Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972509CCBE9011EFB8E23E8E762E951A.roa
File: 972509CCBE9011EFB8E23E8E762E951A.roa (raw, json)
Hash identifier: T6zT1gJnTJUjIp5GFkRXVQdAvfGWb24xPdFIwhl4zZg=
Subject key identifier: 37:58:E9:7A:83:9F:63:CA:DE:7F:5F:AD:E2:FA:15:0E:BF:4C:03:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972509CCBE9011EFB8E23E8E762E951A.roa
Signing time: Fri 20 Dec 2024 05:09:29 +0000
ROA not before: Fri 20 Dec 2024 05:09:25 +0000
ROA not after: Wed 10 Dec 2025 05:09:25 +0000
asID: 984
IP address blocks: 154.82.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72710 (0x11c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:09:25 2024 GMT
Not After : Dec 10 05:09:25 2025 GMT
Subject: CN=6764fc09-e7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:1f:90:71:2f:ed:95:7f:51:68:05:b3:1c:
8a:a8:ad:23:f1:18:7b:ef:28:70:b6:c7:26:e7:a5:
af:ae:b9:50:ef:21:4f:6b:a2:41:7c:9c:de:cb:7c:
a9:47:b2:da:f2:1f:4c:03:33:67:32:52:a8:a3:d0:
f3:78:32:c3:09:a3:6a:50:40:4d:94:7c:39:1a:cb:
9b:c7:3a:71:8c:2e:fb:65:12:08:29:d8:12:b2:ba:
07:67:f5:7d:88:80:cb:f4:10:59:f5:1d:e6:79:a5:
d0:18:4d:d3:08:a7:47:79:79:90:93:81:81:4a:f0:
ac:0e:62:76:73:4f:3d:27:52:44:6f:0e:7d:83:27:
54:9e:ac:46:42:95:b9:1b:86:ba:d4:42:7f:0c:3c:
4d:cf:89:5e:22:5b:5d:32:a5:8b:6a:bb:71:ba:d8:
54:10:3c:a6:ef:4e:11:fa:76:af:68:fd:45:d5:43:
e4:d1:24:d7:f5:db:81:fd:14:8a:e5:4e:4e:cd:ee:
35:8d:ee:e4:9e:af:86:fc:bf:97:0d:cc:4e:87:ae:
97:4c:ea:17:b2:53:f1:61:e3:50:d3:de:4c:4d:7c:
e0:a2:41:9c:e3:92:46:0b:5e:b4:89:ba:61:3e:15:
c5:a6:f3:32:03:1b:40:79:1b:17:93:e2:3e:45:63:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:E9:7A:83:9F:63:CA:DE:7F:5F:AD:E2:FA:15:0E:BF:4C:03:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/972509CCBE9011EFB8E23E8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:15:3d:ce:88:99:cf:e4:39:2b:3e:d9:25:26:4b:2f:46:7a:
57:b3:eb:f7:89:90:09:69:56:c9:b0:53:1c:47:d4:7d:dd:02:
f2:40:b1:ac:ad:cf:bf:b7:e6:c8:d3:50:c8:e8:54:7f:5f:4e:
98:19:bb:7c:83:d5:d0:e5:68:d4:66:76:90:77:b4:3f:e1:f3:
12:00:0b:cf:d1:98:2b:46:bd:9f:aa:0c:d8:33:99:45:f5:4b:
80:7e:92:fd:89:2a:0d:f3:57:ae:5e:96:05:86:79:1f:b4:ff:
d0:cf:7e:49:b0:81:22:42:fa:2e:08:72:a6:e0:56:5c:83:6a:
de:5f:3a:ae:85:98:b1:aa:67:b6:fe:eb:a6:81:b6:3b:9a:bb:
94:ac:51:23:d8:33:3a:dd:99:50:11:74:46:68:e0:70:4b:58:
32:97:29:83:35:bc:0e:80:1c:a8:7a:9d:81:fe:5c:d6:c7:23:
14:72:d6:d9:f0:23:e3:9b:36:b6:ab:fc:3b:6c:d6:85:d1:7a:
12:83:83:bd:ec:a0:ed:24:3f:73:dc:29:5b:7e:29:f2:ea:c0:
b0:ad:d9:71:a5:61:9f:8f:29:cb:ad:63:5a:8b:c0:d8:6c:b2:
67:a4:aa:e0:29:b4:96:4f:da:5a:e4:b8:b6:67:24:c0:f3:23:
fb:02:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:04 2025 by rpki-client