Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D748CF8C52A11EF8DAD385E762E951A.roa
File: 9D748CF8C52A11EF8DAD385E762E951A.roa (raw, json)
Hash identifier: N45dn0TV1+f41CgJt49dkzn3lrnogkhrTamNK0qX2AA=
Subject key identifier: 97:31:B6:70:09:E1:28:83:04:49:4B:0D:97:7D:ED:DF:2A:9F:A0:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D748CF8C52A11EF8DAD385E762E951A.roa
Signing time: Sat 28 Dec 2024 14:47:09 +0000
ROA not before: Sat 28 Dec 2024 14:47:06 +0000
ROA not after: Fri 12 Dec 2025 14:47:06 +0000
asID: 984
IP address blocks: 154.204.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76721 (0x12bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:47:06 2024 GMT
Not After : Dec 12 14:47:06 2025 GMT
Subject: CN=67700f6d-53d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:be:ea:1a:8b:f1:49:3d:81:d7:c3:8b:0c:
32:04:7d:2c:a3:89:63:0f:41:bf:34:d4:16:46:16:
64:9c:72:cb:e1:5f:28:b5:e6:1f:0c:86:34:01:77:
10:73:d8:7a:77:25:09:f4:3e:70:34:f2:ad:af:bb:
31:c0:26:bf:45:a4:cc:2e:48:73:ba:b8:5e:6a:34:
b5:5a:e6:d5:05:e6:15:2e:b6:ba:e6:21:27:b7:f4:
d0:96:22:dd:d4:62:02:89:ad:3e:b2:12:83:12:5c:
30:bc:a0:3d:8c:89:c0:07:cd:59:59:b5:28:e0:32:
91:f2:4f:fa:60:12:6d:99:5c:b6:0f:90:9a:ad:ad:
cb:6a:c4:f8:40:e6:45:4f:c3:91:9e:d2:63:ed:c9:
6a:6e:ea:6d:07:7d:81:ad:b2:15:49:d0:fe:44:ed:
de:ca:8d:87:c9:cb:14:cf:0a:6c:26:9d:f0:85:28:
08:2b:a9:80:ff:69:f5:41:51:79:4f:22:98:3d:f6:
60:d9:9c:09:bf:1a:36:64:08:14:80:50:00:ff:0d:
15:4c:91:32:79:f4:03:71:8e:39:ea:9c:d0:16:66:
d5:49:41:7b:81:46:bf:fa:7b:9c:a7:85:14:ff:71:
8d:64:be:69:f6:cf:19:e7:14:64:fc:29:dd:d7:5d:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:B6:70:09:E1:28:83:04:49:4B:0D:97:7D:ED:DF:2A:9F:A0:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D748CF8C52A11EF8DAD385E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:6f:f6:f5:51:bf:91:a0:10:d6:f4:28:88:34:90:69:0f:e4:
87:25:e3:30:7b:eb:be:df:4a:10:56:e9:1e:fc:7e:e2:3c:5f:
10:cb:62:f8:49:73:f5:74:f1:d2:2b:1e:f3:38:91:6f:5d:bb:
22:eb:2c:d9:b9:01:50:da:7e:e2:1d:93:cd:ea:b3:5d:80:bf:
fa:84:5d:79:0d:2c:ea:a5:73:a1:83:68:2c:98:5d:09:20:a2:
11:16:3a:79:d5:88:19:3a:c3:46:aa:2f:84:a0:06:ed:ac:21:
cc:90:ff:36:0d:86:92:62:cf:43:de:bc:51:db:3e:58:04:a1:
94:a6:30:d7:dd:fd:1b:85:88:c0:07:87:f9:ae:b6:e8:e7:da:
bb:27:bd:a4:44:d8:f2:99:c1:c7:14:95:a8:05:93:49:c5:69:
68:2b:1b:48:9a:81:0e:a3:10:1f:f9:63:0d:94:75:48:13:9f:
a1:66:5c:a7:f8:44:e0:11:71:f5:e0:aa:5f:c6:65:23:84:a7:
c4:ad:a7:8c:05:ca:75:13:02:7f:8f:a3:05:1c:78:a3:f1:e9:
47:12:47:7e:60:e2:e3:34:72:ba:94:96:52:34:1b:7b:a2:11:
81:73:4b:5d:ef:90:17:84:fa:47:06:c0:35:14:3e:a3:ee:34:
ba:40:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:49:32 2025 by rpki-client