Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E51496AC1A911EF841D9E91762E951A.roa
File: 9E51496AC1A911EF841D9E91762E951A.roa (raw, json)
Hash identifier: 8koC7G+m+x+QbNyihp1s4akqB41XxrXrBq+qDN90ZD0=
Subject key identifier: 65:E9:A8:E2:4D:C3:0D:0C:A9:5D:0D:65:68:9E:C0:51:67:CB:4E:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01211B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E51496AC1A911EF841D9E91762E951A.roa
Signing time: Tue 24 Dec 2024 03:46:12 +0000
ROA not before: Tue 24 Dec 2024 03:46:08 +0000
ROA not after: Wed 10 Dec 2025 03:46:08 +0000
asID: 984
IP address blocks: 154.92.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74011 (0x1211b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:46:08 2024 GMT
Not After : Dec 10 03:46:08 2025 GMT
Subject: CN=676a2e84-674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:36:a9:c9:29:8c:44:ae:73:48:1e:9d:a9:
e6:cf:26:73:61:e6:85:0d:ba:bf:45:74:ea:ef:ff:
38:d8:9c:c2:ed:7d:9b:1f:59:64:e8:39:7a:ad:70:
e3:2b:f7:66:87:9e:15:2d:60:cb:69:d5:54:a4:1d:
da:e5:fe:5c:10:4c:f8:0a:eb:fb:11:e6:21:92:a7:
fb:61:5d:e2:ce:65:96:9d:72:fd:fd:57:e8:ab:8e:
b7:6e:e2:cc:1a:0e:8e:5d:38:dd:f6:63:aa:48:4e:
b3:fb:44:f0:3a:94:fd:8c:be:20:c7:1a:c1:23:bf:
69:91:81:eb:64:79:da:60:24:33:1a:f7:c3:40:ba:
8b:82:99:36:57:80:a7:cc:47:2b:69:28:0b:3b:23:
f3:55:d9:1f:f6:b6:cf:cd:2b:b1:3b:db:6b:21:b6:
be:b6:e7:35:6d:cd:be:87:0f:9d:e3:a5:e9:01:d6:
a6:72:15:8d:aa:77:d3:5c:07:de:2c:b1:c1:b8:fc:
d2:d4:0c:3f:73:84:bd:99:90:82:0b:31:87:1e:fb:
1a:9f:27:6d:ad:5a:c9:ef:24:d4:10:1d:e9:60:a1:
3f:c2:4d:01:38:d5:32:79:f9:a4:6d:10:b4:31:75:
3d:3c:d8:51:70:a0:9a:8e:47:d4:c9:9e:13:d1:fc:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:A8:E2:4D:C3:0D:0C:A9:5D:0D:65:68:9E:C0:51:67:CB:4E:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E51496AC1A911EF841D9E91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:33:9c:b3:9a:22:0f:1e:8a:32:a3:b3:43:80:cf:83:a2:
dc:04:91:dc:3e:9f:92:c7:9a:73:1e:c5:0d:66:59:cc:af:81:
b5:49:fa:11:2b:90:70:a8:88:64:56:51:19:93:34:d4:80:d4:
24:de:ca:38:a3:47:35:b5:7d:df:6a:9d:ab:9b:ee:2f:e8:42:
48:12:8e:0f:2a:ba:4c:74:68:5d:9c:a5:a8:7f:4e:9e:b4:01:
74:c8:4a:52:9a:3d:ee:ed:2d:19:41:4d:d4:05:a4:28:f4:25:
b5:93:da:6f:5e:21:b4:3b:af:44:ad:9c:f0:8c:59:62:a0:90:
c0:48:0b:66:a5:10:f9:62:b5:6d:a0:f4:c4:a0:aa:72:f8:c7:
21:0f:43:98:ae:ba:75:e0:21:b1:0e:6b:8f:42:71:a3:4f:67:
79:0b:d8:30:57:cb:cb:7f:67:3d:6d:5d:5b:34:7c:7d:1c:09:
43:36:25:6a:90:6e:b8:04:88:d6:8d:ac:7c:d3:aa:ff:29:56:
2e:52:26:dc:4a:fe:0c:14:ae:da:f9:a4:51:ba:a2:51:b9:45:
71:85:80:ab:84:e0:f6:44:54:8c:92:e7:97:86:a2:4a:b0:3b:
ee:c0:fb:d3:bd:f4:9c:f4:69:d4:c5:4a:8f:db:93:5e:46:22:
25:67:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:01 2025 by rpki-client