Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADECA106C25A11EF9621FE72762E951A.roa
File: ADECA106C25A11EF9621FE72762E951A.roa (raw, json)
Hash identifier: w5Abvi8Cdy+gLDWwr3lYdBqf4yeKuSrnSK027wEXTuc=
Subject key identifier: 57:BC:12:8D:C1:73:E8:C9:5C:9C:A7:DF:D9:71:DC:E9:29:35:A0:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012368
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADECA106C25A11EF9621FE72762E951A.roa
Signing time: Wed 25 Dec 2024 00:53:39 +0000
ROA not before: Wed 25 Dec 2024 00:00:36 +0000
ROA not after: Wed 10 Dec 2025 00:00:36 +0000
asID: 984
IP address blocks: 154.199.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74600 (0x12368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:36 2024 GMT
Not After : Dec 10 00:00:36 2025 GMT
Subject: CN=676b5793-925b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:dc:7f:73:ff:b1:20:31:bb:ac:3b:be:0c:
8f:ad:a6:16:69:ae:fa:34:e8:a0:f0:0a:12:64:91:
a9:94:e5:ba:ae:b5:97:75:a7:b6:3e:2d:d0:06:33:
e4:9b:60:c0:e1:b7:49:40:d9:f4:16:d0:1f:a2:bd:
27:8f:9f:43:f2:c5:65:2c:3a:02:03:16:e4:ea:5f:
06:6f:24:8f:7c:34:8e:5f:8c:d1:1f:a4:e3:d8:14:
1e:ac:f0:1a:54:65:fa:ed:37:56:a8:89:2c:89:8c:
5b:68:87:13:e7:e8:33:db:94:92:7f:14:36:b5:b1:
d0:e3:bc:c9:0e:c2:63:a2:3e:79:69:c8:f9:0b:5a:
76:21:b2:b9:e6:1d:3b:94:a1:b8:d6:e3:0c:59:ac:
a4:e5:55:a0:b3:7c:9f:12:15:d3:18:13:2c:9a:95:
07:09:9c:cc:c4:28:e2:a2:19:43:f1:d1:d4:28:f8:
fb:33:df:f4:ea:91:33:f4:2f:25:84:0c:18:81:4d:
19:fa:77:ed:ab:4b:42:6d:03:56:53:41:40:67:ab:
d5:58:cc:4b:b3:e5:e3:a6:aa:a1:1a:2f:28:c8:43:
fb:72:3b:23:6c:66:fc:7c:d5:ae:5e:83:91:b2:4a:
1b:0b:8e:1d:4b:83:4f:96:c5:37:b8:0a:1c:50:aa:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BC:12:8D:C1:73:E8:C9:5C:9C:A7:DF:D9:71:DC:E9:29:35:A0:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADECA106C25A11EF9621FE72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:94:5d:9d:93:f3:ff:3d:3a:97:ba:fc:fe:c0:e8:9d:af:dc:
86:e1:0b:54:1c:37:32:79:df:62:4b:c4:8f:9b:8e:dc:13:a6:
50:35:a8:9e:12:7e:96:af:37:d5:6d:6e:36:51:c9:06:d7:66:
1f:2b:3e:b0:e1:55:ff:13:12:df:cb:ca:b9:6f:21:f3:84:d6:
74:66:aa:c8:13:18:ea:ff:c7:87:ae:7b:9f:93:0a:ac:75:e9:
fc:74:2f:ff:ae:97:0c:1c:8f:03:b7:25:00:af:ae:d9:18:b2:
6b:3c:e8:1e:87:dd:12:e5:26:19:25:45:1d:c4:41:a2:e1:ee:
b5:d8:31:83:03:42:2a:31:29:c1:81:4b:41:10:37:a0:9b:6b:
c5:05:03:a8:77:a4:cd:a9:7c:76:89:be:a7:63:96:a3:00:96:
6e:ce:fc:d0:3d:33:1b:3b:21:25:d2:36:a4:62:eb:71:eb:fc:
e8:8d:f8:2b:0f:fb:b0:ec:33:ed:e7:66:0b:a8:c0:24:1b:31:
40:1b:ee:08:08:8c:6a:93:b6:f1:2f:d6:24:1e:a6:ab:4d:45:
95:16:5d:cb:b4:66:2b:e1:32:bd:34:2c:40:52:48:1e:f9:a8:
db:d2:bc:38:09:16:c9:8b:e9:af:de:9e:86:76:54:f2:ee:5f:
c6:de:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:55 2025 by rpki-client