Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1C2DF8C41511EFBFB8A689762E951A.roa
File: 9D1C2DF8C41511EFBFB8A689762E951A.roa (raw, json)
Hash identifier: vv82oNmw9t8ermQZtiD89Y33Zu/vB74/n1DPcnRE1Yc=
Subject key identifier: 5E:C6:46:8F:D8:D6:59:CA:62:A5:4E:85:29:E6:F1:64:93:51:80:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012957
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1C2DF8C41511EFBFB8A689762E951A.roa
Signing time: Fri 27 Dec 2024 05:44:18 +0000
ROA not before: Fri 27 Dec 2024 05:44:14 +0000
ROA not after: Fri 12 Dec 2025 05:44:14 +0000
asID: 984
IP address blocks: 154.196.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76119 (0x12957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:44:14 2024 GMT
Not After : Dec 12 05:44:14 2025 GMT
Subject: CN=676e3eb2-29ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:58:21:45:31:3a:63:8f:1c:ac:ee:6c:f6:
a3:30:5d:c7:a8:ee:00:de:44:ec:4f:b5:b9:b2:2d:
d0:fb:da:cd:58:3f:05:8e:a4:26:da:84:6c:dd:94:
06:9c:ac:f9:62:d6:ba:3c:9c:d3:74:b6:48:7a:82:
e1:af:5b:99:78:87:5a:58:24:09:ae:b9:82:03:f3:
25:3b:2d:df:8a:a2:27:be:28:eb:72:f6:ec:9d:e5:
b6:1d:d1:7d:67:e6:3d:5c:fa:e0:0e:32:c3:83:27:
82:0f:3e:25:d9:30:17:9f:4c:72:0d:08:b1:a5:7f:
83:52:9a:fc:49:c5:85:92:4d:ae:df:8d:6b:2b:ac:
71:2c:6e:4e:7b:f8:60:ae:47:51:1b:7e:47:8a:10:
8a:2e:c0:cf:4c:4a:d4:64:5e:5b:d7:0c:4c:0d:df:
1e:ee:1e:3a:90:33:34:b4:40:72:b2:28:df:03:bb:
9b:bd:4e:ac:fa:fd:47:52:ab:9c:aa:ab:40:3d:13:
94:d6:b5:0e:5d:60:ce:6b:82:ef:76:3d:9c:72:e9:
4c:54:21:3b:3f:02:4e:63:0d:5a:9d:38:49:9d:40:
1c:b2:f5:3e:b2:cd:90:63:cc:95:3d:22:bd:b0:6d:
b3:43:b0:91:e8:1a:8b:65:40:4d:f2:bb:da:f2:42:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:46:8F:D8:D6:59:CA:62:A5:4E:85:29:E6:F1:64:93:51:80:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D1C2DF8C41511EFBFB8A689762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a4:4f:71:c1:ba:af:d1:58:96:27:63:d6:02:fa:dc:4a:09:
56:55:75:0b:eb:15:80:0f:a8:82:8e:b9:e4:b4:9f:58:a6:8f:
99:7b:b0:2b:fc:6c:59:2e:58:bf:9c:e3:8c:d9:08:77:5a:fb:
26:93:6c:e0:f6:95:5e:97:0d:d3:8e:20:72:76:6d:4c:fe:25:
8a:40:0c:fb:e4:57:75:7b:78:26:00:48:36:77:70:25:c8:ba:
14:98:b4:f0:64:75:c6:df:be:c1:fa:2d:03:cd:aa:d8:ad:05:
82:a4:ee:6c:74:aa:63:ca:23:2c:10:cd:1b:1d:07:5e:73:2f:
53:25:dc:5d:97:6b:d0:1d:cb:b1:fe:b1:f8:19:09:81:05:1d:
b1:1b:dc:ed:7a:60:ca:fb:65:fd:a7:74:cf:b3:74:17:ae:43:
3b:50:0b:4b:96:d1:df:1c:aa:00:5d:99:93:77:96:5c:79:3e:
99:93:41:e9:83:0b:59:ee:46:56:1e:fd:5b:c5:ee:15:6a:e6:
19:0a:29:6a:5b:1b:f4:37:fe:52:1f:ee:53:c8:46:06:14:cb:
8e:2d:c4:7a:47:ca:93:b0:77:f2:4f:e3:3f:15:58:c7:3e:45:
44:06:5f:ce:ae:bf:ac:25:ae:77:59:d0:1a:8e:b8:62:29:92:
61:bc:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:42:54 2025 by rpki-client