Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9475E72BE9311EF85FF94A1762E951A.roa
File: A9475E72BE9311EF85FF94A1762E951A.roa (raw, json)
Hash identifier: CA0y52aFXySglARSnXkz2zPWiNaQeJJiZI25mek18bA=
Subject key identifier: 52:46:3E:74:1F:86:5F:76:D3:47:A4:46:36:49:8B:53:E4:AB:8B:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9475E72BE9311EF85FF94A1762E951A.roa
Signing time: Fri 20 Dec 2024 05:31:28 +0000
ROA not before: Fri 20 Dec 2024 05:31:24 +0000
ROA not after: Wed 10 Dec 2025 05:31:24 +0000
asID: 984
IP address blocks: 154.82.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72752 (0x11c30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:31:24 2024 GMT
Not After : Dec 10 05:31:24 2025 GMT
Subject: CN=67650130-9535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:fc:bc:46:aa:7d:72:4e:46:67:1f:d0:a3:
13:78:d3:e5:3e:9f:5e:34:8e:3e:f0:a1:9f:6b:59:
11:00:78:88:92:1c:ac:fc:4e:05:12:96:54:91:d4:
c5:39:25:9e:c9:43:06:b3:35:1c:a5:b6:cd:f3:e6:
da:c0:72:53:b7:39:03:66:0c:86:1f:3d:c4:c4:e6:
c1:5c:0d:6d:ce:6c:14:0e:68:50:0b:dd:57:d3:a2:
f5:0c:6c:eb:60:ee:8f:66:73:a0:40:6c:a5:b4:03:
92:54:1c:2b:86:e0:b3:95:91:0c:c5:dd:a5:a3:65:
1a:37:55:f3:e3:d2:ee:69:de:24:ed:6a:03:f5:d4:
4f:3e:35:d6:31:a1:9c:02:bd:b5:bf:e0:a9:1f:23:
cb:8e:91:c7:b9:36:f4:e5:8e:05:19:90:bc:dd:4a:
0c:d7:cf:48:d3:58:5a:5b:7a:1e:c2:64:bf:c8:b5:
b9:53:b3:5b:7b:2a:7a:1a:1e:61:56:64:07:25:3f:
63:b6:3e:6d:41:0d:bd:32:46:bd:b1:6b:a8:03:4e:
cd:3e:bd:aa:66:06:3d:3c:3e:39:83:60:36:a0:73:
b0:5e:4b:7c:ff:53:54:82:ff:be:b4:f5:0d:11:8e:
92:a2:23:44:16:23:cb:b6:e9:d4:00:f9:b0:64:4c:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:3E:74:1F:86:5F:76:D3:47:A4:46:36:49:8B:53:E4:AB:8B:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9475E72BE9311EF85FF94A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.202.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a3:c9:37:22:7d:d2:9a:69:e6:bf:28:1a:0f:71:d5:bf:47:
f8:ac:c5:73:73:be:aa:c9:57:c8:e9:dd:43:cb:a2:54:3f:98:
0b:b0:db:c4:2b:25:8b:31:7e:54:09:24:66:24:04:ef:72:23:
ad:2d:98:67:17:da:12:5f:ef:ea:02:a6:58:f3:b0:c3:58:5f:
22:ab:22:12:1a:78:b6:ef:47:ac:51:69:62:c0:be:d6:26:2e:
06:b1:7e:bc:29:ba:43:2c:b4:f0:33:7c:75:da:57:e9:62:5f:
15:72:59:8f:13:9b:31:b1:8a:c0:eb:d4:9c:ae:b3:f5:28:d4:
75:c0:ee:9e:b9:99:4e:30:bf:5c:b4:fa:50:b5:53:df:a7:e8:
78:3e:6d:3b:5d:0d:5d:24:16:07:55:2f:f2:3a:b0:c9:b9:d1:
8f:c2:b5:42:a3:f4:eb:86:28:7f:e4:4c:68:98:92:a6:fd:fc:
f0:5e:35:b7:d7:82:40:40:b7:8c:e0:ec:2d:8e:5b:06:c9:ea:
fe:a4:ef:01:01:6d:a4:df:24:f2:b8:d2:f5:1b:e5:8f:23:fc:
39:af:4e:6c:9d:82:87:85:ff:29:ec:5d:3f:06:d1:ab:39:f7:
69:68:12:75:ce:41:d0:a7:6b:ec:23:4c:e5:dc:32:d6:f5:ca:
38:e0:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:46 2025 by rpki-client