Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD3E3CE0C40511EF963FA8A6762E951A.roa
File: AD3E3CE0C40511EF963FA8A6762E951A.roa (raw, json)
Hash identifier: Gk7cZVU6E6V9j1cgZJkXEn2ougg7oByK/gcOVhJNUSg=
Subject key identifier: 57:C9:E8:E5:02:69:72:59:91:07:D7:E4:46:2D:3E:60:7C:9A:A6:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD3E3CE0C40511EF963FA8A6762E951A.roa
Signing time: Fri 27 Dec 2024 03:50:13 +0000
ROA not before: Fri 27 Dec 2024 03:50:10 +0000
ROA not after: Fri 12 Dec 2025 03:50:10 +0000
asID: 984
IP address blocks: 154.194.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75997 (0x128dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:50:10 2024 GMT
Not After : Dec 12 03:50:10 2025 GMT
Subject: CN=676e23f5-3316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:e2:6c:23:41:b3:b6:5f:9e:17:85:af:c7:
15:9b:41:79:72:de:52:06:0d:1f:45:e6:01:dc:7d:
48:91:7e:79:bf:e6:bc:a7:9e:c7:eb:18:46:13:29:
8d:e4:90:e0:c6:79:1d:80:24:2f:5f:3a:fb:56:ec:
80:47:2f:f1:4c:7f:c3:2a:7b:ca:a0:95:35:93:3d:
0f:8e:93:3f:23:97:4a:64:2e:e9:f0:e6:ce:3d:1d:
86:40:0c:1f:a3:d3:8c:60:b7:1b:f8:9d:ff:da:1b:
a6:f6:79:a8:44:f6:d5:1a:4a:c7:5d:0c:fe:80:6e:
ab:a5:1e:89:68:f5:6b:a2:e8:b4:72:4d:62:6c:0b:
03:92:d8:72:b1:ba:7b:cf:75:81:1b:46:5c:50:b7:
6e:e7:be:c7:be:66:c7:c7:7e:59:1f:2b:6c:2b:96:
dd:18:81:7a:d2:bf:8e:eb:57:38:af:e5:8a:d0:c2:
87:03:b2:df:99:b6:76:6d:b5:f0:97:7e:08:1e:b2:
4e:ff:19:2a:bc:db:6f:53:24:fd:17:11:b1:5f:16:
1d:b2:75:71:0e:0a:e2:3a:65:c8:4d:c6:92:7b:d1:
86:32:63:8d:03:e4:50:67:35:f2:2c:d6:02:57:b4:
63:a9:a4:98:f2:19:26:ea:64:73:87:51:97:de:fa:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:E8:E5:02:69:72:59:91:07:D7:E4:46:2D:3E:60:7C:9A:A6:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD3E3CE0C40511EF963FA8A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3e:07:b1:ac:95:3a:d9:ed:81:1b:63:3e:b3:1d:89:5e:6e:
4c:7a:f8:96:24:e6:46:b0:86:c0:25:f1:c5:b5:29:81:4b:3b:
de:c5:3f:00:a0:77:bf:f3:9f:80:c2:f0:46:a0:c8:85:59:0e:
62:01:8a:68:1f:51:c2:2c:ca:a1:5c:4e:98:bf:84:b5:cd:5a:
3f:dd:d5:34:37:6b:0d:8d:a5:e9:58:20:76:b3:06:e4:26:f0:
cc:ab:43:54:7e:3b:ec:22:77:d4:dc:2d:8d:f1:15:c3:6f:1b:
fa:51:fe:f7:84:12:e0:ec:21:84:13:85:e7:9b:6f:83:95:b4:
91:69:92:aa:9d:72:d7:6b:ae:f5:3c:11:f8:ff:69:9b:a3:2b:
d9:9d:f5:5f:3f:2d:ce:5d:88:ec:5b:86:93:a4:12:59:37:ed:
ee:ec:0a:52:94:6f:b6:a1:9d:1a:28:51:30:62:4f:db:ab:b2:
b3:d6:40:16:dd:15:c6:57:9e:8a:90:28:bb:4a:a1:7c:29:0e:
4f:f1:8f:46:0f:08:44:9f:25:98:0f:d8:c1:50:35:a3:60:5e:
fb:ac:6b:55:1e:26:69:c1:f4:33:22:c3:5d:6d:44:f9:87:18:
83:ab:4c:7a:e9:45:39:a6:9e:ef:59:fc:0d:a2:d6:0f:70:a1:
e1:61:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:08 2025 by rpki-client