Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9876AF66C1AF11EFA07AF9B6762E951A.roa
File: 9876AF66C1AF11EFA07AF9B6762E951A.roa (raw, json)
Hash identifier: dC7mkl9Uj72hS6V0uaL09XmoeKUz5k9WVv6p6j0dU30=
Subject key identifier: FA:6D:29:62:56:60:9A:2A:27:5F:1E:66:E4:36:DC:21:DD:91:99:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012163
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9876AF66C1AF11EFA07AF9B6762E951A.roa
Signing time: Tue 24 Dec 2024 04:28:59 +0000
ROA not before: Tue 24 Dec 2024 04:28:56 +0000
ROA not after: Wed 10 Dec 2025 04:28:56 +0000
asID: 984
IP address blocks: 154.193.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74083 (0x12163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:28:56 2024 GMT
Not After : Dec 10 04:28:56 2025 GMT
Subject: CN=676a388b-49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:c0:3a:66:27:a9:5e:ca:70:24:db:1f:53:
05:12:55:b5:02:47:f3:9a:db:3b:7f:b4:d7:3b:2f:
89:c2:14:c9:cf:da:c3:ad:ae:44:35:52:e6:4e:a4:
ba:d9:a4:98:a4:f4:aa:6e:48:0c:35:27:38:39:7d:
e6:55:8e:27:f4:50:9c:6b:67:6d:4f:bf:3f:78:af:
ad:0c:d4:66:59:c5:f2:15:f5:56:02:fe:af:12:bf:
d4:a4:66:cd:ab:ea:91:08:5b:64:db:fc:3a:58:70:
65:ca:a3:6a:99:d9:b9:45:09:bb:94:ec:66:d4:31:
c1:52:44:7e:6a:f4:aa:b0:ff:5a:a7:d4:8d:e1:51:
c9:7c:8a:91:9e:cb:71:4c:13:fd:53:dc:1b:26:99:
dc:6d:12:e9:99:ae:8e:f2:5c:53:04:33:12:ca:95:
47:02:ac:65:9f:9f:18:b5:e5:0b:08:ca:cb:20:d6:
c7:f0:1d:6b:88:b1:72:42:9f:da:4a:41:9d:41:d7:
0c:1a:1b:3d:0a:27:d7:3c:40:56:37:b3:02:bc:02:
49:c9:29:99:58:f5:f9:6a:2c:ec:51:7c:c1:16:ad:
e9:9c:59:e8:bc:9a:8c:9d:72:84:ed:20:42:fc:3f:
af:2a:d3:28:cf:0c:97:09:4c:d7:8f:64:2c:04:7f:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:29:62:56:60:9A:2A:27:5F:1E:66:E4:36:DC:21:DD:91:99:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9876AF66C1AF11EFA07AF9B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:75:46:59:b8:f4:3d:2b:e1:12:23:b7:d0:24:ab:07:95:e5:
0c:4c:51:23:b6:93:9e:e2:a3:e8:72:1e:9e:95:62:bf:4c:8c:
ed:32:9f:5c:19:39:fc:3c:4a:ec:26:96:82:15:53:15:9b:3d:
1b:50:41:f2:32:39:7f:6a:28:80:f0:e0:37:eb:4d:89:e9:c6:
c0:94:7f:89:91:98:1f:8c:47:56:16:8f:96:1a:74:5d:98:4b:
9b:27:0c:0a:a2:d6:ec:26:ab:7e:58:5e:6e:25:c2:a0:a9:c6:
7e:a7:0f:12:3c:9b:61:12:f9:4f:d1:45:8c:57:72:64:a4:4a:
4a:a4:e7:86:2b:5f:dd:16:26:83:34:a1:1e:11:1a:fd:3b:93:
e6:c8:a9:21:fa:40:c0:45:d5:c7:71:31:10:8d:79:be:32:fa:
10:16:5e:d1:45:ae:b1:e6:33:14:0d:c5:82:e2:f3:6a:2f:54:
14:f4:5b:21:10:b1:6a:a7:39:1d:ee:a3:34:6f:c7:49:80:20:
e0:b4:e5:60:a9:03:fc:a0:32:85:10:c7:6f:ec:0e:36:7b:28:
dd:06:44:35:55:ea:18:99:27:09:19:d9:1c:a1:a8:e0:d8:22:
a9:84:f9:65:83:4d:69:c4:7b:c4:7e:f9:a0:ff:16:2f:42:20:
71:61:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:02 2025 by rpki-client