Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D0D6EAC1AA11EF9ADFE397762E951A.roa
File: 97D0D6EAC1AA11EF9ADFE397762E951A.roa (raw, json)
Hash identifier: wvEywSEBoWk2r4Duf1XLQx4uq6CRbeTr1HyXr/cQAuU=
Subject key identifier: 7B:51:4F:12:69:7E:A2:54:51:0C:B1:82:68:01:53:E1:54:54:D7:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012127
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D0D6EAC1AA11EF9ADFE397762E951A.roa
Signing time: Tue 24 Dec 2024 03:53:11 +0000
ROA not before: Tue 24 Dec 2024 03:53:07 +0000
ROA not after: Wed 10 Dec 2025 03:53:07 +0000
asID: 984
IP address blocks: 154.92.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74023 (0x12127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:53:07 2024 GMT
Not After : Dec 10 03:53:07 2025 GMT
Subject: CN=676a3027-39c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:db:08:77:d5:26:00:48:07:e8:bd:ad:67:
a6:63:6c:69:50:d0:c5:ae:0a:45:5c:02:d3:be:5e:
ff:db:9f:b5:2c:8c:b1:b4:21:6b:cd:a2:17:b1:ae:
be:31:51:31:bf:6f:98:68:06:a3:0e:99:28:9c:f9:
c2:6e:4b:c4:99:82:2c:a7:62:50:5b:bf:bb:fe:5a:
85:6d:84:1f:e1:6f:30:be:ff:b1:0f:78:85:f9:6f:
ba:ca:4e:1d:e7:be:a0:3e:b7:1b:08:f3:fb:5a:d2:
ed:c3:68:24:e1:fa:a2:25:5a:99:64:d9:f0:06:5a:
3b:25:87:83:d3:bd:d7:87:a0:10:88:c0:e3:9a:05:
42:65:e8:2e:32:17:61:b7:68:5c:89:5e:4a:73:78:
fc:99:31:5c:9c:84:8b:44:f9:4b:be:a5:8a:d3:de:
5c:ef:2c:9f:16:63:85:6c:2b:2d:42:c5:36:ec:8f:
f0:6f:ce:b6:29:af:bf:ca:82:bb:7b:54:60:a3:01:
87:88:d7:fd:b1:48:2a:fb:f1:77:59:71:14:6c:a8:
ff:cf:6b:0e:0f:7a:8a:a0:b9:da:c9:4a:ac:92:f7:
f5:98:52:e8:d1:99:34:1f:b7:b3:b5:c0:29:e2:ca:
df:bf:49:db:48:af:81:2f:c2:bc:db:35:f3:49:a4:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:4F:12:69:7E:A2:54:51:0C:B1:82:68:01:53:E1:54:54:D7:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97D0D6EAC1AA11EF9ADFE397762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:82:53:b2:c3:32:bd:b3:d1:9d:7c:e7:06:48:9c:03:61:20:
e3:3d:c4:bb:44:1e:dd:e8:e0:a8:a6:a2:52:96:8e:32:13:0b:
6c:ae:74:2d:c0:90:20:b3:85:4c:bb:bb:60:b4:8d:8a:4a:cb:
19:9a:7e:07:c1:dc:6c:df:2c:0f:a5:1b:73:6c:fc:86:50:84:
49:ff:29:a4:a4:00:6b:6c:9b:65:ab:25:0b:77:4a:34:c8:ea:
47:50:33:65:58:ed:45:84:1d:cd:0b:48:ea:69:9c:f4:43:8e:
11:a9:7d:4a:a5:55:30:68:da:27:fd:55:dc:61:26:a2:4b:c5:
f0:72:fd:8f:25:51:2f:64:8c:21:b2:c3:07:38:b9:66:b9:e0:
86:a5:50:c8:4c:cc:d3:ef:90:fe:d9:78:e3:ae:0f:65:7b:6b:
2b:e4:9b:9d:67:49:a1:38:0b:07:d4:41:3b:ae:35:da:bd:49:
4a:53:9e:18:1d:27:35:a8:49:df:8d:c8:e2:eb:d1:06:a6:f8:
cd:7b:6b:80:21:55:54:45:99:fe:e8:cd:d5:f1:cb:63:1a:3c:
49:8a:7b:16:d0:0c:42:27:5e:2c:fc:c8:f7:18:fe:a5:98:8b:
c9:42:22:2f:8f:ef:7b:21:9d:ba:c7:04:27:17:54:3b:cc:39:
47:9a:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:58 2025 by rpki-client