Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6770CD8C37F11EF822F0447762E951A.roa
File: A6770CD8C37F11EF822F0447762E951A.roa (raw, json)
Hash identifier: +RmKnIzquGo+y/LKaIIwXoB/4Emz9nV/atc2//vZIkI=
Subject key identifier: 22:96:58:0D:78:0C:9C:8A:8C:BF:F3:42:7D:DD:DF:96:68:41:68:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012750
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6770CD8C37F11EF822F0447762E951A.roa
Signing time: Thu 26 Dec 2024 11:50:49 +0000
ROA not before: Thu 26 Dec 2024 11:50:46 +0000
ROA not after: Fri 12 Dec 2025 11:50:46 +0000
asID: 984
IP address blocks: 154.94.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75600 (0x12750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:50:46 2024 GMT
Not After : Dec 12 11:50:46 2025 GMT
Subject: CN=676d4319-a07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:fc:29:b8:11:22:25:f7:2c:e5:de:da:93:
22:72:b6:24:2f:4a:7d:63:25:1b:45:dc:13:fe:81:
7c:33:11:ec:41:54:45:69:1b:cb:7d:3b:d0:f4:b9:
d5:a1:eb:c5:75:b5:d2:98:88:63:f6:9e:12:4b:ae:
88:72:0c:14:2a:ca:11:dd:93:7e:cf:3c:93:2e:e0:
ff:f8:87:e4:83:1b:df:b3:e4:42:97:8d:38:83:0c:
8c:cc:31:60:86:a7:cf:19:79:e4:db:8f:0d:66:22:
8d:41:62:23:99:4f:df:02:f9:f0:37:0e:ce:16:96:
85:ec:f0:a4:13:3f:01:01:5d:2f:d4:a8:c7:f8:06:
4d:ed:ec:ae:0c:b4:5a:aa:a9:9b:82:68:10:e7:02:
fd:88:58:80:ef:23:d5:9f:80:46:57:d5:10:80:51:
66:63:ea:8e:b8:f5:1c:d2:32:46:6f:87:a9:b3:d9:
c6:ad:2b:7f:a6:b7:e3:c2:2b:05:0f:ec:be:e6:4d:
ca:49:ac:ed:4e:74:0d:d6:c3:34:c6:a7:70:6b:95:
dc:ba:b9:65:ab:99:9f:0c:32:63:d1:80:1f:a2:53:
3a:e9:78:5a:34:d3:38:75:99:1e:03:a1:1f:c8:9f:
90:5b:41:54:56:a6:18:09:0c:e7:08:ad:42:aa:bf:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:58:0D:78:0C:9C:8A:8C:BF:F3:42:7D:DD:DF:96:68:41:68:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6770CD8C37F11EF822F0447762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
59:16:86:22:48:da:70:f0:15:20:82:5a:f0:8e:d6:15:9d:98:
37:44:b2:30:41:43:3b:f3:e3:4a:29:42:0e:0d:d6:08:7e:91:
0d:04:51:59:27:96:5f:c2:1b:0c:b5:87:1f:0b:54:10:1f:17:
a9:15:1b:ad:c0:19:a8:d8:14:39:ee:9e:a6:4b:ea:ed:f2:4b:
20:83:10:77:6f:1b:93:cc:9c:30:48:22:93:48:9a:54:97:a2:
07:0a:e3:b0:28:a5:61:8d:fb:dc:07:98:05:05:25:f7:93:16:
1f:de:ba:3c:23:c3:95:dd:14:75:79:85:ec:85:56:f7:fb:59:
76:85:22:1f:1b:64:63:41:dd:e4:0b:68:ab:b9:0e:5c:f4:43:
37:e3:c5:a9:42:48:bf:2d:8e:7c:3c:49:29:f5:04:fa:b5:9e:
ed:dd:ef:4b:4a:eb:16:c6:cb:58:ef:de:52:7f:eb:7c:00:45:
d5:71:92:63:44:d8:d3:50:b0:d2:7f:13:5d:b8:c6:3a:b3:94:
9e:18:b7:8e:e9:53:94:ed:3c:18:b4:4e:68:f0:b2:7a:60:35:
9b:61:f1:51:de:dc:cc:1e:56:ad:29:cf:f0:3f:5d:85:0b:ea:
e6:3b:cf:45:2b:49:31:06:8a:c4:92:44:a6:c8:88:31:40:d1:
cc:79:bf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:17:27 2025 by rpki-client