Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFD7E18C41011EFAB010E6C762E951A.roa
File: AAFD7E18C41011EFAB010E6C762E951A.roa (raw, json)
Hash identifier: Dog6/L2dV16EF1FDtzU+YZaZagCwJmn8xG8pHaPOvbM=
Subject key identifier: 52:C0:2F:0B:CD:32:D3:B2:D8:D2:2D:56:04:7B:1D:5C:AE:96:E6:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01294D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFD7E18C41011EFAB010E6C762E951A.roa
Signing time: Fri 27 Dec 2024 05:08:54 +0000
ROA not before: Fri 27 Dec 2024 05:08:50 +0000
ROA not after: Fri 12 Dec 2025 05:08:50 +0000
asID: 984
IP address blocks: 154.196.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76109 (0x1294d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:08:50 2024 GMT
Not After : Dec 12 05:08:50 2025 GMT
Subject: CN=676e3666-77b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:96:36:00:bb:da:08:1b:5c:3b:a5:b0:21:
96:5c:f6:4a:15:c5:8e:1a:da:54:26:4c:cf:75:52:
5c:d6:e0:1e:2a:f8:2b:24:69:17:5a:41:55:fb:a6:
58:d5:40:a3:0c:55:0e:1a:ef:e8:18:62:62:0a:14:
8e:29:db:80:bb:e2:fd:35:1e:72:ea:ab:38:97:db:
b4:38:a4:44:9a:f2:bc:a8:5c:e1:2a:29:ce:a1:27:
bc:c2:54:1a:96:e3:0f:41:4d:c8:39:fc:f7:0e:40:
e6:99:cd:0c:b9:fc:ef:b4:bd:c4:fa:93:71:e9:8e:
86:dc:19:55:2d:a5:a7:b4:b4:d1:97:96:95:49:ce:
59:c4:18:11:ce:38:73:42:33:4d:5a:31:5a:44:d3:
96:a9:4b:99:6f:e7:cd:03:9c:ee:4c:3a:32:7c:03:
9e:0c:a6:11:48:ac:e4:95:ba:fb:dc:f3:df:6f:50:
5c:ff:3d:41:86:22:dc:4c:9d:44:8b:60:a0:e4:bf:
82:c1:d9:c9:11:a0:c2:b4:22:da:4e:10:2f:a8:44:
ae:95:ad:e8:b7:0c:dc:40:94:8b:46:db:86:fc:b3:
8a:68:cc:ed:a8:29:91:e7:e3:64:11:fb:a4:45:dc:
51:42:9a:04:03:1b:4c:8b:66:cc:e8:0f:0d:c6:08:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:2F:0B:CD:32:D3:B2:D8:D2:2D:56:04:7B:1D:5C:AE:96:E6:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFD7E18C41011EFAB010E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:25:ee:27:2c:b5:b1:0a:cd:8e:3a:c9:7e:af:e3:66:33:68:
23:1c:4e:5d:af:f4:73:62:ab:21:0d:3b:6f:57:a6:c0:70:44:
10:f9:d5:61:2a:e4:36:58:b4:82:c5:26:a4:93:cb:13:4e:4d:
ae:2b:10:38:87:4e:08:fa:de:5d:36:22:9c:ea:41:23:1b:0f:
58:28:b0:3a:f6:7d:9d:64:e1:04:e4:e6:8b:99:71:d7:e0:98:
31:13:b7:d9:83:47:84:2f:9f:bb:1a:d9:3a:73:d5:18:bc:af:
bb:16:e4:d7:35:f8:a9:b0:9d:be:60:91:ed:8d:16:78:d1:df:
80:04:da:12:ec:fc:e1:ea:0e:70:6e:7b:f3:0a:d0:20:24:64:
3b:67:63:3d:46:85:06:53:0a:9d:57:e2:53:10:b6:29:e6:77:
3f:f2:72:d8:12:55:02:ea:0a:8e:87:bb:66:df:e9:62:ab:b3:
a7:41:e5:c6:a5:9c:b8:70:96:c2:b2:54:3d:28:e4:e6:fc:0e:
5d:1e:76:b8:13:c1:df:09:c9:47:52:00:89:df:a8:ee:bd:29:
b3:ca:5f:bf:0e:ef:38:c4:5e:33:34:f9:67:45:0c:f8:14:14:
99:99:a1:6e:8d:71:50:56:4b:98:b2:5f:d4:c2:e6:27:3c:a6:
01:16:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:37 2025 by rpki-client