a:2a:92:10:e7:16:0e:66:1d:e4:dd:a9:b2:ca:e9:8d:7f:40:
b8:c0:b8:e2:68:0d:b9:30:e0:9c:3c:2d:49:d5:15:f4:a4:5c:
32:19:85:77:e4:54:5c:6c:5e:89:b7:35:4b:83:86:2e:23:cf:
76:d7:d7:65:8c:1d:80:97:6d:c8:b5:78:72:05:19:dd:19:d3:
1d:e3:41:94:04:80:2f:23:aa:fc:ef:02:fc:29:ba:5f:a7:25:
c0:a0:86:81:ca:21:e1:ad:52:d9:b1:61:43:9d:e3:ac:ca:bb:
03:6a:04:aa:5d:90:4d:9f:59:fc:e3:d9:d6:a0:f7:ca:09:55:
df:88:f5:f3:b0:bb:df:6a:38:7f:ac:0c:43:96:b2:12:0a:74:
b8:37:80:6f:d9:6f:a4:91:73:ba:94:1f:4d:4c:71:fe:61:4e:
63:e2:9c:9a:96:7d:0f:cc:bb:bf:75:46:95:be:65:23:d8:5e:
62:5f:45:52:d3:91:4f:ea:dc:37:1e:cd:6e:b4:da:09:07:77:
f0:af:3f:f0:9a:ae:60:36:b3:cb:e4:8f:75:4f:b1:81:db:ea:
ba:c4:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:58 2025 by rpki-client