Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE885960C1BB11EF8270A983762E951A.roa
File: AE885960C1BB11EF8270A983762E951A.roa (raw, json)
Hash identifier: GM1eOMD1/Cxai7a3/HXCrKv4HzWFS/Bzxf0SswwLafs=
Subject key identifier: C0:B7:AE:81:6E:71:53:CF:57:47:A7:9A:E2:46:43:CD:CA:64:AA:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE885960C1BB11EF8270A983762E951A.roa
Signing time: Tue 24 Dec 2024 05:55:30 +0000
ROA not before: Tue 24 Dec 2024 05:55:27 +0000
ROA not after: Wed 10 Dec 2025 05:55:27 +0000
asID: 984
IP address blocks: 154.193.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74227 (0x121f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:55:27 2024 GMT
Not After : Dec 10 05:55:27 2025 GMT
Subject: CN=676a4cd2-d067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:d0:c8:44:85:c9:54:d7:a3:98:f4:1e:d4:
04:3e:e1:7c:e2:15:51:20:db:5a:24:7f:5a:a8:08:
74:39:94:95:65:9d:59:2f:5b:e4:94:22:b9:00:6f:
a1:5b:42:b5:32:be:c0:1e:e3:53:46:df:29:c2:44:
7a:30:f7:08:77:20:18:3d:b2:93:f4:e8:89:ff:6b:
f6:12:30:c5:8b:62:04:42:6c:99:7c:22:64:44:c4:
cc:d7:43:36:9d:b8:91:2d:49:1b:28:67:6e:bc:39:
14:b5:b4:2f:14:08:b1:6d:ca:88:f6:19:c7:f0:45:
7c:b0:a5:d3:07:7e:fc:bc:f1:e2:b7:90:40:4f:f1:
b2:c2:9d:ab:98:a3:d3:26:dd:e4:1f:e6:7a:5e:09:
a3:88:98:bc:3b:fe:7b:1f:8c:28:cb:2d:44:74:f6:
63:dc:dd:32:29:ba:e4:02:b5:df:68:5e:24:ce:05:
85:f7:40:5b:c0:9c:d4:df:e3:65:57:f7:17:d1:ea:
7f:75:88:7b:0f:ff:8f:9d:31:81:f5:ad:e5:67:c5:
f6:5c:1b:18:9d:7a:1e:72:d1:49:5f:bb:82:42:d7:
18:17:78:45:cd:73:3e:81:8c:54:8c:3e:8e:42:78:
83:ea:42:57:d2:0a:8c:dd:08:51:a9:50:68:49:c3:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:AE:81:6E:71:53:CF:57:47:A7:9A:E2:46:43:CD:CA:64:AA:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE885960C1BB11EF8270A983762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:15:10:3f:bd:4e:da:cb:e4:cc:62:b8:54:6f:02:d2:ed:c7:
85:b9:02:3f:5c:53:eb:53:25:0b:35:4b:3a:6f:68:4b:ea:97:
9c:4c:f1:a7:54:22:87:bd:9e:4d:57:84:0e:b1:ba:73:f8:16:
bd:3c:48:0b:36:bf:7d:19:01:46:17:b9:19:5e:5a:17:12:cf:
a2:d6:23:6f:fc:98:6d:4a:dc:fe:87:aa:98:70:55:01:24:43:
eb:c4:34:f0:03:cf:d3:5d:58:e1:c5:6a:3d:f3:73:e4:1c:bd:
87:45:e0:6e:f9:f8:e2:22:3a:24:ac:e9:0d:a9:a0:1f:ce:02:
92:c7:cd:10:84:0a:97:e0:5c:4c:38:88:1d:03:1c:03:98:7a:
f1:e7:85:e1:3d:03:31:78:24:69:3f:a5:ae:fa:82:91:03:b7:
44:4b:a0:27:ee:78:fb:8d:b8:57:bf:d3:a4:26:fe:29:b6:22:
e9:13:5e:77:78:ab:11:ea:3f:9a:0f:c3:6f:5e:e3:ef:7d:38:
17:a3:b0:16:64:9f:ed:a4:f5:bf:f3:13:17:bb:7a:ad:ec:e0:
7f:70:d6:8a:c2:c3:1c:cc:00:c2:57:83:88:11:86:ac:57:ee:
24:51:a8:32:b8:ee:dd:6b:7b:00:cd:a4:8a:94:39:d8:42:5e:
89:80:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:07 2025 by rpki-client