Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A479F4C54D11EF8C97CCB8762E951A.roa
File: A2A479F4C54D11EF8C97CCB8762E951A.roa (raw, json)
Hash identifier: eWKO/OS6DEp/2gM0MfPxuSxa1EWvBG2klQLSRyyFw7I=
Subject key identifier: 2D:01:EA:64:6E:2A:9A:42:41:EB:E5:0B:65:94:1B:81:2B:1C:5C:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A479F4C54D11EF8C97CCB8762E951A.roa
Signing time: Sat 28 Dec 2024 18:57:50 +0000
ROA not before: Sat 28 Dec 2024 18:57:47 +0000
ROA not after: Fri 12 Dec 2025 18:57:47 +0000
asID: 984
IP address blocks: 154.209.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77041 (0x12cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:57:47 2024 GMT
Not After : Dec 12 18:57:47 2025 GMT
Subject: CN=67704a2e-1583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:f9:d9:7d:41:3b:67:b6:2b:f7:98:62:88:
42:ee:f3:23:53:11:73:60:2a:92:9f:13:e5:b1:9b:
b6:b4:c2:e8:e4:c1:0e:e2:34:2d:5f:53:f6:06:10:
8c:67:a8:23:ec:c8:93:6d:da:a6:ad:26:c0:5f:9e:
f4:65:41:af:dd:71:44:ae:89:9b:da:de:ca:88:a4:
10:3e:58:c2:fc:7b:1d:b3:f4:24:c5:cc:e0:4d:04:
89:e5:04:64:50:6e:2e:3d:61:f4:89:31:f2:f5:60:
39:48:af:1a:ed:32:38:50:b3:75:49:d2:70:80:b5:
57:ea:bd:eb:ae:80:04:99:59:80:e6:6b:29:15:a5:
cd:14:35:0f:3c:6a:55:e4:cb:ed:5e:c5:06:71:2f:
13:f3:c8:d0:53:7e:e5:d4:c8:5d:80:b8:19:86:26:
7e:28:5f:53:d6:c1:7f:f8:20:7a:34:36:84:08:77:
af:54:bf:34:d5:91:92:c1:a0:7a:8f:de:4d:07:ff:
ac:6c:37:54:51:65:6a:ac:a4:86:6c:d4:5b:b5:d1:
90:0f:30:21:2d:32:c0:7f:bf:3d:c6:53:06:d2:68:
1f:11:db:7d:62:ce:44:db:93:0d:ae:11:30:2a:fc:
a7:49:99:b7:f1:f3:02:3c:0b:55:b0:cf:01:97:b4:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:EA:64:6E:2A:9A:42:41:EB:E5:0B:65:94:1B:81:2B:1C:5C:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A479F4C54D11EF8C97CCB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5f:b4:63:7a:1e:eb:87:a2:50:d0:61:47:a5:c3:c5:90:95:
12:a8:9f:ba:c6:af:7b:3c:53:ee:ff:5e:e5:68:c0:b8:b2:1e:
92:88:21:a5:9c:10:10:83:ec:ef:05:51:d9:f1:05:0c:ed:c3:
43:09:63:45:2d:a8:fe:4e:1d:5e:51:e9:0b:cd:5c:a6:70:66:
1c:03:40:14:31:51:a3:03:05:48:a1:e4:db:a3:78:ce:ae:21:
0b:18:b5:e8:94:4d:72:9c:94:04:19:b5:8b:d0:77:22:bd:47:
05:2d:f9:31:83:d9:f0:39:d8:a5:7b:db:f2:60:ea:f3:95:f8:
63:f8:7a:e7:1b:ff:e0:52:ce:c1:1e:d3:bd:2c:77:0f:45:7c:
ae:67:34:61:b3:f4:ad:24:98:39:fe:44:a9:e2:2d:19:85:cc:
53:90:a8:ff:a3:0e:6b:58:98:3b:b3:49:54:b6:4f:88:50:1b:
14:ab:37:c7:6f:b1:6e:73:28:24:61:3b:97:0e:4b:46:99:70:
ae:f5:47:68:44:a2:1a:01:df:8d:e0:f0:b7:a5:c0:79:dd:86:
21:cd:ae:e4:27:e2:59:ae:dc:ba:65:16:4e:9c:a0:50:0e:5e:
37:2b:2e:b6:33:d1:17:b2:2a:63:46:77:fe:d1:b8:40:22:51:
46:43:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:20 2025 by rpki-client