Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5373AEEC26911EFAE587E62762E951A.roa
File: A5373AEEC26911EFAE587E62762E951A.roa (raw, json)
Hash identifier: KJ2mmsULID9xbeIc5+1kqm6XYPiPSGgpHGr0zjDTX1A=
Subject key identifier: 69:17:FA:14:5D:90:B4:8E:97:D4:61:56:04:09:3C:AD:E9:B4:E4:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012412
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5373AEEC26911EFAE587E62762E951A.roa
Signing time: Wed 25 Dec 2024 02:40:47 +0000
ROA not before: Wed 25 Dec 2024 02:40:43 +0000
ROA not after: Wed 10 Dec 2025 02:40:43 +0000
asID: 984
IP address blocks: 154.211.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74770 (0x12412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:40:43 2024 GMT
Not After : Dec 10 02:40:43 2025 GMT
Subject: CN=676b70af-c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:77:3e:7c:94:7a:61:1c:d5:46:11:63:86:
bc:5a:e9:f2:c1:e1:9c:08:54:a3:9e:35:c0:08:b2:
66:54:c2:6e:2e:52:99:af:f1:54:ab:b0:d3:a1:94:
dd:6e:09:18:71:56:2f:a6:ef:3f:59:10:ea:90:9b:
c4:48:52:33:8a:af:93:ab:aa:85:3f:cf:8d:47:0e:
83:bd:4b:7e:f1:e5:a7:5a:b8:50:0d:cb:36:43:7f:
b3:bb:03:79:2d:5f:10:9a:da:a6:22:58:de:45:70:
07:f5:88:59:10:03:d4:3a:f0:69:69:fe:ee:47:79:
b3:e9:48:b9:ee:d5:dc:f3:dd:ff:36:e1:c6:40:0b:
20:f1:e4:ec:1e:8b:a6:ef:59:4f:3f:c9:1c:86:ad:
52:dc:10:6a:30:a4:8d:be:65:3b:d3:f0:03:c0:34:
8f:63:3f:8d:59:64:c0:b3:dc:d2:ea:ad:f7:a1:15:
cb:a0:a0:0e:a0:34:60:aa:3a:4d:21:9b:f6:23:32:
32:da:8c:b3:aa:ae:d5:5d:2f:a1:dd:e1:f8:45:9f:
30:0c:58:65:45:4f:1f:b3:15:1a:f2:f0:20:df:9b:
6a:41:a2:bf:c2:6c:c6:22:92:7f:7c:1b:d3:94:8f:
9a:a7:ad:27:2e:ff:cf:4a:3b:4c:28:5b:b8:05:7c:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:FA:14:5D:90:B4:8E:97:D4:61:56:04:09:3C:AD:E9:B4:E4:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5373AEEC26911EFAE587E62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.149.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:29:2c:ae:88:57:c9:c9:75:8e:c0:6d:c2:79:b9:51:a4:02:
4f:34:ed:58:80:5c:2b:f3:bf:94:34:c7:84:d9:44:7b:b6:5b:
2a:d5:36:84:3e:74:f2:73:5e:d8:8d:b5:b9:a3:53:52:3e:8a:
35:f6:b9:51:01:71:f1:99:63:9f:75:11:68:ca:04:67:7c:72:
fd:ef:10:fb:27:fa:ad:65:21:b4:ba:5a:50:2a:a5:f2:a1:6e:
d4:c2:ba:e4:3b:92:f0:fd:37:e1:31:28:15:f2:cf:36:8e:94:
a1:cb:ac:4d:af:bf:74:22:f4:8b:28:d1:09:e7:db:0d:25:3b:
75:30:2e:cb:7f:ae:33:51:66:f6:19:ea:4d:24:9c:0e:1c:ad:
19:aa:8d:2e:2f:01:e9:86:1c:a6:a3:66:f9:51:94:ba:39:7f:
0a:8d:91:cb:6a:51:9a:cd:d9:c0:88:6e:49:31:e1:35:b9:42:
e4:7a:38:65:a6:34:b9:71:3e:0d:69:e7:35:94:37:b2:14:dc:
eb:e4:d7:9a:5f:92:d4:c2:5d:be:ff:09:99:f1:be:e1:2b:0e:
b5:2f:81:d3:1a:09:10:f9:bc:9b:41:e3:fc:05:90:5d:90:03:
67:25:e8:a8:82:dd:92:d0:c4:90:2f:7e:70:e2:02:8b:da:b5:
0f:8d:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client