Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EBA7ACC1AC11EFB0FFFEA2762E951A.roa
File: 97EBA7ACC1AC11EFB0FFFEA2762E951A.roa (raw, json)
Hash identifier: 7zb3Tupof7mLXShJuqlnmDEcpfud2fdDoxiVRTdEk2k=
Subject key identifier: 64:D0:E5:A8:79:B3:B9:19:0F:84:A5:21:92:64:5C:53:C1:4A:F0:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01213F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EBA7ACC1AC11EFB0FFFEA2762E951A.roa
Signing time: Tue 24 Dec 2024 04:07:30 +0000
ROA not before: Tue 24 Dec 2024 04:07:26 +0000
ROA not after: Wed 10 Dec 2025 04:07:26 +0000
asID: 984
IP address blocks: 154.92.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74047 (0x1213f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:07:26 2024 GMT
Not After : Dec 10 04:07:26 2025 GMT
Subject: CN=676a3382-fd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:2a:66:2c:65:8c:c1:d7:af:54:cf:25:3f:
06:d2:48:e7:a5:58:de:16:21:20:60:8c:e2:91:e9:
9b:7b:65:48:83:c6:a3:81:a5:2d:c9:e3:9c:b4:13:
19:b5:23:3e:dc:99:4d:73:6f:70:6e:d9:b2:fe:56:
bc:05:a7:e8:d4:34:6b:3a:8f:7f:01:c9:b7:1b:fa:
de:e4:79:32:e0:0f:79:e6:c2:2a:ba:d2:79:eb:5d:
30:7d:5d:33:76:e3:18:fc:07:ea:2a:42:cc:c0:af:
cb:84:a1:66:65:24:6c:8d:0f:5b:6f:06:b7:c0:60:
3e:cf:9e:38:6d:26:06:0b:d1:53:83:e5:9d:16:13:
73:00:ec:cf:a6:26:db:95:f9:3b:97:93:ff:5c:fa:
4a:8d:95:ac:73:5f:7b:f9:f3:51:b3:43:74:7e:01:
8b:47:e8:6b:47:9c:ac:81:46:b4:e1:38:35:61:12:
88:f6:73:94:d4:51:1f:57:34:30:bb:e6:cc:3c:2f:
37:63:9e:c8:48:8a:23:32:5e:4d:70:41:d7:bd:5b:
4d:83:42:d0:1b:8a:75:d0:3f:c5:b8:65:0c:de:13:
e8:66:38:24:03:50:ad:f1:d6:45:20:94:cb:15:96:
18:1b:ab:aa:37:12:26:c5:7e:94:93:93:7c:48:5a:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:E5:A8:79:B3:B9:19:0F:84:A5:21:92:64:5C:53:C1:4A:F0:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EBA7ACC1AC11EFB0FFFEA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:91:5b:e0:7f:8b:3d:47:ae:3f:8b:6d:9f:3a:05:44:9b:
8e:cd:5c:b3:df:91:c1:01:74:b2:a9:83:f0:91:be:2b:ee:e6:
f6:c6:87:b6:6d:96:eb:cb:48:b9:4d:50:c8:a4:95:d0:68:f7:
e7:97:6b:2e:b9:3f:46:70:af:a6:f4:ad:63:f0:0f:bf:19:86:
2b:7a:0b:2c:e6:7e:39:04:22:3d:58:90:68:08:f7:01:81:0d:
f4:28:e6:a8:ad:d4:af:2a:70:37:7b:d2:8c:e6:2a:0f:19:13:
a3:65:3a:97:62:43:5f:3e:40:79:9e:8e:ba:7d:a3:57:ae:46:
b8:7c:12:9f:8b:12:18:4e:04:68:2b:54:b2:c4:1e:b4:da:ec:
28:a3:72:dd:90:7b:1d:86:01:65:43:ff:ba:54:8d:af:be:f2:
4e:b3:bb:8d:da:2f:17:5a:a5:49:1e:3c:29:1a:9d:2a:fd:d3:
09:fa:0b:23:e9:63:ac:f1:af:15:3e:16:65:c7:3a:71:04:7d:
e0:f4:9e:fd:fa:4d:04:79:d8:83:46:ac:f8:bc:d2:3c:20:e1:
b2:48:f9:e9:cb:30:8e:f6:5c:cb:f5:cc:f3:3c:87:c3:0a:2f:
4d:9e:0d:9e:4b:b3:80:58:53:dd:27:0e:6b:a0:ac:9e:6d:fc:
f5:6b:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:31 2025 by rpki-client